cisco1711 & vlans: basic routing issue...

cisco1711 & vlans: basic routing issue...

Post by Captai » Sun, 25 Jul 2004 03:24:16



I can't seem to route THROUGH my cisco1711
router.  

From inside the router I can ping both the
internal AND external IPs, as well as any
IP on the internet.  (Although I can't seem
to traceroute to any of them!)

Note: The gateway to the internet is the
      FastEthernet2 port!

But if I connect a server(IP: x.x.x.250),
into the FastEthernet0 port, I CAN ping:
x.x.x.246
x.x.x.249
x.x.x.250
But I can NOT ping:
x.x.x.245

What am I missing here?

Here is part of the config,(incl sh arp):
===========================================
Router#sh run
Building configuration...

Current configuration : 1234 bytes
!
version 12.3
hostname Router
ip subnet-zero
ip cef
!
!
interface FastEthernet0
 ip address x.x.x.249 255.255.255.248
 no ip redirects
 no ip proxy-arp
 duplex auto
 speed auto
 no keepalive
!
interface FastEthernet1
 no ip address
 shutdown
!
interface FastEthernet2
 no ip address
 speed 10
!
interface FastEthernet3
 no ip address
 shutdown
!
interface FastEthernet4
 no ip address
 shutdown
!
interface Vlan1
 ip address x.x.x.246 255.255.255.252
 no ip redirects
 no ip proxy-arp
!
ip classless
ip route 0.0.0.0 0.0.0.0 x.x.x.245
no ip http server
no ip http secure-server
!
!
===========================================
Router#sh ip arp
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  x.x.x.245         15   0030.ebd2.162b  ARPA   Vlan1
Internet  x.x.x.246          -   000f.8f08.a90e  ARPA   Vlan1
Internet  x.x.x.249          -   000f.8f08.a90e  ARPA   FastEthernet0
Internet  x.x.x.250          0   0040.f414.acb9  ARPA   FastEthernet0
Router#
===========================================

 
 
 

cisco1711 & vlans: basic routing issue...

Post by Bria » Mon, 26 Jul 2004 15:41:39


It doesn't look like anything's wrong on your side.  The router with
the x.x.x.245 address is probably just blocking ICMP echo-replies.
But it may even be that you're blocking certain types of ICMP replies
since you can ping some devices but not traceroute to them.  Either
way, this is definitely not a routing issue since you can get to all
destinations via your default gateway but just can't get the ICMP
traffic back.

> I can't seem to route THROUGH my cisco1711
> router.  

> From inside the router I can ping both the
> internal AND external IPs, as well as any
> IP on the internet.  (Although I can't seem
> to traceroute to any of them!)

> Note: The gateway to the internet is the
>       FastEthernet2 port!

> But if I connect a server(IP: x.x.x.250),
> into the FastEthernet0 port, I CAN ping:
> x.x.x.246
> x.x.x.249
> x.x.x.250
> But I can NOT ping:
> x.x.x.245

> What am I missing here?

> Here is part of the config,(incl sh arp):
> ===========================================
> Router#sh run
> Building configuration...

> Current configuration : 1234 bytes
> !
> version 12.3
> hostname Router
> ip subnet-zero
> ip cef
> !
> !
> interface FastEthernet0
>  ip address x.x.x.249 255.255.255.248
>  no ip redirects
>  no ip proxy-arp
>  duplex auto
>  speed auto
>  no keepalive
> !
> interface FastEthernet1
>  no ip address
>  shutdown
> !
> interface FastEthernet2
>  no ip address
>  speed 10
> !
> interface FastEthernet3
>  no ip address
>  shutdown
> !
> interface FastEthernet4
>  no ip address
>  shutdown
> !
> interface Vlan1
>  ip address x.x.x.246 255.255.255.252
>  no ip redirects
>  no ip proxy-arp
> !
> ip classless
> ip route 0.0.0.0 0.0.0.0 x.x.x.245
> no ip http server
> no ip http secure-server
> !
> !
> ===========================================
> Router#sh ip arp
> Protocol  Address          Age (min)  Hardware Addr   Type   Interface
> Internet  x.x.x.245         15   0030.ebd2.162b  ARPA   Vlan1
> Internet  x.x.x.246          -   000f.8f08.a90e  ARPA   Vlan1
> Internet  x.x.x.249          -   000f.8f08.a90e  ARPA   FastEthernet0
> Internet  x.x.x.250          0   0040.f414.acb9  ARPA   FastEthernet0
> Router#
> ===========================================


 
 
 

cisco1711 & vlans: basic routing issue...

Post by Captai » Tue, 27 Jul 2004 03:15:48


The traceroute problem is just an unusual side issue.

The main problem is that Cisco1711 can see everything on the net,
but anything on the inside of the Cisco1711 can't seem to surf the
Internet.  (ie. the cisco1711 wont let any packets pass through it!)

///////////////////////////////////////////////////////////////////

>It doesn't look like anything's wrong on your side.  The router with
>the x.x.x.245 address is probably just blocking ICMP echo-replies.
>But it may even be that you're blocking certain types of ICMP replies
>since you can ping some devices but not traceroute to them.  Either
>way, this is definitely not a routing issue since you can get to all
>destinations via your default gateway but just can't get the ICMP
>traffic back.


>> I can't seem to route THROUGH my cisco1711
>> router.  

>> From inside the router I can ping both the
>> internal AND external IPs, as well as any
>> IP on the internet.  (Although I can't seem
>> to traceroute to any of them!)

>> Note: The gateway to the internet is the
>>       FastEthernet2 port!

>> But if I connect a server(IP: x.x.x.250),
>> into the FastEthernet0 port, I CAN ping:
>> x.x.x.246
>> x.x.x.249
>> x.x.x.250
>> But I can NOT ping:
>> x.x.x.245

>> What am I missing here?

>> Here is part of the config,(incl sh arp):
>> ===========================================
>> Router#sh run
>> Building configuration...

>> Current configuration : 1234 bytes
>> !
>> version 12.3
>> hostname Router
>> ip subnet-zero
>> ip cef
>> !
>> !
>> interface FastEthernet0
>>  ip address x.x.x.249 255.255.255.248
>>  no ip redirects
>>  no ip proxy-arp
>>  duplex auto
>>  speed auto
>>  no keepalive
>> !
>> interface FastEthernet1
>>  no ip address
>>  shutdown
>> !
>> interface FastEthernet2
>>  no ip address
>>  speed 10
>> !
>> interface FastEthernet3
>>  no ip address
>>  shutdown
>> !
>> interface FastEthernet4
>>  no ip address
>>  shutdown
>> !
>> interface Vlan1
>>  ip address x.x.x.246 255.255.255.252
>>  no ip redirects
>>  no ip proxy-arp
>> !
>> ip classless
>> ip route 0.0.0.0 0.0.0.0 x.x.x.245
>> no ip http server
>> no ip http secure-server
>> !
>> !
>> ===========================================
>> Router#sh ip arp
>> Protocol  Address          Age (min)  Hardware Addr   Type   Interface
>> Internet  x.x.x.245         15   0030.ebd2.162b  ARPA   Vlan1
>> Internet  x.x.x.246          -   000f.8f08.a90e  ARPA   Vlan1
>> Internet  x.x.x.249          -   000f.8f08.a90e  ARPA   FastEthernet0
>> Internet  x.x.x.250          0   0040.f414.acb9  ARPA   FastEthernet0
>> Router#
>> ===========================================

 
 
 

cisco1711 & vlans: basic routing issue...

Post by PES » Tue, 27 Jul 2004 03:36:47


Is everything inside definitely set to use x.x.x.249 as the default gateway?
Also, why is there a no keepalive setting on the fa0?


> The traceroute problem is just an unusual side issue.

> The main problem is that Cisco1711 can see everything on the net,
> but anything on the inside of the Cisco1711 can't seem to surf the
> Internet.  (ie. the cisco1711 wont let any packets pass through it!)

> ///////////////////////////////////////////////////////////////////

> >It doesn't look like anything's wrong on your side.  The router with
> >the x.x.x.245 address is probably just blocking ICMP echo-replies.
> >But it may even be that you're blocking certain types of ICMP replies
> >since you can ping some devices but not traceroute to them.  Either
> >way, this is definitely not a routing issue since you can get to all
> >destinations via your default gateway but just can't get the ICMP
> >traffic back.




- Show quoted text -

Quote:> >> I can't seem to route THROUGH my cisco1711
> >> router.

> >> From inside the router I can ping both the
> >> internal AND external IPs, as well as any
> >> IP on the internet.  (Although I can't seem
> >> to traceroute to any of them!)

> >> Note: The gateway to the internet is the
> >>       FastEthernet2 port!

> >> But if I connect a server(IP: x.x.x.250),
> >> into the FastEthernet0 port, I CAN ping:
> >> x.x.x.246
> >> x.x.x.249
> >> x.x.x.250
> >> But I can NOT ping:
> >> x.x.x.245

> >> What am I missing here?

> >> Here is part of the config,(incl sh arp):
> >> ===========================================
> >> Router#sh run
> >> Building configuration...

> >> Current configuration : 1234 bytes
> >> !
> >> version 12.3
> >> hostname Router
> >> ip subnet-zero
> >> ip cef
> >> !
> >> !
> >> interface FastEthernet0
> >>  ip address x.x.x.249 255.255.255.248
> >>  no ip redirects
> >>  no ip proxy-arp
> >>  duplex auto
> >>  speed auto
> >>  no keepalive
> >> !
> >> interface FastEthernet1
> >>  no ip address
> >>  shutdown
> >> !
> >> interface FastEthernet2
> >>  no ip address
> >>  speed 10
> >> !
> >> interface FastEthernet3
> >>  no ip address
> >>  shutdown
> >> !
> >> interface FastEthernet4
> >>  no ip address
> >>  shutdown
> >> !
> >> interface Vlan1
> >>  ip address x.x.x.246 255.255.255.252
> >>  no ip redirects
> >>  no ip proxy-arp
> >> !
> >> ip classless
> >> ip route 0.0.0.0 0.0.0.0 x.x.x.245
> >> no ip http server
> >> no ip http secure-server
> >> !
> >> !
> >> ===========================================
> >> Router#sh ip arp
> >> Protocol  Address          Age (min)  Hardware Addr   Type   Interface
> >> Internet  x.x.x.245         15   0030.ebd2.162b  ARPA   Vlan1
> >> Internet  x.x.x.246          -   000f.8f08.a90e  ARPA   Vlan1
> >> Internet  x.x.x.249          -   000f.8f08.a90e  ARPA   FastEthernet0
> >> Internet  x.x.x.250          0   0040.f414.acb9  ARPA   FastEthernet0
> >> Router#
> >> ===========================================

 
 
 

cisco1711 & vlans: basic routing issue...

Post by Captai » Thu, 29 Jul 2004 02:54:40


Yes, x.x.x.249 is the default for everything inside.

I've tried using keepalive, but it still doesn't route.

It has to be something simple, but I don't know what
to try next?

ie. It just wont accept the vlan as the default gateway!?!?!

//////////////////////////////////////////////////////////////////////
On Sun, 25 Jul 2004 14:36:47 -0400, "PES"


>Is everything inside definitely set to use x.x.x.249 as the default gateway?
>Also, why is there a no keepalive setting on the fa0?



>> The traceroute problem is just an unusual side issue.

>> The main problem is that Cisco1711 can see everything on the net,
>> but anything on the inside of the Cisco1711 can't seem to surf the
>> Internet.  (ie. the cisco1711 wont let any packets pass through it!)

>> ///////////////////////////////////////////////////////////////////

>> >It doesn't look like anything's wrong on your side.  The router with
>> >the x.x.x.245 address is probably just blocking ICMP echo-replies.
>> >But it may even be that you're blocking certain types of ICMP replies
>> >since you can ping some devices but not traceroute to them.  Either
>> >way, this is definitely not a routing issue since you can get to all
>> >destinations via your default gateway but just can't get the ICMP
>> >traffic back.



>> >> I can't seem to route THROUGH my cisco1711
>> >> router.

>> >> From inside the router I can ping both the
>> >> internal AND external IPs, as well as any
>> >> IP on the internet.  (Although I can't seem
>> >> to traceroute to any of them!)

>> >> Note: The gateway to the internet is the
>> >>       FastEthernet2 port!

>> >> But if I connect a server(IP: x.x.x.250),
>> >> into the FastEthernet0 port, I CAN ping:
>> >> x.x.x.246
>> >> x.x.x.249
>> >> x.x.x.250
>> >> But I can NOT ping:
>> >> x.x.x.245

>> >> What am I missing here?

>> >> Here is part of the config,(incl sh arp):
>> >> ===========================================
>> >> Router#sh run
>> >> Building configuration...

>> >> Current configuration : 1234 bytes
>> >> !
>> >> version 12.3
>> >> hostname Router
>> >> ip subnet-zero
>> >> ip cef
>> >> !
>> >> !
>> >> interface FastEthernet0
>> >>  ip address x.x.x.249 255.255.255.248
>> >>  no ip redirects
>> >>  no ip proxy-arp
>> >>  duplex auto
>> >>  speed auto
>> >>  no keepalive
>> >> !
>> >> interface FastEthernet1
>> >>  no ip address
>> >>  shutdown
>> >> !
>> >> interface FastEthernet2
>> >>  no ip address
>> >>  speed 10
>> >> !
>> >> interface FastEthernet3
>> >>  no ip address
>> >>  shutdown
>> >> !
>> >> interface FastEthernet4
>> >>  no ip address
>> >>  shutdown
>> >> !
>> >> interface Vlan1
>> >>  ip address x.x.x.246 255.255.255.252
>> >>  no ip redirects
>> >>  no ip proxy-arp
>> >> !
>> >> ip classless
>> >> ip route 0.0.0.0 0.0.0.0 x.x.x.245
>> >> no ip http server
>> >> no ip http secure-server
>> >> !
>> >> !
>> >> ===========================================
>> >> Router#sh ip arp
>> >> Protocol  Address          Age (min)  Hardware Addr   Type   Interface
>> >> Internet  x.x.x.245         15   0030.ebd2.162b  ARPA   Vlan1
>> >> Internet  x.x.x.246          -   000f.8f08.a90e  ARPA   Vlan1
>> >> Internet  x.x.x.249          -   000f.8f08.a90e  ARPA   FastEthernet0
>> >> Internet  x.x.x.250          0   0040.f414.acb9  ARPA   FastEthernet0
>> >> Router#
>> >> ===========================================

 
 
 

cisco1711 & vlans: basic routing issue...

Post by Captai » Thu, 29 Jul 2004 07:09:14


Correction, it now seems to be working!

I put keepalive on, but had to wait about 5 minutes before
all the routing started to work.

Why would there be such a delay?

And what does keepalive do?
(Someone once told me that having keepalive on, sometimes
causes problems?!?!?  Is this true?)

////////////////////////////////////////////////////////////////


>Yes, x.x.x.249 is the default for everything inside.

>I've tried using keepalive, but it still doesn't route.

>It has to be something simple, but I don't know what
>to try next?

>ie. It just wont accept the vlan as the default gateway!?!?!

>//////////////////////////////////////////////////////////////////////
>On Sun, 25 Jul 2004 14:36:47 -0400, "PES"

>>Is everything inside definitely set to use x.x.x.249 as the default gateway?
>>Also, why is there a no keepalive setting on the fa0?



>>> The traceroute problem is just an unusual side issue.

>>> The main problem is that Cisco1711 can see everything on the net,
>>> but anything on the inside of the Cisco1711 can't seem to surf the
>>> Internet.  (ie. the cisco1711 wont let any packets pass through it!)

>>> ///////////////////////////////////////////////////////////////////

>>> >It doesn't look like anything's wrong on your side.  The router with
>>> >the x.x.x.245 address is probably just blocking ICMP echo-replies.
>>> >But it may even be that you're blocking certain types of ICMP replies
>>> >since you can ping some devices but not traceroute to them.  Either
>>> >way, this is definitely not a routing issue since you can get to all
>>> >destinations via your default gateway but just can't get the ICMP
>>> >traffic back.



>>> >> I can't seem to route THROUGH my cisco1711
>>> >> router.

>>> >> From inside the router I can ping both the
>>> >> internal AND external IPs, as well as any
>>> >> IP on the internet.  (Although I can't seem
>>> >> to traceroute to any of them!)

>>> >> Note: The gateway to the internet is the
>>> >>       FastEthernet2 port!

>>> >> But if I connect a server(IP: x.x.x.250),
>>> >> into the FastEthernet0 port, I CAN ping:
>>> >> x.x.x.246
>>> >> x.x.x.249
>>> >> x.x.x.250
>>> >> But I can NOT ping:
>>> >> x.x.x.245

>>> >> What am I missing here?

>>> >> Here is part of the config,(incl sh arp):
>>> >> ===========================================
>>> >> Router#sh run
>>> >> Building configuration...

>>> >> Current configuration : 1234 bytes
>>> >> !
>>> >> version 12.3
>>> >> hostname Router
>>> >> ip subnet-zero
>>> >> ip cef
>>> >> !
>>> >> !
>>> >> interface FastEthernet0
>>> >>  ip address x.x.x.249 255.255.255.248
>>> >>  no ip redirects
>>> >>  no ip proxy-arp
>>> >>  duplex auto
>>> >>  speed auto
>>> >>  no keepalive
>>> >> !
>>> >> interface FastEthernet1
>>> >>  no ip address
>>> >>  shutdown
>>> >> !
>>> >> interface FastEthernet2
>>> >>  no ip address
>>> >>  speed 10
>>> >> !
>>> >> interface FastEthernet3
>>> >>  no ip address
>>> >>  shutdown
>>> >> !
>>> >> interface FastEthernet4
>>> >>  no ip address
>>> >>  shutdown
>>> >> !
>>> >> interface Vlan1
>>> >>  ip address x.x.x.246 255.255.255.252
>>> >>  no ip redirects
>>> >>  no ip proxy-arp
>>> >> !
>>> >> ip classless
>>> >> ip route 0.0.0.0 0.0.0.0 x.x.x.245
>>> >> no ip http server
>>> >> no ip http secure-server
>>> >> !
>>> >> !
>>> >> ===========================================
>>> >> Router#sh ip arp
>>> >> Protocol  Address          Age (min)  Hardware Addr   Type   Interface
>>> >> Internet  x.x.x.245         15   0030.ebd2.162b  ARPA   Vlan1
>>> >> Internet  x.x.x.246          -   000f.8f08.a90e  ARPA   Vlan1
>>> >> Internet  x.x.x.249          -   000f.8f08.a90e  ARPA   FastEthernet0
>>> >> Internet  x.x.x.250          0   0040.f414.acb9  ARPA   FastEthernet0
>>> >> Router#
>>> >> ===========================================

 
 
 

cisco1711 & vlans: basic routing issue...

Post by Solom » Thu, 29 Jul 2004 08:25:34


Is all inside addresses are Internet routable? Or are you doing NAT?

What happens when you try to ping your internal net from internet..,
are you able to do a traceroute? if so is it coming up to your GW?

Solomon


> Yes, x.x.x.249 is the default for everything inside.

> I've tried using keepalive, but it still doesn't route.

> It has to be something simple, but I don't know what
> to try next?

> ie. It just wont accept the vlan as the default gateway!?!?!

> //////////////////////////////////////////////////////////////////////
> On Sun, 25 Jul 2004 14:36:47 -0400, "PES"

> >Is everything inside definitely set to use x.x.x.249 as the default gateway?
> >Also, why is there a no keepalive setting on the fa0?



> >> The traceroute problem is just an unusual side issue.

> >> The main problem is that Cisco1711 can see everything on the net,
> >> but anything on the inside of the Cisco1711 can't seem to surf the
> >> Internet.  (ie. the cisco1711 wont let any packets pass through it!)

> >> ///////////////////////////////////////////////////////////////////

> >> >It doesn't look like anything's wrong on your side.  The router with
> >> >the x.x.x.245 address is probably just blocking ICMP echo-replies.
> >> >But it may even be that you're blocking certain types of ICMP replies
> >> >since you can ping some devices but not traceroute to them.  Either
> >> >way, this is definitely not a routing issue since you can get to all
> >> >destinations via your default gateway but just can't get the ICMP
> >> >traffic back.



> >> >> I can't seem to route THROUGH my cisco1711
> >> >> router.

> >> >> From inside the router I can ping both the
> >> >> internal AND external IPs, as well as any
> >> >> IP on the internet.  (Although I can't seem
> >> >> to traceroute to any of them!)

> >> >> Note: The gateway to the internet is the
> >> >>       FastEthernet2 port!

> >> >> But if I connect a server(IP: x.x.x.250),
> >> >> into the FastEthernet0 port, I CAN ping:
> >> >> x.x.x.246
> >> >> x.x.x.249
> >> >> x.x.x.250
> >> >> But I can NOT ping:
> >> >> x.x.x.245

> >> >> What am I missing here?

> >> >> Here is part of the config,(incl sh arp):
> >> >> ===========================================
> >> >> Router#sh run
> >> >> Building configuration...

> >> >> Current configuration : 1234 bytes
> >> >> !
> >> >> version 12.3
> >> >> hostname Router
> >> >> ip subnet-zero
> >> >> ip cef
> >> >> !
> >> >> !
> >> >> interface FastEthernet0
> >> >>  ip address x.x.x.249 255.255.255.248
> >> >>  no ip redirects
> >> >>  no ip proxy-arp
> >> >>  duplex auto
> >> >>  speed auto
> >> >>  no keepalive
> >> >> !
> >> >> interface FastEthernet1
> >> >>  no ip address
> >> >>  shutdown
> >> >> !
> >> >> interface FastEthernet2
> >> >>  no ip address
> >> >>  speed 10
> >> >> !
> >> >> interface FastEthernet3
> >> >>  no ip address
> >> >>  shutdown
> >> >> !
> >> >> interface FastEthernet4
> >> >>  no ip address
> >> >>  shutdown
> >> >> !
> >> >> interface Vlan1
> >> >>  ip address x.x.x.246 255.255.255.252
> >> >>  no ip redirects
> >> >>  no ip proxy-arp
> >> >> !
> >> >> ip classless
> >> >> ip route 0.0.0.0 0.0.0.0 x.x.x.245
> >> >> no ip http server
> >> >> no ip http secure-server
> >> >> !
> >> >> !
> >> >> ===========================================
> >> >> Router#sh ip arp
> >> >> Protocol  Address          Age (min)  Hardware Addr   Type   Interface
> >> >> Internet  x.x.x.245         15   0030.ebd2.162b  ARPA   Vlan1
> >> >> Internet  x.x.x.246          -   000f.8f08.a90e  ARPA   Vlan1
> >> >> Internet  x.x.x.249          -   000f.8f08.a90e  ARPA   FastEthernet0
> >> >> Internet  x.x.x.250          0   0040.f414.acb9  ARPA   FastEthernet0
> >> >> Router#
> >> >> ===========================================

 
 
 

1. VTP/VLAN and Possible Routing issue?

Hi everyone,

I'm having an issue with a new network setup here.  I have a 6509 with
a Sup720 core switch running in hybrid mode and all 3750's for the
distribution layer.  The 6509 and 3750's are connected with fiber and
are dot1q nonegotiate trunks.  Trunk links are active and I can ping
devices on Vlan1 (private addressing 192.168.1.x/24).  When I do a sh
vlan on one 3750 (all I have online right now) - I get Vlan 1 and Vlan
130.  I should also have Vlan 131.  The 6509 is configured as a VTP
server and the 3750 is configured as a VTP client - both on the same
Domain.  This being said, I cannot ping devices on Vlan 130.

So really, I have two issues going on here.

Any help would be greatly appreciated.

Thanks.

-Jason

2. Hibernate OS/2 according to OS/2MAG?

3. Routing/VLAN Issues between 3640rtr and Pix520

4. cd/r

5. routing between vlan issue?

6. problem reading cd's

7. Interflow & RAN Route in ACD Basic Report #3

8. Dynamic SQL Method 4

9. Inter-Vlan Routing & DHCP - Cannot obtain an address

10. VLAN & Routing

11. 2948G-L3 - VLAN config & routing

12. VLAN Tagging & VLAN Priority

13. Two ISPs & Route-map & NAT POOL & access-list & not working -HELP!