VLANs hosts can ping vlan ip but not each other.

Kaminsky

I'm just moving into VLANs (better late than never) but I cannot get it working correctly.
The hosts can each ping the VLAN 2 ip address but the switch cannot ping them back. Also, the hosts cannot ping each other. Can someone have a quick looksey and see what I haven't done to get this working ?

Running-config
!
interface FastEthernet0/1
description PC1
switchport access vlan 2
switchport mode access
no ip address
!
interface FastEthernet0/2
description PC2
switchport access vlan 2
switchport mode access
no ip address
!
interface Vlan2
ip address 192.1.1.2 255.255.255.0
!

[PC1: 192.1.1.10/24 DG: 192.1.1.2]
[PC2: 192.1.1.20/24 DG: 192.1.1.2]


>vlan database
> vlan 2 state active
> show current 2

VLAN ISL Id: 2
Name: HomeLan
Media Type: Ethernet
VLAN 802.10 Id: 100002
State: Operational
MTU: 1500
Backup CRF Mode: Disabled
Remote SPAN VLAN: No

> Show vlan brief gives:
Vlan2 HomeLan active Fa0/1, Fa0/2

> show interface vlan 2 gives:
Vlan2 is up, line protocol is up

> show interface FastEthernet 0/1
FastEthernet0/1 is up, line protocol is up (connected)

> show interface FastEthernet 0/2
FastEthernet0/2 is up, line protocol is up (connected)


There is something I am missing here but I can't find it in the book. I thought it might be something to do with default gateway on the vlan but 1) I cannot find where to enter it into the vlan and 2) why should it need a default gateway if the vlan and both PCs are in the same subnet? That is what I would use a trunk for.

Any ideas ?

bighornsheep

Make sure your hosts are allowing PING, looks like either there's a 3rd party firewall installed or the built-in Windows firewall might be disallowing ICMP packets.

And just so you know, both your hosts are in the same vlan, same subnet, same broadcast domain at this point, the default gateway doesn't come into play here.

But to set default gateway on a switch:

switch(config)#ip default-gateway x.x.x.x

nel

My money is on the firewall on each host as bighorn stated.

amp2030

I third that. If ping goes one way within one broadcast domain it should work both ways (connectivity-wise). If it doesn't something is stopping it, in this case, the windows firewall.

Kaminsky

Yep ! That fixed it.

Thanks BHS

So focussed on the config ...