Hi All I am sorry if am very limited with switches. i am still learning and this is a home lab of sorts.
I have several switches 2 layer 2 cisco and now a new (to me) layer 3 a ws-4500x-sfp+,
I configured the switch by copying info from my other switch and making the necessary changes, and i noticed i cant ping the new switch (which is on its own vlan with the other 2 switches) from my understanding my router is acting as the layer 3 aka it is doing the routing for me. and other two switches work fine. so let me quickly sum up the configuration:
cisco switch (t1/0/2) links to ws-4500x (t2/8) and my router is a virtual opnsense physically on my first switch.
here is the config for the ws-4500x:
core#sh run
Building configuration...
Current configuration : 3838 bytes
!
! Last configuration change at 18:46:48 CST Sat Feb 10 2024 by root
! NVRAM config last updated at 18:46:50 CST Sat Feb 10 2024 by root
!
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime localtime show-timezone
service password-encryption
service compress-config
service unsupported-transceiver
!
hostname core
!
boot-start-marker
boot system flash bootflash:cat4500e-universalk9.SPA.03.11.08.E.152-7.E8.bin
boot-end-marker
!
!
vrf definition mgmtVrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
!
username <removed> privilege 15 password 7 <removed>
no aaa new-model
clock timezone CST -6 0
clock summer-time central recurring
!
!
!
!
!
!
!
!
!
!
no ip routing
!
ip domain-name home.local
ip name-server 10.250.100.1
!
!
vtp mode transparent
!
!
no errdisable detect cause gbic-invalid
power redundancy-mode redundant
!
spanning-tree mode pvst
spanning-tree extend system-id
no spanning-tree vlan 1
!
vlan internal allocation policy ascending
!
vlan 10
name Camera
!
vlan 15
name WAN_VLAN
!
vlan 16
name WAN_Cell
!
vlan 20
name SwitchVLAN
!
vlan 30
name IntExpVLAN
!
vlan 40
name AdminVLAN
!
vlan 50
name IOT_VLAN
!
vlan 60
name VOICE
!
lldp run
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet1
vrf forwarding mgmtVrf
no ip address
no ip route-cache
speed auto
duplex auto
!
interface TenGigabitEthernet1/1
!
interface TenGigabitEthernet1/2
!
interface TenGigabitEthernet1/3
!
interface TenGigabitEthernet1/4
!
interface TenGigabitEthernet1/5
!
interface TenGigabitEthernet1/6
!
interface TenGigabitEthernet1/7
!
interface TenGigabitEthernet1/8
!
interface TenGigabitEthernet1/9
!
interface TenGigabitEthernet1/10
!
interface TenGigabitEthernet1/11
!
interface TenGigabitEthernet1/12
!
interface TenGigabitEthernet1/13
!
interface TenGigabitEthernet1/14
!
interface TenGigabitEthernet1/15
!
interface TenGigabitEthernet1/16
!
interface TenGigabitEthernet2/1
!
interface TenGigabitEthernet2/2
!
interface TenGigabitEthernet2/3
!
interface TenGigabitEthernet2/4
!
interface TenGigabitEthernet2/5
!
interface TenGigabitEthernet2/6
!
interface TenGigabitEthernet2/7
switchport trunk allowed vlan 1,10,16,20,30,40,50,60
switchport mode trunk
switchport nonegotiate
spanning-tree portfast edge trunk
!
interface TenGigabitEthernet2/8
switchport trunk allowed vlan 1,10,16,20,30,40,50,60
switchport mode trunk
switchport nonegotiate
!
interface Vlan1
description Default
no ip address
no ip route-cache
!
interface Vlan10
description Camera
no ip address
ip pim dense-mode
no ip route-cache
!
interface Vlan15
description WAN_VLAN
no ip address
no ip route-cache
!
interface Vlan16
description WAN_Cell
no ip address
no ip route-cache
!
interface Vlan20
description SwitchVLAN
ip address 10.250.100.4 255.255.255.0
no ip route-cache
!
interface Vlan30
description IntExpVLAN
no ip address
no ip route-cache
!
interface Vlan40
description AdminVLAN
no ip address
no ip route-cache
!
interface Vlan50
description IOT_VLAN
no ip address
no ip route-cache
!
interface Vlan60
description Voice
no ip address
no ip route-cache
!
ip default-gateway 10.250.40.1
ip forward-protocol nd
ip http server
ip http banner
no ip http secure-server
ip ftp username <removed>
ip ftp password 7 <removed>
ip ssh version 2
!
!
!
!
!
!
line con 0
password 7 <removed>
logging synchronous
login local
stopbits 1
line vty 0 4
password 7 <removed>
logging synchronous
login local
transport input ssh
line vty 5 15
password 7 <removed>
logging synchronous
login local
transport input none
!
ntp source Vlan20
ntp server 10.250.100.1
!
end
Now here is the odd part if i assign an ip on my admin vlan which is where my computer is sitting on i am then able to access the switch on both the admin ip and the switch ip (10.250.100.4). it sounds like a routing issue but i can see where it is.
