Options
vlan config
aueddonline
Member Posts: 611 ■■□□□□□□□□
in CCNP
I have four switches set up like this
3550
2950
A1-2950
A2-2950
These switches are in the same VTP domain, the top two are vtp servers and the bottom two are vtp clients.
these are all interconnected and the 3550 is also connected to a 2600 with 4 subinterfaces with a dot1q trunk.
all trunk link interfaces (switch to switch) are configured
switchport mode trunk
switchport trun encapsulation dot1q
speed 100
duplex full
Ok, all the switches have an IP address in the native vlan (1) and can all ping each other and can also ping all the sub interfaces on the router I have the configured a1-2950 with
interface FastEthernet0/24
switchport access vlan 200
switchport mode access
no ip address
duplex full
speed 100
spanning-tree portfast
but when I plug in a laptop and give it an IP address on vlan 200 it can't connect.
I'm missing something here, what am I doing wrong
3550
2950
A1-2950
A2-2950
These switches are in the same VTP domain, the top two are vtp servers and the bottom two are vtp clients.
these are all interconnected and the 3550 is also connected to a 2600 with 4 subinterfaces with a dot1q trunk.
all trunk link interfaces (switch to switch) are configured
switchport mode trunk
switchport trun encapsulation dot1q
speed 100
duplex full
Ok, all the switches have an IP address in the native vlan (1) and can all ping each other and can also ping all the sub interfaces on the router I have the configured a1-2950 with
interface FastEthernet0/24
switchport access vlan 200
switchport mode access
no ip address
duplex full
speed 100
spanning-tree portfast
but when I plug in a laptop and give it an IP address on vlan 200 it can't connect.
I'm missing something here, what am I doing wrong
What's another word for Thesaurus?
Comments
-
Optionstech-airman
Member Posts: 953
aueddonline wrote:I have four switches set up like this
3550
2950
A1-2950
A2-2950
These switches are in the same VTP domain, the top two are vtp servers and the bottom two are vtp clients.
these are all interconnected and the 3550 is also connected to a 2600 with 4 subinterfaces with a dot1q trunk.
all trunk link interfaces (switch to switch) are configured
switchport mode trunk
switchport trun encapsulation dot1q
speed 100
duplex full
Ok, all the switches have an IP address in the native vlan (1) and can all ping each other and can also ping all the sub interfaces on the router I have the configured a1-2950 with
interface FastEthernet0/24
switchport access vlan 200
switchport mode access
no ip address
duplex full
speed 100
spanning-tree portfast
but when I plug in a laptop and give it an IP address on vlan 200 it can't connect.
I'm missing something here, what am I doing wrong
aueddonline,
Questions:- What IP subnet and mask did you assign to VLAN 1?
- What IP subnet and mask did you assign to VLAN 200?
-
Optionsaueddonline
Member Posts: 611 ■■□□□□□□□□
vlan 1 = 192.168.2.0 /24
vlan 200 = 192.168.200.0 /24What's another word for Thesaurus? -
Optionstech-airman
Member Posts: 953
aueddonline wrote:vlan 1 = 192.168.2.0 /24
vlan 200 = 192.168.200.0 /24
aueddonline,
What IP address and mask did you assign the laptop? -
Options
Paul Boz
Member Posts: 2,620 ■■■■■■■■□□
Just out of curiosity, are you routing these vlans via the 3550?CCNP | CCIP | CCDP | CCNA, CCDA
CCNA Security | GSEC |GCFW | GCIH | GCIA
pbosworth@gmail.com
http://twitter.com/paul_bosworth
Blog: http://www.infosiege.net/ -
OptionsMACattack
Member Posts: 121
can you post the configuration of your router and one of your VTP server.
-
Optionsaueddonline
Member Posts: 611 ■■□□□□□□□□
I gave the laptop an IP address and mask of
192.168.200.20 /24
DG - 192.168.200.100 (2600 sub-interface for vlan 200)
The 3550 isn't doing any intervlan routing
This is the 2600 interface config
interface FastEthernet0/0
no ip address
ip pim sparse-dense-mode
ip cgmp
duplex auto
speed auto
!
interface FastEthernet0/0.1
encapsulation dot1Q 1 native
ip address 192.168.2.100 255.255.255.0
no snmp trap link-status
!
interface FastEthernet0/0.100
encapsulation dot1Q 100
ip address 192.168.100.100 255.255.255.0
no snmp trap link-status
!
interface FastEthernet0/0.150
encapsulation dot1Q 150
ip address 192.168.150.100 255.255.255.0
no snmp trap link-status
!
interface FastEthernet0/0.200
encapsulation dot1Q 200
ip address 192.168.200.100 255.255.255.0
no snmp trap link-status
this is the 3550 config
hostname s3550
!
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface FastEthernet0/1
switchport mode dynamic desirable
!
interface FastEthernet0/2
switchport mode dynamic desirable
!
interface FastEthernet0/3
switchport mode dynamic desirable
!
interface FastEthernet0/4
switchport mode dynamic desirable
!
interface FastEthernet0/5
switchport mode dynamic desirable
!
interface FastEthernet0/6
switchport mode dynamic desirable
!
interface FastEthernet0/7
switchport mode dynamic desirable
!
interface FastEthernet0/8
switchport mode dynamic desirable
!
interface FastEthernet0/9
switchport mode dynamic desirable
!
interface FastEthernet0/10
switchport mode dynamic desirable
!
interface FastEthernet0/11
switchport mode dynamic desirable
!
interface FastEthernet0/12
switchport mode dynamic desirable
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
switchport mode dynamic desirable
!
interface FastEthernet0/23
switchport trunk encapsulation dot1q
switchport mode trunk
duplex full
speed 100
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
duplex full
speed 100
!
interface GigabitEthernet0/1
switchport mode dynamic desirable
!
interface GigabitEthernet0/2
switchport mode dynamic desirable
shutdown
!
interface Vlan1
ip address 192.168.2.50 255.255.255.0
!
ip default-gateway 192.168.2.100
ip classless
ip http serverWhat's another word for Thesaurus? -
Optionstech-airman
Member Posts: 953
aueddonline,aueddonline wrote:I gave the laptop an IP address and mask of
192.168.200.20 /24
DG - 192.168.200.100 (2600 sub-interface for vlan 200)
The 3550 isn't doing any intervlan routing
So the laptop's IP address and the laptop's default gateway IP addresses both seem to be valid for the 192.168.200.0 /24 subnet.aueddonline wrote:This is the 2600 interface config
interface FastEthernet0/0
no ip address
ip pim sparse-dense-mode
ip cgmp
duplex auto
speed auto
How come the FastEthernet0/0 interface does not have an IP address? Did you make sure to type "no shutdown" for the FastEthernet0/0 interface?aueddonline wrote:!
interface FastEthernet0/0.1
encapsulation dot1Q 1 native
ip address 192.168.2.100 255.255.255.0
no snmp trap link-status
Do you know the difference between (config-subif)#encapsulation dot1Q 1 native and (config-subif)#encapsulation dot1Q 1?aueddonline wrote:!
interface FastEthernet0/0.100
encapsulation dot1Q 100
ip address 192.168.100.100 255.255.255.0
no snmp trap link-status
!
interface FastEthernet0/0.150
encapsulation dot1Q 150
ip address 192.168.150.100 255.255.255.0
no snmp trap link-status
!
interface FastEthernet0/0.200
encapsulation dot1Q 200
ip address 192.168.200.100 255.255.255.0
no snmp trap link-status
this is the 3550 config
hostname s3550
!
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface FastEthernet0/1
switchport mode dynamic desirable
!
interface FastEthernet0/2
switchport mode dynamic desirable
!
interface FastEthernet0/3
switchport mode dynamic desirable
!
interface FastEthernet0/4
switchport mode dynamic desirable
!
interface FastEthernet0/5
switchport mode dynamic desirable
!
interface FastEthernet0/6
switchport mode dynamic desirable
!
interface FastEthernet0/7
switchport mode dynamic desirable
!
interface FastEthernet0/8
switchport mode dynamic desirable
!
interface FastEthernet0/9
switchport mode dynamic desirable
!
interface FastEthernet0/10
switchport mode dynamic desirable
!
interface FastEthernet0/11
switchport mode dynamic desirable
!
interface FastEthernet0/12
switchport mode dynamic desirable
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
switchport mode dynamic desirable
!
interface FastEthernet0/23
switchport trunk encapsulation dot1q
switchport mode trunk
duplex full
speed 100
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
duplex full
speed 100
!
interface GigabitEthernet0/1
switchport mode dynamic desirable
!
interface GigabitEthernet0/2
switchport mode dynamic desirable
shutdown
!
interface Vlan1
ip address 192.168.2.50 255.255.255.0
!
ip default-gateway 192.168.2.100
ip classless
ip http server
If the Cisco Catalyst 3550 is supposed to be a VTP server, where is the configured VTP domain name and password? Where is the configuration of the Cisco Catalyst 3550 as a VTP server?
You mentioned "...configured a1-2950 with...switchport access vlan 200..." but did you separately create the VLAN 200 on the a1-2950 switch? Did you go into that VLAN 200 interface and type "no shutdown?" Did you create VLAN 200 on any of the VTP servers? Did you configure the a1-2950 switch and the a2-2950 switches as VTP clients? -
Options
EdTheLad
Member Posts: 2,111 ■■■■□□□□□□
It amazes me how some people cant take a simple step by step approach when describing a problem.Anyway thats my rant over.
What i assume we already know;
You have a pc on an access port.
The access port is in vlan 200.
Vlan 200 is present on all switches due to vtp.
Vlan 200 is allowed on all trunks.
Can you ping the default gateway from your pc? i.e. 192.168.200.100 , if no Is there a firewall on your pc?
Add an ip address in the same subnet of your pc to vlan 200, can you ping this ip address from your pc? can you ping the DG from the 2950?
is the mac address entry of your pc present in the 2950? if yes is it present in the 3550 ? when you send large pings can you see the interface counters on FastEthernet0/0 increase dramatically?
Lots of things to try, lots of information you havent provided.Networking, sometimes i love it, mostly i hate it.Its all about the $$$$ -
Optionsaueddonline
Member Posts: 611 ■■□□□□□□□□
The f0/0 has had the no shut command enetered, that's just the way I chose to configure it, it it a problem that t does not have an IP address?
r1#show ip int br
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 unassigned YES NVRAM up up
FastEthernet0/0.1 192.168.2.100 YES NVRAM up up
FastEthernet0/0.100 192.168.100.100 YES NVRAM up up
FastEthernet0/0.150 192.168.150.100 YES NVRAM up up
FastEthernet0/0.200 192.168.200.100 YES NVRAM up up
Do you know the difference between (config-subif)#encapsulation dot1Q 1 native and (config-subif)#encapsulation dot1Q 1?
Not off the top of my head, i'll go have a look
s3550#show vtp status
VTP Version : 2
Configuration Revision : 2
Maximum VLANs supported locally : 1005
Number of existing VLANs : 11
VTP Operating Mode : Server
VTP Domain Name : WORKGROUP
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0x81 0x3F 0x3F 0xFC 0x08 0xD9 0x5A 0x63
s2950-48#show vtp status
VTP Version : 2
Configuration Revision : 2
Maximum VLANs supported locally : 250
Number of existing VLANs : 11
VTP Operating Mode : Server
VTP Domain Name : WORKGROUP
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0x81 0x3F 0x3F 0xFC 0x08 0xD9 0x5A 0x63
Configuration last modified by 192.168.2.50 at 3-1-93 00:29:21
Local updater ID is 192.168.2.51 on interface Vl1 (lowest numbered VLAN interface
access-1#show vtp status
VTP Version : 2
Configuration Revision : 2
Maximum VLANs supported locally : 250
Number of existing VLANs : 11
VTP Operating Mode : Client
VTP Domain Name : WORKGROUP
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0x81 0x3F 0x3F 0xFC 0x08 0xD9 0x5A 0x63
Configuration last modified by 192.168.2.50 at 3-1-93 00:29:21
access-2#show vtp status
VTP Version : 2
Configuration Revision : 2
Maximum VLANs supported locally : 250
Number of existing VLANs : 11
VTP Operating Mode : Client
VTP Domain Name : WORKGROUP
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0x81 0x3F 0x3F 0xFC 0x08 0xD9 0x5A 0x63
Configuration last modified by 192.168.2.50 at 3-1-93 00:29:21
I did notice something else just now, I can ping the 3550 from access-1 but I cna't ping access-1 from the 3550?What's another word for Thesaurus? -
Optionsaueddonline
Member Posts: 611 ■■□□□□□□□□
EdTheLad wrote:It amazes me how some people cant take a simple step by step approach when describing a problem.Anyway thats my rant over.
What i assume we already know;
You have a pc on an access port.
The access port is in vlan 200.
Vlan 200 is present on all switches due to vtp.
Vlan 200 is allowed on all trunks.
Can you ping the default gateway from your pc? i.e. 192.168.200.100 , if no Is there a firewall on your pc?
Add an ip address in the same subnet of your pc to vlan 200, can you ping this ip address from your pc? can you ping the DG from the 2950?
is the mac address entry of your pc present in the 2950? if yes is it present in the 3550 ? when you send large pings can you see the interface counters on FastEthernet0/0 increase dramatically?
Lots of things to try, lots of information you havent provided.
You have a pc on an access port. YES
The access port is in vlan 200. YES
Vlan 200 is present on all switches due to vtp. YES
Vlan 200 is allowed on all trunks. YES
Can you ping the default gateway from your pc? NO (but I can ping it from the access-1 switch)
Can you ping the default gateway from your pc? i.e. 192.168.200.100 NO
if no Is there a firewall on your pc? just turned it off, no change
can you ping the DG from the 2950? YES
is the mac address entry of your pc present in the 2950? yes
if yes is it present in the 3550 ? YES
i'll need more time on the others
What's another word for Thesaurus?
