Solved

VLAN "flickering" - ping request timed out infrequently

Posted on 2008-10-02
3
702 Views
Last Modified: 2013-11-09
I am setting up a VLAN on our network, mostly made up of cisco 3750 switches. It will only be used on one switch. This VLAN will be tunneled through an ASA box to another network in another company. It should not talk to any other VLANs except to be able to use the tunnel (though for starters I will keep it open to test)

I've set up:
vlan access-map map_ki 10
 action forward
 match ip address ki_acl
interface Vlan54
 description ....
 ip address 192.168.54.1 255.255.255.0
ip access-list extended ki_acl
 permit ip any any

in the asa box I added to the outside accesslist permiting this VLAN out to any on port 80

My problem:
it seems to "time out". if I ping or try to access a webpage it sometimes completes the action and sometimes not.
if I ping -t an inside ip and google side by side they might give 10 successes then 20 request timed out then again success. And the two pings are not consistent either.

I've tried changing ports on the switch as well as the cables so I've pretty much ruled those out.

how do I troubleshoot this?
0
Comment
Question by:oddny
  • 2
3 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 125 total points
ID: 22629869
Awfully odd way to structure this.
Does the ASA have an unused Ethernet port on it? If yes, just connect it to an access port in vlan54.
If no, consider trunking a port between the switch and the asa and create a sub-interface for vlan54.
This way all traffic restrictions are at the asa proper and not on the switch. As long as the vlan54 interface of the asa has a lower security level than the inside, zero traffic will be allowed, but all vlan54 traffic will be allowed out. Setting it up for the vpn to another company is piece of cake.
0
 

Author Comment

by:oddny
ID: 22643956
it's the way other vlans are structured here and I couldnt get it to work solely on the cisco guide on vlans for 3750. Probably because we have switches that are older too? 2950 and such.

anyway, it's stopped flickering now. Thank you.
0
 

Author Closing Comment

by:oddny
ID: 31502492
it's the way other vlans are structured here and I couldnt get it to work solely on the cisco guide on vlans for 3750. Probably because we have switches that are older too? 2950 and such.

anyway, it's stopped flickering now. Thank you.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Link issue 11 50
ASR920 switching 2 26
Etherchannel trunking 10 39
Open a port on Cisco Router 1941 23 35
#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

948 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now