Hi, I've got a network set up in a hierarchical design and want to get the PCs on the access layer to be able to ping the routers at the core layer. Currently they can all ping each other, within and outside their VLANs, but cannot ping any further than this.  I'll include a config of the switches/router below. All the devices at each layer have the same setup, so I'll just include one for each. If anyone could give me any pointers, that'd be great. I'm still pretty new to this, I've tried a few things but I haven't made any progress for a while. Thanks -Stuart   Switches: interface Port-channel1 switchport mode trunk ! interface FastEthernet0/1 switchport mode trunk channel-group 1 mode active ! interface FastEthernet0/2 switchport mode trunk channel-group 1 mode active ! interface FastEthernet0/3 switchport mode trunk ! interface FastEthernet0/10 switchport access vlan 10 switchport mode access ! interface FastEthernet0/11 switchport access vlan 20 switchport mode access       Multilayer Switches: interface Port-channel1 switchport trunk encapsulation dot1q switchport mode trunk ! interface Port-channel2 switchport trunk encapsulation dot1q switchport mode trunk ! interface Port-channel3 switchport trunk encapsulation dot1q switchport mode trunk ! interface Port-channel4 switchport trunk encapsulation dot1q switchport mode trunk ! interface Port-channel5 switchport trunk encapsulation dot1q switchport mode trunk ! interface FastEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk channel-group 1 mode active ! interface FastEthernet0/2 switchport trunk encapsulation dot1q switchport mode trunk channel-group 1 mode active ! interface FastEthernet0/3 switchport trunk encapsulation dot1q switchport mode trunk channel-group 2 mode active ! interface FastEthernet0/4 switchport trunk encapsulation dot1q switchport mode trunk channel-group 2 mode active ! interface FastEthernet0/5 switchport trunk encapsulation dot1q switchport mode trunk channel-group 3 mode active ! interface FastEthernet0/6 switchport trunk encapsulation dot1q switchport mode trunk channel-group 3 mode active ! interface FastEthernet0/7 switchport trunk encapsulation dot1q switchport mode trunk channel-group 4 mode active ! interface FastEthernet0/8 switchport trunk encapsulation dot1q switchport mode trunk channel-group 4 mode active ! interface FastEthernet0/9 switchport trunk encapsulation dot1q switchport mode trunk channel-group 5 mode active ! interface FastEthernet0/10 switchport trunk encapsulation dot1q switchport mode trunk channel-group 5 mode active ! interface FastEthernet0/15 no switchport ip address 192.168.1.5 255.255.255.0 duplex auto speed auto ! interface FastEthernet0/24 switchport trunk encapsulation dot1q switchport mode trunk channel-group 5 mode active ! interface GigabitEthernet0/1 no switchport ip address 10.1.1.1 255.255.255.252 duplex auto speed auto ! interface GigabitEthernet0/2 ! interface Vlan1 no ip address shutdown ! interface Vlan10 mac-address 0002.1658.5d01 ip address 192.168.10.1 255.255.255.0 ! interface Vlan20 mac-address 0002.1658.5d02 ip address 192.168.20.1 255.255.255.0 ! interface Vlan30 mac-address 0002.1658.5d03 ip address 192.168.30.1 255.255.255.0 ! interface Vlan40 mac-address 0002.1658.5d04 ip address 192.168.40.1 255.255.255.0 ! interface Vlan99 mac-address 0002.1658.5d05 ip address 192.168.99.1 255.255.255.0 ! router ospf 1 log-adjacency-changes network 192.168.1.0 0.0.0.255 area 0 ! ip classless       Router: interface GigabitEthernet0/0 no ip address duplex auto speed auto shutdown ! interface GigabitEthernet0/1 ip address 192.168.1.1 255.255.255.0 duplex auto speed auto standby version 2 standby 1 ip 192.168.1.254 standby 1 preempt ! interface Serial0/0/0 ip address 10.1.1.1 255.255.255.252 clock rate 128000 ! interface Serial0/0/1 no ip address clock rate 2000000 shutdown ! interface Vlan1 no ip address shutdown ! router ospf 1 log-adjacency-changes network 192.168.1.0 0.0.0.255 area 0 network 10.1.1.0 0.0.0.3 area 0 ! ip classless   I have HSRP set up with the routers, so their virtual IP is 192.168.1.254. This shouldn't affect my ability to ping, should it?   ... View more

Hi, I've been trying to setup inter vlan routing using a multilayer switch, however I'm having some trouble getting it working. I've followed a couple of tutorials I've read online but still can't get it to work. It will ping within the same vlan, but not across different vlans.  One thing I've been unable to do is use the 'switchport trunk encapsulation dot1q' command on the layer 2 switch trunk ports. I'm not sure what this command does though, so I don't know if it's needed. Can anyone help with this?   Here are the configs for the two layer 2 switches and the multilayer switch: Switch1: interface Port-channel1 switchport mode trunk ! interface FastEthernet0/1 switchport mode trunk channel-group 1 mode active ! interface FastEthernet0/2 switchport mode trunk channel-group 1 mode active ! interface FastEthernet0/10 switchport access vlan 10 switchport mode access ! interface FastEthernet0/11 switchport access vlan 20 switchport mode access ! interface Vlan1 no ip address shutdown ! interface Vlan10 mac-address 0001.97c3.a001 ip address 192.168.10.1 255.255.255.0 ! interface Vlan20 mac-address 0001.97c3.a002 ip address 192.168.20.1 255.255.255.0 ! interface Vlan30 mac-address 0001.97c3.a004 ip address 192.168.30.1 255.255.255.0 ! interface Vlan40 mac-address 0001.97c3.a005 ip address 192.168.40.1 255.255.255.0 !     Switch 2: interface Port-channel2 switchport mode trunk ! interface FastEthernet0/1 switchport mode trunk channel-group 2 mode active ! interface FastEthernet0/2 switchport mode trunk channel-group 2 mode active ! interface FastEthernet0/10 switchport access vlan 10 switchport mode access ! interface FastEthernet0/11 switchport access vlan 30 switchport mode access ! interface Vlan1 no ip address shutdown ! interface Vlan10 mac-address 0007.ecc6.3901 ip address 192.168.10.1 255.255.255.0 ! interface Vlan20 mac-address 0007.ecc6.3902 ip address 192.168.20.1 255.255.255.0 ! interface Vlan30 mac-address 0007.ecc6.3903 ip address 192.168.30.1 255.255.255.0 ! interface Vlan40 mac-address 0007.ecc6.3904 ip address 192.168.40.1 255.255.255.0 !     Multilayer Switch: interface Port-channel1 switchport trunk encapsulation dot1q switchport mode trunk ! interface Port-channel2 switchport trunk encapsulation dot1q switchport mode trunk ! interface Port-channel3 switchport trunk encapsulation dot1q switchport mode trunk ! interface Port-channel4 switchport trunk encapsulation dot1q switchport mode trunk ! interface FastEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk channel-group 1 mode active ! interface FastEthernet0/2 switchport trunk encapsulation dot1q switchport mode trunk channel-group 1 mode active ! interface FastEthernet0/3 switchport trunk encapsulation dot1q switchport mode trunk channel-group 2 mode active ! interface FastEthernet0/4 switchport trunk encapsulation dot1q switchport mode trunk channel-group 2 mode active ! interface FastEthernet0/5 switchport trunk encapsulation dot1q switchport mode trunk channel-group 3 mode active ! interface FastEthernet0/6 switchport trunk encapsulation dot1q switchport mode trunk channel-group 3 mode active ! interface FastEthernet0/7 switchport trunk encapsulation dot1q switchport mode trunk channel-group 4 mode active ! interface FastEthernet0/8 switchport trunk encapsulation dot1q switchport mode trunk channel-group 4 mode active ! interface GigabitEthernet0/1 no switchport ip address 10.1.1.1 255.255.255.252 duplex auto speed auto ! interface GigabitEthernet0/2 ! interface Vlan1 no ip address shutdown ! interface Vlan10 mac-address 0002.1658.5d01 ip address 192.168.10.1 255.255.255.0 ! interface Vlan20 mac-address 0002.1658.5d02 ip address 192.168.20.1 255.255.255.0 ! interface Vlan30 mac-address 0002.1658.5d03 ip address 192.168.30.1 255.255.255.0 ! interface Vlan40 mac-address 0002.1658.5d04 ip address 192.168.40.1 255.255.255.0 !   Here's the section of the topology I'm configuring:   Thanks, -Stuart ... View more

Hello, I'm fairly new to this, so I apologise if the solution is obvious. I'm trying to get the two PCs in vlan10(green) to communicate with each other, however I'm not sure how to do this with a third multilayer switch between them. The multilayer switch is on the distribution layer whilst the standard switches are at the access layer. I could get it working with a connection between just the layer 2 switches, but could anyone help me with the multilayer switch between? I've included a screenshot of the topology as well as what I've configured so far below.   Switch 1: interface Port-channel1 switchport mode trunk ! interface FastEthernet0/1 switchport mode trunk channel-group 1 mode active ! interface FastEthernet0/2 switchport mode trunk channel-group 1 mode active ! interface FastEthernet0/10 switchport access vlan 10 switchport mode access ! interface FastEthernet0/11 switchport access vlan 20 switchport mode access ! interface Vlan1 no ip address shutdown ! interface Vlan10 mac-address 0001.97c3.a001 ip address 192.168.10.1 255.255.255.0 ! interface Vlan20 mac-address 0001.97c3.a002 ip address 192.168.20.1 255.255.255.0 !   Switch 2: interface Port-channel2 switchport mode trunk ! interface FastEthernet0/1 switchport mode trunk channel-group 2 mode active ! interface FastEthernet0/2 switchport mode trunk channel-group 2 mode active ! interface FastEthernet0/10 switchport access vlan 10 switchport mode access ! interface Vlan1 no ip address shutdown ! interface Vlan10 mac-address 0007.ecc6.3901 ip address 192.168.10.1 255.255.255.0 ! interface Vlan20 mac-address 0007.ecc6.3902 ip address 192.168.20.1 255.255.255.0 !   The multilayer switch has no VLAN configuration yet. The only configuration is for the etherchannel links.   Any help would be greatly appreciated -Stuart ... View more

Hi, I've configured a VPN tunnel between two routers via a third, but am having some trouble using the tunnel.   In this scenario I have two sites connecting via a VPN through a third router acting as an ISP, however when issuing a traceroute it comes up as having passed through the ISP router. Would I be correct in thinking that a functioning tunnel would not show this middle step in the traceroute? This makes me think the tunnel is not being used and it is just using OSPF which I'd already set up between the three routers.  If anyone could help fix this, I'd be very grateful!    Here are the configurations for the three routers: Site1: interface Tunnel0 ip address 172.16.12.1 255.255.255.252 mtu 1476 tunnel source Serial0/0/0 tunnel destination 10.5.5.1 ! ! interface GigabitEthernet0/0 ip address 10.1.1.2 255.255.255.252 duplex auto speed auto ! interface GigabitEthernet0/1 ip address 10.1.2.2 255.255.255.252 duplex auto speed auto shutdown ! interface Serial0/0/0 ip address 198.222.123.17 255.255.255.240 clock rate 128000 ! interface Serial0/0/1 no ip address clock rate 2000000 shutdown ! interface Vlan1 no ip address shutdown ! router ospf 1 log-adjacency-changes network 10.1.1.0 0.0.0.3 area 0 network 198.222.123.16 0.0.0.15 area 0 ! ip classless ip route 0.0.0.0 0.0.0.0 198.222.123.18 !   ISP: interface Loopback0 ip address 209.165.200.225 255.255.255.224 ! interface GigabitEthernet0/0 no ip address duplex auto speed auto shutdown ! interface GigabitEthernet0/1 no ip address duplex auto speed auto shutdown ! interface Serial0/0/0 ip address 198.222.123.18 255.255.255.240 ! interface Serial0/0/1 ip address 10.5.5.2 255.255.255.252 clock rate 2000000 ! interface Vlan1 no ip address shutdown ! router ospf 1 log-adjacency-changes network 198.222.123.16 0.0.0.15 area 0 network 10.5.5.0 0.0.0.3 area 0 ! ip classless ip route 0.0.0.0 0.0.0.0 Loopback0 !   Site 2: interface Tunnel0 ip address 172.16.12.2 255.255.255.252 mtu 1476 tunnel source Serial0/0/1 tunnel destination 198.222.123.17 ! ! interface GigabitEthernet0/0 no ip address duplex auto speed auto shutdown ! interface GigabitEthernet0/1 no ip address duplex auto speed auto shutdown ! interface Serial0/0/0 no ip address clock rate 2000000 shutdown ! interface Serial0/0/1 ip address 10.5.5.1 255.255.255.252 ! interface Vlan1 no ip address shutdown ! router ospf 1 log-adjacency-changes network 10.5.5.0 0.0.0.3 area 0 ! ip classless ip route 0.0.0.0 0.0.0.0 10.5.5.2 !   I'm fairly new to this, so I appreciate you taking the time to help. -Stuart ... View more

Hi, I'm trying to connect two routers using OSPF, but when issuing a 'sh ip ospf neighbor' the two are not showing as neighbours. Could someone offer some insight as to why this may be?   Here are the configurations for both routers: R1: interface GigabitEthernet0/0 no ip address duplex auto speed auto shutdown ! interface GigabitEthernet0/1 no ip address duplex auto speed auto shutdown ! interface Serial0/0/0 ip address 198.222.123.18 255.255.255.0 ! interface Serial0/0/1 no ip address clock rate 2000000 shutdown ! interface Vlan1 no ip address shutdown ! router ospf 1 log-adjacency-changes network 198.222.123.0 0.0.0.15 area 0 ! ip classless ip route 0.0.0.0 0.0.0.0 Loopback0 !   R2: interface Serial0/0/0 ip address 198.222.123.17 255.255.255.240 clock rate 128000 ! interface Serial0/0/1 no ip address clock rate 2000000 shutdown ! interface Vlan1 no ip address shutdown ! router ospf 1 log-adjacency-changes network 198.222.123.0 0.0.0.15 area 0 network 10.1.1.0 0.0.0.3 area 0 ! ip classless !   I'm pretty inexperienced with this, so I apologise if it's something super simple.  Thank you in advance -Stuart   ... View more