Cant get both vlans to come up!!!

ceejay3001

i have set up 2 vlans on a 2924 -- but only the default vlan is up - i have done a no shut on vlan 2 --configured it -etc as shown--but it still says admin. down

any ideas please?

also how to when i remove a vlan by doing - vlan database, no vlan 2 name 2 -- its still appears when i so a sh ip int brief? but not in sh vlan? you can see i removed vlan 3...but it still shows

2924-1#sh run
Building configuration...

Current configuration:
!
version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname 2924-1
!
enable secret 5 $1$GTQW$yGST4yUvJjuAyM5uwlMWJ0
enable password cisco
!
!
!
!
!
!
ip subnet-zero
!
!
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface Fast
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
switchport access vlan 3
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
switchport access vlan 2
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEt
!
interface FastEthernet0/23
!
interface FastEthernet0/24
duplex full
speed 100
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface VLAN1
ip address 10.0.0.1 255.254.0.0
no ip directed-broadcast
no ip route-cache
!
interface VLAN2
ip address 10.2.0.1 255.254.0.0
no ip directed-broadcast
no ip route-cache
shutdown
!
interface VLAN3
ip address 10.4.0.1 255.254.0.0
no ip directed-broadcast
no ip route-cache
shutdown
!
ip default-gateway 10.0.0.3
snmp-server engineID local 00000009020000D0BA4477C0
snmp-server community 2924-1 RW
!
line con 0
transport input none
stopbits 1
line vty 0 4
password cisco
login
line vty 5 15
login
!
end


sh vlan
VLAN Name Status Ports
----

---

---

---

1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4,
Fa0/5, Fa0/6, Fa0/7, Fa0/8,
Fa0/10, Fa0/11, Fa0/12, Fa0/13,
Fa0/14, Fa0/15, Fa0/16, Fa0/18,
Fa0/19, Fa0/20, Fa0/21, Fa0/22,
Fa0/23
2 jagman active Fa0/17
4 VLAN0004 active
1002 fddi-default active
1003 token-ring-default active
1004 fddinet-default active
1005 trnet-default active

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
----

---

---

---

---

---

---

----

---

---

---

1 enet 100001 1500 - - - - - 0 0
2 enet 100002 1500 - - - - - 0 0
4 enet 100004 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0
1003 tr 101003 1500 - - - - - 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0


2924-1#sh ip int brief
Interface IP-Address OK? Method Status Prot
ocol
VLAN1 10.0.0.1 YES NVRAM up up

VLAN2 10.2.0.1 YES NVRAM administratively down down

VLAN3 10.4.0.1 YES NVRAM administratively down down

EdTheLad

The 2924 is a layer 2 switch, it will only support 1 vlan interface at one time for management.You are supposed to assign physical ports to vlans and thats it, this box is not layer 3 aware!

ceejay3001

im setting up these vlans and going to route between them using dot1q..
iv been told this is possible using a 2924 switch and 2621 router

im a little confused by ur comment - if only one vlan can be up -- why have vlans!! sorry i should have mentioned i was carrying out router on a stick -

EdTheLad

The dot1.q is configured on the routers subinterface, this is so the router subinterface can differentiate between the different frames arriving on the trunk port.A vlan is used to segment the switch into multiple broadcast domains.So you are effectively isolating ports into groups,each group you will assign a vlan id.On the router you will match a vlan id to a subnet.You will then connect hosts i.e. pc's with the correct ip address to the corresponding switch port. The PC will have the default gateway that matches the router subinterface.
When you assign an ip address to a vlan id,this ip address is used to manage the switch,the switch can only support one management ip address.You should really have covered this in the ccna.

garv221

ed is saying you cannot have more than 1 vlan interface on that switch. You can have multiple vlans assinged to that switch, but the interfaces need to on a different device. I have a 4506 switch that handles a config similiar to yours.

david_r

ceejay,
I think what ed is trying to say is you should pull your .1 IPs from your VLAN interfaces, place your ports into whatever VLANs you want and build your router on a stick on your 2600 with something like:

int fa 0/1
no ip address
interface 0/1.1
encap dot1q 1 native
ip adddress 10.0.0.1 255.254.0.0
interface 0/1.2
encap dot1q 2
ip address 10.2.0.1 255.254.0.0
etc.

Then assign a management IP to your VLAN1. The IP address on the layer 2 device is ONLY so you can manage it. Remember that vlan tagging happens at layer 2, not layer 3.

You can see that your vlans are active. You can also issue a show command from the vlan database and they will say "operational." If you want to remove the vlan interfaces you created, do so from config mode. If you want to remove a vlan, do so from the vlan database.

ceejay3001

thanks guys this makes complete sense to me now - the reason i had the config showed -was because i had this set up on 4507 at work - which is layer 3 - the help is much appreciated -- its been a while since i covered the ccna now - u know how it is!!!

rossonieri#1

hello forlks:)

hahaha...
reading this reminds me of my BOSS:)

cheers:)

Danman32

I didn't think it mattered if you assigned an IP to each VLAN. True it won't route, but that's not the point of the IP. Depending on which VLAN your Telnet client was coming in from, you'd use the IP assigned to the VLAN the client was connected to. If you didn't have a router, that's the only way you could do it.

Webmaster

You can create many VLAN interfaces, or management VLAN interfaces, but only one can be active at the same time (on a L2 2950 switch for example). This is because the VSI uses the switch's base MAC address, which can only be assigned to one IP address / vlan interface. This why the VLAN 2 and 3 interfaces don't come up in the example of the OP.

rossonieri#1

i think the webmaster has answered it

even an L3 device wont have the vlan interface IP come up if you dont have any cable plugged.

cheers..