inteliport
asked on
Would like to use 1Q VLAN to trunk two cisco routers
Currently trying to connect two locations via 1Q VLAN in order to migrate to new internet gateway.
The future goal is to aggregate all locations via Ethernet to one central location using vlans.
My issues is that I cannot ping either side when I try to use sub-interfaces, here's the traffic flow and setup.
Location-1 Location-2
3660 -> ME3400 Port1 -> ME3400 Port 1-> 3Com4200 -> 7200
Location-2
7200 -> ME3400 Port 2 -> Internet
The 3660 connects to the ME3400 switch on port1 via FastEthernet0/1 with an ip address of 10.10.10.2/30
The ME3400 Port1 on the other side connects to a 4200 3Com switch and then the 3Com switch connects to the 7200 on interface GigabitEthernet0/1
The interface GigabitEthernet0/1 interface has a secondary address of 10.10.10.1/30
Then on interface GigabitEthernet0/2 the 7200 connects back to the ME3400 Port-2 which is handed off to the new Internet Gateway
The Telco owns both ME3400's
The 3660 looks like this (no vlan) this works
interface FastEthernet0/1
ip address 10.10.10.2 255.255.255.252
speed auto
full-duplex
no cdp enable
The 7200 looks like this (no vlan) this works
interface GigabitEthernet0/1
ip address public-ip 255.255.255.0 secondary
ip address public-ip 255.255.255.128 secondary
ip address public-ip 255.255.255.0 secondary
ip address 10.10.10.1 255.255.255.252 secondary
ip address public-ip 255.255.254.0
ip route-cache same-interface
duplex auto
speed auto
media-type rj45
no negotiation auto
The above works and I can ping both 10.10.10.2 and 10.10.10.1 from both routers I can ping the internet if I setup a route, but here's the issue,
When I setup up both sides for vlans
3600
interface FastEthernet0/1.100
ip address 10.10.10.2 255.255.255.252
encapsulation dot1Q 100
no cdp enable
7200
interface GigabitEthernet0/1.100
ip address 10.10.10.1 255.255.255.252
encapsulation dot1Q 100
no cdp enable
I cannot ping ether one, my guess is the routers are stripping the tags off the vlans and not routing the ip's, or It can't find the proper route, I tired just about everything to get this to route using the vlans, except the one that works ;)
I need to get this to work so that we can issue Vlans from different locations that will be backed hauled with Ethernet to the 7200 Internet gateway, once this is working I will have the Telco point all the public Class C's to the new 7200 gateway.
Any ideas,
Thanks in advance
The future goal is to aggregate all locations via Ethernet to one central location using vlans.
My issues is that I cannot ping either side when I try to use sub-interfaces, here's the traffic flow and setup.
Location-1 Location-2
3660 -> ME3400 Port1 -> ME3400 Port 1-> 3Com4200 -> 7200
Location-2
7200 -> ME3400 Port 2 -> Internet
The 3660 connects to the ME3400 switch on port1 via FastEthernet0/1 with an ip address of 10.10.10.2/30
The ME3400 Port1 on the other side connects to a 4200 3Com switch and then the 3Com switch connects to the 7200 on interface GigabitEthernet0/1
The interface GigabitEthernet0/1 interface has a secondary address of 10.10.10.1/30
Then on interface GigabitEthernet0/2 the 7200 connects back to the ME3400 Port-2 which is handed off to the new Internet Gateway
The Telco owns both ME3400's
The 3660 looks like this (no vlan) this works
interface FastEthernet0/1
ip address 10.10.10.2 255.255.255.252
speed auto
full-duplex
no cdp enable
The 7200 looks like this (no vlan) this works
interface GigabitEthernet0/1
ip address public-ip 255.255.255.0 secondary
ip address public-ip 255.255.255.128 secondary
ip address public-ip 255.255.255.0 secondary
ip address 10.10.10.1 255.255.255.252 secondary
ip address public-ip 255.255.254.0
ip route-cache same-interface
duplex auto
speed auto
media-type rj45
no negotiation auto
The above works and I can ping both 10.10.10.2 and 10.10.10.1 from both routers I can ping the internet if I setup a route, but here's the issue,
When I setup up both sides for vlans
3600
interface FastEthernet0/1.100
ip address 10.10.10.2 255.255.255.252
encapsulation dot1Q 100
no cdp enable
7200
interface GigabitEthernet0/1.100
ip address 10.10.10.1 255.255.255.252
encapsulation dot1Q 100
no cdp enable
I cannot ping ether one, my guess is the routers are stripping the tags off the vlans and not routing the ip's, or It can't find the proper route, I tired just about everything to get this to route using the vlans, except the one that works ;)
I need to get this to work so that we can issue Vlans from different locations that will be backed hauled with Ethernet to the 7200 Internet gateway, once this is working I will have the Telco point all the public Class C's to the new 7200 gateway.
Any ideas,
Thanks in advance
ASKER
They are running Q-n-Q already.
I had that in my question as a side note but pulled it out.
Yes /24 thanks ;)
I had that in my question as a side note but pulled it out.
Yes /24 thanks ;)
OK, now I'm out of ideas.
Is the 3com switch port set as a trunk?
ASKER
No the 3com switch is set with default settings except for a public ip address. I am assuming that the 3Com switch would leave the data alone and just pass it on layer 2.
I'll start reviewing the debug in detail tonight and look at installing a tap in the morning maybe I can see something I'm missing.
Any ideas would be helpful
Thanks so far
- Cheers
I
I'll start reviewing the debug in detail tonight and look at installing a tap in the morning maybe I can see something I'm missing.
Any ideas would be helpful
Thanks so far
- Cheers
I
If it was a cisco switch, you would need to set:
encpsulation type to dot1q
switchport mode trunk
on the specifiv interface
Good luck
encpsulation type to dot1q
switchport mode trunk
on the specifiv interface
Good luck
ASKER
Hi Dan,
Yep that would do it. Are you thinking that maybe the routers are stripping the tags under layer 3, which is what I've been thinking about all day.
I spoke with the Telco today, they said the way I have it configured is the same way they configure their stuff.
I'll also take a closer look at the 3Com just in case.
I'll also review the config and let someone else take a gander and I'll rebuild the interfaces all over again.
- Cheers
Yep that would do it. Are you thinking that maybe the routers are stripping the tags under layer 3, which is what I've been thinking about all day.
I spoke with the Telco today, they said the way I have it configured is the same way they configure their stuff.
I'll also take a closer look at the 3Com just in case.
I'll also review the config and let someone else take a gander and I'll rebuild the interfaces all over again.
- Cheers
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.
I will leave the following recommendation for this question in the Cleanup topic area:
Accept: Another-Dan {http:#18098333}
Any objections should be posted here in the next 4 days. After that time, the question will be closed.
TheLearnedOne
EE Cleanup Volunteer
I will leave the following recommendation for this question in the Cleanup topic area:
Accept: Another-Dan {http:#18098333}
Any objections should be posted here in the next 4 days. After that time, the question will be closed.
TheLearnedOne
EE Cleanup Volunteer
And, just because I have the opportunity to pick nits, it's "/24", not "Class C's". ;)