Link to home
Start Free TrialLog in
Avatar of Wibble_
Wibble_

asked on

EASY CISCO: can't connect from/to remote subnet, even though ip default-gateway set correctly.

I am completely stuck here.

We have a Catalyst 4506 with SupII+ running IOS 12.1(20r)EW1

I have set the ip default-gateway correctly, but cannot ping anything off the local subnet. What have i done wrong?

included below, running config and ping results.

the toplogy is :

this switch --- dist2 --- corerouter

The unit can connect to another lan if i enable a vlan interface, and assign an IP in the correct range, but it again won't pass anything through the gateway.


I have checked the gateway config, and it seems fine - we have other switches using it, and working ok.

I'm sure it's something silly i have missed.

Any pointers would be hugely appreciated.

W
#sh run
 
Building configuration...
 
Current configuration : 8655 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
service compress-config
!
hostname XXXX_4506
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/
!
no aaa new-model
clock summer-time UTC recurring last Sun Mar 1:00 last Sun Oct 2:00
ip subnet-zero
no ip domain-lookup
!
cluster run
!
!
!
power redundancy-mode redundant
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface GigabitEthernet1/1
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet1/2
!
interface FastEthernet2/1
!
interface FastEthernet2/2
!
....
!
interface FastEthernet6/48
!
interface Vlan1
 no ip address
 no ip route-cache cef
 no ip route-cache
 shutdown
!
interface Vlan345
 description MANAGEMENT
 ip address 172.16.254.120 255.255.254.0
!
ip default-gateway 172.16.254.1
no ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
 stopbits 1
line vty 0 4
 exec-timeout 720 0
 password XXXXXXX
 login
line vty 5 15
 no login
!
ntp server 10.10.0.1
end
 
XXXXX_4506#ping 172.16.254.1
 
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.254.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
XXXXX_4506#ping 172.16.254.120
 
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.254.120, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
XXXXX_4506#ping 172.16.20.1
 
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.20.1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
XXXXX_4506#ping 10.10.10.1
 
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.10.1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
XXXXX_4506#
 
 
XXXX_4506#sh ver
Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500-IPBASEK9-M), Version 12.2(40)SG, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Wed 07-Nov-07 18:51 by prod_rel_team
Image text-base: 0x10000000, data-base: 0x117EBBE8
 
ROM: 12.1(20r)EW1
Dagobah Revision 95, Swamp Revision 3
 
XXXX_4506 uptime is 22 minutes
System returned to ROM by reload
System image file is "bootflash:"
 
cisco WS-C4506 (MPC8245) processor (revision 4) with 262144K bytes of memory.
Processor board ID 
MPC8245 CPU at 266Mhz, Supervisor II+
Last reset from Reload
2 Virtual Ethernet interfaces
240 FastEthernet interfaces
2 Gigabit Ethernet interfaces
511K bytes of non-volatile configuration memory.
 
Configuration register is 0x2101
 
 
XXXX_4506#sh int statu | inc Gi
Gi1/1                        connected    trunk        full   1000 1000BaseSX
Gi1/2                        notconnect   1            full   1000 1000BaseSX

Open in new window

ASKER CERTIFIED SOLUTION
Avatar of Don Johnston
Don Johnston
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Agree with Don
The default-gateway command is not a routing command and is only for access to the device itself for management.
So you need the ip route command to route packets from other interfaces
First of all..   make sure you are configuring this as a L3 router, not a bridge.
Add this to your config:
ip routing

Once you have enabled IP routing,  "default-gateway"  is no longer meaningful.   Use a static route to establish your default gateway.

For example,  to use a metric of 254  (allowing your default to be overriden by a learned route, if you later enable a routing protocol):
ip route  0.0.0.0 0.0.0.0  172.16.254.1   254


Second, check  172.16.254.1
Can you ping this IP from your 4k?

If possible, login to 172.16.254.1, whatever that is   and try pinging 172.16.254.120   Make sure 172.16.254.120  will  accept traffic
you route to it.


Avatar of Wibble_
Wibble_

ASKER

Thanks guys, donjonston and irmoore to the rescue again! Don beat you on this one though, Mr Moore.

I thought that the device would allow access to the first vlan in L2 mode via ip default-gateway.. I guess not!

Thanks again for your help.

W