asked on

Cisco 4507R toubleshoot accessing 192.168.40.254 on vlan 40 from vlan 1

we added a bt infinity connection and I need to add another vlan to our 4507R, but can't get it to work and I can't access it from another vlan.

this is what I've setup

!
vlan 40
name BT Infinity
!

!
interface Vlan40
description ----- BT Infinity - vlan 40 - 192.168.40.0/24 -----
ip address 192.168.40.1 255.255.255.0
ip helper-address 10.30.0.1
no ip redirects
!

as part of sh ip route I can see:
C 192.168.40.0/24 is directly connected, Vlan40

from the 4507R i can ping the infinity router 192.168.40.254
#ping 192.168.40.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.40.254, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

but i can't ping it or open the admin page from any machine on vlan 1.

the bt infinity router is connected to a smaller switch, which is connected to interface GigabitEthernet6/11 on the 4507R and that has no access lists applied etc
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,40

BigPapaGotti

Does this smaller switch have a trunk set up between itself and the 4507R? Are there other VLANS confirgured or is VLAN 40 the First VLAN you are adding other than VLAN1? You may need to enable "ip routing" from Global Configuration Mode in order to allow the VLANS to communicate with each other. Also if you do a "show ip interface brief" do the correct VLANS and interfaces show "up"

ee-gd

ASKER

yes the smaller switch has a trunk configured and many other vlans configured on the 4507R. the switch is routing fine between the other vlans. there are three other vlans configured on the smaller switch too - all working fine too.

interfaces look OK too

sh ip interface brief
Interface IP-Address OK? Method Status Protocol

Vlan1 10.10.0.1 YES NVRAM up up

Vlan40 192.168.40.1 YES NVRAM up up

GigabitEthernet6/11 unassigned YES unset up up

BigPapaGotti

Are you able to provide a sanitized running configuration of the 4507 and the smaller switch so that we can have a closer look at the configuration and issue.

ee-gd

ASKER

there you go an edited version of sh run
sh-run---sanitized.log

BigPapaGotti

Does the router have a route to access hosts on VLAN1?

ee-gd

ASKER

we don't have a separate router. This cisco 4507R is the switch at the core albeit layer 3 one and there is PIX515E firewall on 192.168.110.254, which is where our main internet connection is connected.

in sh ip route vlan1 10.0.0.0/8 is directly connected
10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 10.0.0.0/8 is directly connected, Vlan1
S 10.30.0.80/32 [1/0] via 192.168.80.80

ASKER CERTIFIED SOLUTION

BigPapaGotti

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ee-gd

ASKER

in fact you are spot on.

I've just spoken to cisco and they gave the same instructions - setup route on the BT Infinity router for our vlans.

Thanks a lot for your help

BigPapaGotti

Glad to hear that solved it.

No problem at all, glad to help!