VLAN & subinterface routing

chris.fletcher1 · ‎11-09-2016

Was going to ask this in the wireless forum but I'm assuming this is more of a routing / switching question.

I have an Aironet 1830 standalone Access Point

I've gone through the wizard and configured 2 SSID networks each in their own VLAN.

The guest WLAN is using VLAN 30

The 1830 connects to a 3750 switch. The 3750 connects to 2851 router.

The 1830 connects to 0/11 on the 3750 switch

Port 0/13 connects to port 0/1 on the 2851 router.

Both port 0/11 and 0/13 on the 3750 switch are configured as trunks with dot1q encapsulation and allow VLAN 1 and 30 to pass

I've created interface vlan30 on the 3750 switch and assigned it an IP of 192.168.80.56

I've created a sub interface on the router gi0/1.30

encapsulation dot1Q 30

ip address 192.168.80.1 255.255.255.0

I've created a DHCP pool named pool1

network 192.168.80.0 255.255.255.0

default-router 192.168.80.1

I've connected a client to the Guest WLAN and was assigned an IP address of 192.168.80.2 from the router.

Here's where I'm lost.

Shouldn't I be able to ping the sub interfaces address on the router? Pinging 192.168.80.1 yields no response from the client that is connected to the Guest WLAN. I also cannot ping 192.168.80.56 which is the IP assigned to the VLAN30 interface on the switch.

My default route on my router is 0.0.0.0 0.0.0.0 x.x.x.x (x.x.x.x being the gateway of my cable modem)

I want to be able to give access to the internet to hosts connecting to the Guest WLAN. What am I missing?

Reza Sharifi · ‎11-09-2016

Can you add a couple of exclude statements on the DHCP scope for

192.168.80.1

192.168.80.56

and test again?

HTH

chris.fletcher1 · ‎11-10-2016

I already had those as exclusions, sorry I forgot to add that to my original post.

Reza Sharifi · ‎11-10-2016

Is the client port in vlan 30 and configured as access port?

Do you see the mac address of the client on the switch/port?

Can you post "sh run" from the 3750?

HTH

chris.fletcher1 · ‎11-10-2016

The client is connected to the AP

The client gets an IP address from the router of 192.168.80.2

from the AP I can ping 192.168.80.1

The port on the switch that the AP is connected to is setup as a trunk with dot1q encapsulation and is set to allow VLAN 30 to pass.

Dennis Mink · ‎11-09-2016

Can you ping the 192.168.80.1 on the router, from the 192.168.80.56? Can you ping. 56 from your client?

eitherway, the fact that your client gets an IP address in VLAN 30 from the routers, tells me VLAN 30 is properly propagated between AP and router.

Is it just icmp that doesn't work or is it for instance telnet as well?

Please remember to rate useful posts, by clicking on the stars below.

chris.fletcher1 · ‎11-10-2016

I can ping 192.168.80.1 from the router

From the switch ping 192.168.80.1 source vlan30 is also successful.

Its not just ICMP, I've also tried telnet and I tried to do a trace route from the client to 192.168.80.1 without success. Its almost as if the client 192.168.80.2 is isolated from everything. It can ping itself but no other addresses on the 192.168.80.0 network.