Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Bad Subnet Configuration on my Cisco 3750?

Posted on 2007-10-15
Medium Priority
Last Modified: 2011-10-03
I have a 24-port Cisco 3750 switch that has been configured by a 3rd-party consultant who is no longer available to me, so I need help understanding and correcting this problem...

First, I will describe the current configuration to the best of my ability:  The switch is configured with one VLAN (the default).  The switch is on IP address, and it is configured as the default gateway for the subnet (let's call it "Subnet A") on my in-house network.  Port 3 on the switch is configured as the router for "Subnet B" (, also in-house.  Clients in Subnet B (10.0) are configured to use (port 3) as their default gateway.  The only reason we created Subnet B was to add available IP addresses; at the time, we did not have a need to isolate traffic between the subnets.

The PROBLEM is that all Subnet B clients are required to uplink to the 3750 switch via Port 3.   For some reason, I cannot connect Subnet B clients to any other port on the switch and have communication with Subnet A.  Is this supposed to be the case?  What can I do to allow the two subnets to communicate with each other from any port on the switch?

It seems to me that the consultant should have created VLANS instead of setting one port to be a router for one of the subnets, but this is NOT my area of expertise.

I am fast approaching the need to isolate traffic from other subnets, so this problem is critical to me.  Thanks for any help you can provide!
Question by:isdirect
LVL 50

Accepted Solution

Don Johnston earned 1500 total points
ID: 20081877
It sounds like the switch is set up with layer 3 ports. Whether or not this is the best design would require additional information as to the topology of the network.

It could be that the 3750 is the distribution switch and you have all the users connected to access switches with no need for VLANs to extend beyond the access layer switches. In that case, this configuration would be appropriate.

That's just one of the catches with design... Any way that works can be defended as the "right" way.
LVL 29

Expert Comment

by:Jan Springer
ID: 20086239
You can have multiple ports in the same vlan.

int f0/x
  switchport mode access vlan  50
  ! or whatever subnet B's vlan should be
  ! repeat the config for each port

int vlan 50 ! or whatever B's vlan should be
 ip address

If you can't get into the switch because you don't know the passwords, do password recovery:


Author Comment

ID: 20111225
Obviously, the accepted solution isn't really a "solution" so much as it's an "explanation."  There doesn't seem to be a way to do what I want to do.

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Suggested Courses

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question