defeated by a measly 2950!?!

cisco_troopercisco_trooper Member Posts: 1,441 ■■■■□□□□□□
in CCNP
Ok guys, I'm about to admit to my first defeat by a Cisco device, but I want to get some input before I throw in the towel. So here's the situation:

I've got a 2950 that I just wiped so I can reconfigure it to company standards with RADIUS, etc. I've assigned it a layer 3 address in the management VLAN and have assigned an interface to that same VLAN. I connected my laptop to that interface and assigned it an address in the same VLAN. From my laptop I can ping my laptop and the switch just fine. From the switch, I can ping the switch but not the laptop....so I obviously am not able to copy my IOS image down from my laptop.

Anyone have any ideas? The laptop's mac address is in the mac table. ARP is in the ARP table. What gives? I'm at my wits end on what should be a pretty simple issue.
· Share on FacebookShare on Twitter

Comments

  • tierstentiersten Member Posts: 4,505
    Laptop firewall?
    · Share on FacebookShare on Twitter
  • kalebkspkalebksp Member Posts: 1,033 ■■■■■□□□□□
    Do you have a firewall on your laptop?
    · Share on FacebookShare on Twitter
  • tierstentiersten Member Posts: 4,505
    kalebksp wrote: »
    Do you have a firewall on your laptop?
    Too slow! ;)
    · Share on FacebookShare on Twitter
  • cisco_troopercisco_trooper Member Posts: 1,441 ■■■■□□□□□□
    Wish I could say I was that blind but the firewall IS in fact disabled...:)
    · Share on FacebookShare on Twitter
  • networker050184networker050184 Mod Posts: 11,962 Mod
    Show us the config we might be able to spot something, but it sounds like you have everything right.
    An expert is a man who has made all the mistakes which can be made.
    · Share on FacebookShare on Twitter
  • ciscojay-houstonciscojay-houston Banned Posts: 14 ■□□□□□□□□□
    Remember that 2950's can only have 1 VLAN active at a time. If you created a second VLAN, although it's configured and you've issued a "no shut", the VLAN will not come up.

    If you have shut VLAN1, and created say, VLAN2, make sure the switchport is in this VLAN. Also, make sure your sh vlan output shows the VLAN created. Also, remember that the 2950's still use the vlan database command to assign and name these.
    · Share on FacebookShare on Twitter
  • mikej412mikej412 Member Posts: 10,086 ■■■■■■■■■■
    Think about using XMODEM..... That should motivate you to double and triple check your configurations and firewall. :D
    :mike: Cisco Certifications -- Collect the Entire Set!
    · Share on FacebookShare on Twitter
  • NetwurkNetwurk Member Posts: 1,155 ■■■■■□□□□□
    ciscojay-houston wrote: »
    Remember that 2950's can only have 1 VLAN active at a time. If you created a second VLAN, although it's configured and you've issued a "no shut", the VLAN will not come up.

    If you have shut VLAN1, and created say, VLAN2, make sure the switchport is in this VLAN. Also, make sure your sh vlan output shows the VLAN created. Also, remember that the 2950's still use the vlan database command to assign and name these.

    Good point about the one active VLAN, but 2950's don't need to use the deprecated vlan database commands. It will work, but you can also use the new commands.

    :)
    · Share on FacebookShare on Twitter
  • cisco_troopercisco_trooper Member Posts: 1,441 ■■■■□□□□□□
    Switch#sho run
    Building configuration...
    Current configuration : 2100 bytes
    !
    version 12.1
    no service pad
    service timestamps debug uptime
    service timestamps log uptime
    no service password-encryption
    !
    hostname Switch
    !
    enable secret 5 $1$EboP$5hZRzV/822dybFSJrWTaB/
    !
    ip subnet-zero
    !
    !
    spanning-tree mode pvst
    no spanning-tree optimize bpdu transmission
    spanning-tree extend system-id
    !
    !
    !
    !
    interface FastEthernet0/1
    switchport access vlan 2
    switchport mode access
    !
    interface FastEthernet0/2
    !
    interface FastEthernet0/3
    !
    interface FastEthernet0/4
    !
    interface FastEthernet0/5
    !
    interface FastEthernet0/6
    !
    interface FastEthernet0/7
    !
    interface FastEthernet0/8
    !
    interface FastEthernet0/9
    !
    interface FastEthernet0/10
    !
    interface FastEthernet0/11
    !
    interface FastEthernet0/12
    !
    interface FastEthernet0/13
    !
    interface FastEthernet0/14
    !
    interface FastEthernet0/15
    !
    interface FastEthernet0/16
    !
    interface FastEthernet0/17
    !
    interface FastEthernet0/18
    !
    interface FastEthernet0/19
    !
    interface FastEthernet0/20
    !
    interface FastEthernet0/21
    !
    interface FastEthernet0/22
    !
    interface FastEthernet0/23
    !
    interface FastEthernet0/24
    !
    interface FastEthernet0/25
    !
    interface FastEthernet0/26
    !
    interface FastEthernet0/27
    !
    interface FastEthernet0/28
    !
    interface FastEthernet0/29
    !
    interface FastEthernet0/30
    !
    interface FastEthernet0/31
    !
    interface FastEthernet0/32
    !
    interface FastEthernet0/33
    !
    interface FastEthernet0/34
    !
    interface FastEthernet0/35
    !
    interface FastEthernet0/36
    !
    interface FastEthernet0/37
    !
    interface FastEthernet0/38
    !
    interface FastEthernet0/39
    !
    interface FastEthernet0/40
    !
    interface FastEthernet0/41
    !
    interface FastEthernet0/42
    !
    interface FastEthernet0/43
    !
    interface FastEthernet0/44
    !
    interface FastEthernet0/45
    !
    interface FastEthernet0/46
    !
    interface FastEthernet0/47
    !
    interface FastEthernet0/48
    !
    interface GigabitEthernet0/1
    switchport access vlan 2
    !
    interface GigabitEthernet0/2
    !
    interface Vlan1
    no ip address
    no ip route-cache
    shutdown
    !
    interface Vlan2
    ip address 172.16.1.35 255.255.255.0
    no ip route-cache
    !
    ip default-gateway 172.16.1.1
    ip http server
    !
    line con 0
    line vty 0 4
    password cisco
    login
    line vty 5 15
    login
    !
    !
    end
    Switch#exit
    · Share on FacebookShare on Twitter
  • kryollakryolla Member Posts: 785
    if your laptop is sending echo and the switch is sending an echo reply then you have 2 way comm but when the switch initiates the echo but does not get an echo reply make sure the switch is indeed sending it and if you have another switch plug that in instead of your laptop and see if you have 2 way comm.
    Studying for CCIE and drinking Home Brew
    · Share on FacebookShare on Twitter
  • NetwurkNetwurk Member Posts: 1,155 ■■■■■□□□□□
    cisco_trooper wrote: »
    interface Vlan1
    no ip address
    no ip route-cache
    shutdown

    interface Vlan2
    ip address 172.16.1.35 255.255.255.0
    no ip route-cache

    Looks like you need to put your IP on the first VLAN interface and then do a no shut

    Don't know if it is possible to use a Vlan2 interface on a 2950
    · Share on FacebookShare on Twitter
  • cisco_troopercisco_trooper Member Posts: 1,441 ■■■■□□□□□□
    kryolla wrote: »
    if your laptop is sending echo and the switch is sending an echo reply then you have 2 way comm but when the switch initiates the echo but does not get an echo reply make sure the switch is indeed sending it and if you have another switch plug that in instead of your laptop and see if you have 2 way comm.


    Yeah, I've tried using a different interface on the switch to no avail. I'm getting ready to start sniffing traffic but I really didn't feel like going through the hassle of setting up the SPAN session and finding a box to sniff it with. I've got better things to do at the moment.
    · Share on FacebookShare on Twitter
  • cisco_troopercisco_trooper Member Posts: 1,441 ■■■■□□□□□□
    Netwurk wrote: »
    Looks like you need to put your IP on the first VLAN interface and then do a no shut

    Don't know if it is possible to use a Vlan2 interface on a 2950

    You can, you can just only use ONE vlan interface. I have 70 other devices configured in this same way. I personally would never use VLAN 1 for management.
    · Share on FacebookShare on Twitter
  • kryollakryolla Member Posts: 785
    not a different inteface but using a different switch set up as a host to take the place of your laptop. I have a feeling the issue is with your laptop and not sending an echo reply
    Studying for CCIE and drinking Home Brew
    · Share on FacebookShare on Twitter
  • cisco_troopercisco_trooper Member Posts: 1,441 ■■■■□□□□□□
    kryolla wrote: »
    not a different inteface but using a different switch set up as a host to take the place of your laptop. I have a feeling the issue is with your laptop and not sending an echo reply

    Ah, I see what you're saying. I don't have another switch laying around unfortunately.
    · Share on FacebookShare on Twitter
  • malcyboodmalcybood Member Posts: 900 ■■■□□□□□□□
    That's strange if you can ping the switch from the laptop, config looks fine to me. The only issues that would spring to mind is if you were using dot1q trunking but not the case I see.

    I know in theory the ping is going in the opposite direction and this makes no sense on the surface, but have you tried hard coding VLAN 2 to being the management VLAN?

    interface Vlan2
    ip address 172.16.1.35 255.255.255.0
    no ip route-cache
    management

    When I've had connectivity issues on both Cisco and Nortel switches that have been reset to defaults or out the box, I like you always create a new VLAN for management and copying the config file, but I've had to actually bring the VLAN up which you have done, then "tell" it is the mgmt vlan with the above command.

    Doesn't really make sense in your scenario as you have some connectivity, but there's no other reason for it not to work and it's the only thing I can think of other than a PC firewall.
    · Share on FacebookShare on Twitter
  • APAAPA Member Posts: 959
    Your config is absolutely fine.

    shut vlan 2, shut int fa 0/1

    Clear the arp table.

    re-enable vlan2, wait till it comes up,up then re-enabled int fa 0/1.

    Tell us how you go...

    What O.S are you using??? I have a sneaking suspicion that you have some client firewall enabled still.... Hence the one way traffic allowed out from the machine....
    CCNA | CCNA:Security | CCNP | CCIP
    JNCIA:JUNOS | JNCIA:EX | JNCIS:ENT | JNCIS:SEC
    JNCIS:SP | JNCIP:SP
    · Share on FacebookShare on Twitter
  • mikearamamikearama Member Posts: 749
    cisco_trooper wrote: »
    !
    interface Vlan2
    ip address 172.16.1.35 255.255.255.0
    no ip route-cache
    !
    ip default-gateway 172.16.1.1
    end
    Switch#exit

    Just curious... what's the IP of your laptop? Does it have a default gateway?
    There are only 10 kinds of people... those who understand binary, and those that don't.

    CCIE Studies: Written passed: Jan 21/12 Lab Prep: Hours reading: 385. Hours labbing: 110

    Taking a time-out to add the CCVP. Capitalizing on a current IPT pilot project.
    · Share on FacebookShare on Twitter
  • AutoBahn81AutoBahn81 Member Posts: 22 ■□□□□□□□□□
    Reboot your laptop.
    BIT - Network Administration
    MBA - IT Management
    · Share on FacebookShare on Twitter
  • itdaddyitdaddy Member Posts: 2,089 ■■■■□□□□□□
    mike said: Think about using XMODEM
    hahaahahhaaaa hahahah ahaahahaaa hahah


    omg that is so funny; gives you motivation hahaahhahhahhahhhh I was told that once and well yeah I got motivated haahhhahahahh


    Mike you should do standup for cisco haahhaha ;)
    · Share on FacebookShare on Twitter
  • ITdudeITdude Member Posts: 1,181 ■■■□□□□□□□
    I agree. Check laptop for enabled software Windows firewall and or something else like Norton Internet Security suite.

    Or use Mike's idea!icon_lol.gif
    I usually hang out on 224.0.0.10 (FF02::A) and 224.0.0.5 (FF02::5) when I'm in a non-proprietary mood.

    __________________________________________
    Simplicity is the ultimate sophistication.
    (Leonardo da Vinci)
    · Share on FacebookShare on Twitter
  • cisco_troopercisco_trooper Member Posts: 1,441 ■■■■□□□□□□
    Just an update for those curious. I finally gave up and used a different machine and it worked fine. The laptop firewall WAS disabled by the way. To this day I don't know why the laptop couldn't connect to that switch. I use it ALL the time to connect to any of the other 50 or 100 devices we have. I'm chalking this one up to something really really weird.
    · Share on FacebookShare on Twitter
  • netteasernetteaser Member Posts: 198
    Was the laptop you were having problems with running Vista?
    · Share on FacebookShare on Twitter
  • cisco_troopercisco_trooper Member Posts: 1,441 ■■■■□□□□□□
    netteaser wrote: »
    was the laptop you were having problems with running vista?


    xp sp3...
    · Share on FacebookShare on Twitter
Sign In or Register to comment.