Solved

Cisco Catalyst 4948> Device can't be seen by others unless they are on the same subnet

Posted on 2010-08-23
12
1,823 Views
Last Modified: 2012-05-10
Earlier I posted a question about configuring an IP for my Cisco 4948..

I got a solid response from Kvistofta and here it is:

"
enable
(password)
conf t
hostname cisco4948noca
ip http server
int vlan1
 ip address 10.1.98.3 255.255.0.0
exit
ip default-gateway 10.1.2.1
line vty 0 4
login
password <your password>
exit
enable secret <your password>

http to your switch and login with blank username and the enable-password you entered above as password. "

This worked fine but from a workstation not using 10.1.2.1 as it's gateway the device is not pingable. I know the problem is with the 4948 switch because when I use the cat5 connected to the 'MAIN' switch  and directly connect it to my laptop instead of thru the 4948 the laptop pulls 10.1.98.112 and it is pingable from everywhere. What do you think I'm missing in the configuration of the 4948 that is preventing it from being seen by those not on the 10.1.2.1 gateway?

Thanks again
0
Comment
Question by:cp361
  • 6
  • 4
  • 2
12 Comments
 
LVL 24

Expert Comment

by:rfc1180
Comment Utility
you still need to configure layer 3 routing on the switch for other vlans.

can you post your 4948 config please

Billy
0
 
LVL 6

Expert Comment

by:Galtar99
Comment Utility
Either the switch routes or it's connected to something that routes for it.  Either way, we need to see the config, and probably the config or it's up stream neighbor.
0
 

Author Comment

by:cp361
Comment Utility
the output from sh run is:

cisco4948noca#sh run
Building configuration...

Current configuration : 2123 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
service compress-config
!
hostname cisco4948noca
!
enable secret 5 $1$Wy6.$hSSst1riu.j1bDejhKisR/
!
vtp mode transparent
ip subnet-zero
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
power redundancy-mode redundant
!
!
!
vlan internal allocation policy ascending
!
interface GigabitEthernet1/1
!
interface GigabitEthernet1/2
!
interface GigabitEthernet1/3
!
interface GigabitEthernet1/4
!
interface GigabitEthernet1/5
!
interface GigabitEthernet1/6
!
interface GigabitEthernet1/7
!
interface GigabitEthernet1/8
!
interface GigabitEthernet1/9
!
interface GigabitEthernet1/10
!
interface GigabitEthernet1/11
!
interface GigabitEthernet1/12
!
interface GigabitEthernet1/13
!
interface GigabitEthernet1/14
!
interface GigabitEthernet1/15
!
interface GigabitEthernet1/16
!
interface GigabitEthernet1/17
!
interface GigabitEthernet1/18
!
interface GigabitEthernet1/19
!
interface GigabitEthernet1/20
!
interface GigabitEthernet1/21
!
interface GigabitEthernet1/22
!
interface GigabitEthernet1/23
!
interface GigabitEthernet1/24
!
interface GigabitEthernet1/25
!
interface GigabitEthernet1/26
!
interface GigabitEthernet1/27
!
interface GigabitEthernet1/28
!
interface GigabitEthernet1/29
!
interface GigabitEthernet1/30
!
interface GigabitEthernet1/31
!
interface GigabitEthernet1/32
!
interface GigabitEthernet1/33
!
interface GigabitEthernet1/34
!
interface GigabitEthernet1/35
!
interface GigabitEthernet1/36
!
interface GigabitEthernet1/37
!
interface GigabitEthernet1/38
!
interface GigabitEthernet1/39
!
interface GigabitEthernet1/40
!
interface GigabitEthernet1/41
!
interface GigabitEthernet1/42
!
interface GigabitEthernet1/43
!
interface GigabitEthernet1/44
!
interface GigabitEthernet1/45
!
interface GigabitEthernet1/46
!
interface GigabitEthernet1/47
!
interface GigabitEthernet1/48
!
interface Vlan1
 ip address 10.1.98.3 255.255.0.0
!
ip default-gateway 10.1.2.1
ip http server
!
!
!
!
!
!
line con 0
 stopbits 1
line vty 0 4
 password password
 login
!
end

cisco4948noca#
0
 
LVL 24

Expert Comment

by:rfc1180
Comment Utility
what ports are connected to what? and what subnets are what ports?
0
 

Author Comment

by:cp361
Comment Utility
Sorry .. Port 1 is connected to another switch a Catalyst 6513 5/33 dhcp is enabled on it. The 4948 is not configured at all save for the previously mentioned vlan1 config included in original question at top of this page.

Thanks
0
 

Author Comment

by:cp361
Comment Utility
The other ports on the 4948 are used for servers at least that is the intent and they are reachable from any P/C using the same gateway subnet mask
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 24

Accepted Solution

by:
rfc1180 earned 50 total points
Comment Utility
Depending on your image, it would be something like:

no ip default-gateway 10.1.2.1
ip route 0.0.0.0 0.0.0.0 10.1.2.1

interface Vlan100
 description subnet 100
 ip address 192.168.100.0 255.255.255.0
 ip access-group 2100 in
 no ip redirects
 no ip unreachables
 no ip proxy-arp


interface Vlan101
 description subnet 101
 ip address 192.168.101.0 255.255.255.0
 ip access-group 2101 in
 no ip redirects
 no ip unreachables
 no ip proxy-arp

access-list 2100 remark subnet 100
access-list 2100 permit ip 192.168.100.0 0.0.0.255 any

access-list 2100 remark subnet 101
access-list 2100 permit ip 192.168.101.0 0.0.0.255 any

interface GigabitEthernet1/2
switchport mode access
switchport access vlan 100

interface GigabitEthernet1/3
switchport mode access
switchport access vlan 101


Billy
0
 
LVL 24

Expert Comment

by:rfc1180
Comment Utility
correction on the ACLs:
access-list 2100 remark subnet 100
access-list 2100 permit ip 192.168.100.0 0.0.0.255 any

access-list 2101 remark subnet 101
access-list 2101 permit ip 192.168.101.0 0.0.0.255 any


Note, these are optional, I always add ACLs for the subnets that are connected, this will only only those networks.

Billy
0
 

Author Comment

by:cp361
Comment Utility
@rfc1180:

It looks good and a lot for me to chew on  ;)
Would you mind including the:

enable
conf t
exit

commands?
If required?

Thanks
0
 
LVL 6

Expert Comment

by:Galtar99
Comment Utility
The upstream switch it's connected to, can you post its config as well?  How many VLAN's are you using and what IP subnets are associated with them?  What's doing the routing for your network?  Or is it flat with just switches?
0
 

Author Comment

by:cp361
Comment Utility
I'm good everything is working as it should the devices(servers) are reachable from all subnets now I will mark this issue as resolved.

Thanks a million!
0
 

Author Comment

by:cp361
Comment Utility
Ok from the 4948 I can ping another deivice from a port on the vlan so it appears the vlan can't be seen remotely inspite of the trunk and the definitions on the upstream switch


0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

The worst thing when starting a new job is when the previous Network Administrator left behind no documentation. How do you get into the devices? If you've been in this situation or just accidently mistyped your password, this article will hopefully…
This tutorial will go through the steps required to write a script that will back up the configuration settings of a HP-ProCurve switch. You will need to get the following things to follow this tutorial: Telnet Scripting Tool e.g. TST10.exe …
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now