cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
406
Views
0
Helpful
3
Replies

VLAN 1 is being working (pinging) but Others VLAN are not working (pinging)- Urgent

Ibrahim Bhuiyan
Beginner
Beginner

I can ping from L3 switch (from Default vlan1) to ASA Firewall port  but If I ping from others any VLAN of L3  switch (Like 2,3,4,10,100,101, etc.) then I cant ping. I cant understand what is the problem. Status and Line protocol both are up. 

 

Configuration below:

int vlan1
ip add 192.168.3.11 255.255.255.248
no sh
int gi 0/0
switchport trunk allowed vlan 1
switchport trunk encapsulation dot1q
switchport mode trunk

>>>>>>This are working

.............................................................

int vlan101
ip add 192.168.3.11 255.255.255.248
no sh
int gi 0/0
switchport trunk allowed vlan 101
switchport trunk encapsulation dot1q
switchport mode trunk

>>> This are not working

3 Replies 3

Matt Delony
Cisco Employee
Cisco Employee

Hello Ibrahim Bhuiyan,

 

There's not enough information to determine the cause of the problem.

 

Can you let me know the topology? Is it like this? L3 switch (G0/0)<------> ASA

 

Is the ASA expecting untagged packet from L3 switch? I believe working config would be untagged as vlan 1 is default native vlan and non-working config would use 802.1q tag.

balaji.bandi
VIP Guru VIP Guru
VIP Guru

you need to rest of the VLAN to be allowed in trunk or remove allowed VLAN so it allow all.

 

 

int gi 0/0
switchport trunk allowed vlan 1   <-- add rest vlan here
switchport trunk encapsulation dot1q
switchport mode trunk

 

or 

 

 

int gi 0/0
no switchport trunk allowed vlan 1
switchport trunk encapsulation dot1q
switchport mode trunk

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

JoeyJoe
Beginner
Beginner

Hi Ibrahim,

 

If you perform show int trunk you will be able to see the vlans allowed in this connection.

 

As mentioned by BB, you need to add the remaining vlans to the list of allowed vlans. You can perform switchport trunk allowed vlan add 2,3,4,10,100,101, etc. to achieve that (as vlan 1 seems to be working already).

 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers