trunking

Im trying to create a trunk between my 2600 series router and my 2924 switch. I have tried different configs following some books and no thing. The only thing i have been able to do is ping from the laptop to the vlan ip configure on the switch. At work all we deal with is routers son i dont work with switches at all.

Also, can you create a trunk between and ethernet port on my router and a fastethernet port on the switch?

Thanks in advance

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

mikej412

What IOS version and feature set are you running on what model 2600?

A 2610 with 12.2( 8 )T or greater IP Plus (or 12.3 and greater) should work.

Is that a 2924-XL-EN?

With the correct IOS and feature sets it should work. What have you configured?

gaby_978

well my 2600 has
ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)
ROM: C2600 Software (C2600-IK9O3S3-M), Version 12.3(12e), RELEASE SOFTWARE (fc2)

i am able to configure it with the correct encap but still nothing. From my laptop which i have plugged into port 2 on switch i can only ping the vlan ip on the router i can't get pass that...

mikej412

How have you configured the switch port?

gaby_978

let me configure it the way i thought it was correct and ill post my configs. i have been playing with this all day.

gaby_978

here are my configs:

router1

Building configuration...

Current configuration : 1254 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$JdbS$vplU5naJoWsgfNNCLCxih0
!
no aaa new-model
ip subnet-zero
ip cef
!
!
no ip domain lookup
ip host router2 192.168.1.2
ip host router5 192.168.1.6
ip host router3 192.168.10.2
!
ip audit po max-events 100
!

!
interface Ethernet0/0
description router1 lan connection
no ip address
half-duplex
!
interface Ethernet0/0.1
encapsulation dot1Q 2 native
ip address 172.16.10.1 255.255.255.128
no snmp trap link-status
!
interface Ethernet0/0.2
encapsulation dot1Q 3
ip address 172.16.10.254 255.255.255.128
no snmp trap link-status
!
interface Serial0/0
description wan connection to router2
ip address 192.168.1.1 255.255.255.252
encapsulation
clockrate 64000
!
interface Serial0/1
description wan connection to router3
ip address 192.168.10.1 255.255.255.252
encapsulation ppp
!
ip http server
no ip http secure-server
ip classless
ip route 192.168.20.0 255.255.255.252 Serial0/0
!

**********************************
switch1

!
interface FastEthernet0/1
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/2
switchport access vlan 2
!
interface FastEthernet0/3
switchport access vlan 3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface VLAN1
ip address 172.16.10.2 255.255.255.128
no ip directed-broadcast
no ip route-cache
!
interface VLAN2
no ip directed-broadcast
no ip route-cache
shutdown
!
interface VLAN3
no ip directed-broadcast
no ip route-cache
shutdown
***********************************

Laptop
ip address 172.16.10.3 255.255.255.128
gateway 172.16.10.2
***********************************

From the laptop i am able to ping the ip for vlan1 172.16.10.2 but cannot get pass that. Also should i be able to ping the 172.16.10.1 from the switch or from the router should i be able to ping the vlan ip 172.16.10.2

networker050184

Change the PCs default gateway to 172.16.10.1.

gaby_978

networker050184 wrote: »

Change the PCs default gateway to 172.16.10.1.

done and still cannot ping passed the 172.16.10.2

kalebksp

Assuming that you have your laptop connected to fa0/2, try changing "encapsulation dot1Q 2 native" on the router to "encapsulation dot1Q 2". Native means that it doesn't tag the packets, the default native vlan on switches is vlan 1, so your current configuration is sending vlan 1 from the switch to vlan 2 on the router.

My guess is that the router is getting the packet from the switch tagged as vlan 2 and accepting it. When it tries to send a reply back it's sending it out untagged which the switch considers vlan 1 traffic and therefor cannot reach the laptop.

networker050184

Change the native VLAN on the router to match the native VLAN on the switrch (VLAN 1). Missed that the first time.

Then try doing a show interface trunk to ensure the trunk formed.

EDIT: You beat me too it!

gaby_978

ok guys I made some changes and this is where i am at. from pc1 which is connected to port
FastEthernet0/2 on the switch i am able to ping the switch and ever router i have setup. I am also able to ping the pc1 from the switch and all routers. I am able to telnet to switch and routers from pc1.
FastEthernet0/2 is configure on vlan2 which is up/up at this time. However vlan1 is up/down and vlan3 is showing admin down. I have interface FastEthernet0/3 configured for vlan3 and have another pc (pc2) plugged into it. because i cannot get vlan3 to come up i have no connectivity to pc3. I wanna be able to have multiple vlans on this switch but can only get one to work. In order for vlan2 to come up i had to add the management command. If i add the management command to any other vlan it will take vlan2 down.

Current configs:

router

interface Ethernet0/0
description router1 lan connection
no ip address
half-duplex
!
interface Ethernet0/0.1
encapsulation dot1Q 2
ip address 172.16.10.1 255.255.255.128
!
interface Ethernet0/0.2
encapsulation dot1Q 3
ip address 172.16.10.254 255.255.255.128

switch

interface FastEthernet0/1
duplex half
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/2
switchport access vlan 2
!
interface FastEthernet0/3
switchport access vlan 3
!
interface VLAN1
no ip address
no ip directed-broadcast
no ip route-cache
shutdown
!
interface VLAN2
ip address 172.16.10.2 255.255.255.128
no ip directed-broadcast
no ip route-cache
!
interface VLAN3
ip address 172.16.10.129 255.255.255.128
no ip directed-broadcast
no ip route-cache
shutdown
............................
VLAN1 is up, line protocol is down
Hardware is CPU Interface, address is 0002.7d31.ea80 (bia 0002.7d31.ea80)
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
.
VLAN2 is up, line protocol is up
Hardware is CPU Interface, address is 0002.7d31.ea80 (bia 0002.7d31.ea80)
Internet address is 172.16.10.2/25
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA
ARP type: ARPA, ARP Timeout 04:00:00
.
VLAN3 is administratively down, line protocol is down
Hardware is CPU Interface, address is 0002.7d31.ea80 (bia 0002.7d31.ea80)
Internet address is 172.16.10.129/25
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA
ARP type: ARPA, ARP Timeout 04:00:00

vlan1 and vlan3 shows shutdown. Even if i do a no shut on vlan3 it still wont come up. the only way to have it come up is by adding the management command, but doing this will take vlan2 which is up/up down.

mikej412

The 2924 is a layer 2 switch. You get one active administrative interface.

gaby_978

mikej412 wrote: »

The 2924 is a layer 2 switch. You get one active administrative interface.

So does that means that i can't have multiple vlans setup.

kalebksp

gaby_978 wrote: »

VLAN1 is up, line protocol is down
Hardware is CPU Interface, address is 0002.7d31.ea80 (bia 0002.7d31.ea80)
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
.
VLAN2 is up, line protocol is up
Hardware is CPU Interface, address is 0002.7d31.ea80 (bia 0002.7d31.ea80)
Internet address is 172.16.10.2/25
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA
ARP type: ARPA, ARP Timeout 04:00:00
.
VLAN3 is administratively down, line protocol is down
Hardware is CPU Interface, address is 0002.7d31.ea80 (bia 0002.7d31.ea80)
Internet address is 172.16.10.129/25
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA
ARP type: ARPA, ARP Timeout 04:00:00

Those are SVIs (switch virtual interfaces) and basically allow you to assign a layer 3 address to your switch within the scope of a vlan. They are not the vlan itself.

Can your second computer ping the router? Can the first computer ping the routers vlan 2 IP address? Is the second computer configured with the proper address, subnet mask and it's default gateway set to 172.16.10.254?

mikej412

You can create VLANs with the VLAN Database command. On newer switches you can create VLANs in config mode with the VLAN command.

Some switches may also create the VLAN in VLAN Database when you configure a switch port into a VLAN.

gaby_978

mikej412 wrote: »

You can create VLANs with the VLAN Database command. On newer switches you can create VLANs in config mode with the VLAN command.

Some switches may also create the VLAN in VLAN Database when you configure a switch port into a VLAN.

I tried creating another vlan using the vlan database command but is not available. I really need more reading on switching. Anybody has good documentation on switching?

thanks

networker050184

What do you mean by not available? Remember for your PCs you will want to use the routers sub interface address as the default gateway. Also ensure the trunk has actually formed with the show interface trunk command.

A good resource would be the BCMSN books and I have heard great things about Cisco LAN switching by Kevin Hamilton. Its definitly on my to read list for my switching review. I do not get to get my hands in the switches like I used to but I have a big 6500 project coming up so I need a refresher!

You are on the right track though. Nothing like getting your hands dirty and making mistakes to really understand something!

mikej412

gaby_978 wrote: »

I tried creating another vlan using the vlan database command but is not available.

vlan database is the old command that you enter in privileged mode, not configuration mode.

Netwurk

gaby_978 wrote: »

vlan1 and vlan3 shows shutdown. Even if i do a no shut on vlan3 it still wont come up. the only way to have it come up is by adding the management command, but doing this will take vlan2 which is up/up down.

Your config has ip addresses assigned to multiple VLANs. I doubt that works on any 2924 - it's a layer 2 switch.

Do some research on the term "router on a stick". That should get you going.