Link to home
Create AccountLog in
Avatar of cpatte7372
cpatte7372Flag for United Kingdom of Great Britain and Northern Ireland

asked on

Cisco 1921 Not Routing

Hello Experts,

I have a scenario that is doing my head in.

From the diagram I can ping on the 1921 from vlan 112 with ip address However, I can’t ping the same ip address from my pc with ip address

I can ping from the 2690.

Can someone please take a look at the configs and let me know why that is?


Avatar of cpatte7372
Flag of United Kingdom of Great Britain and Northern Ireland image



Please note, although I've provided the topology with GNS3 routers, this is live equipment.

Avatar of asavener
Add the command "ip routing" to the 2960.

It would accept ip routing. The router will only accept ip default-gateway

I meant to say it 'won't' accept ip routing
Avatar of asavener
Flag of United States of America image

Link to home
Create an account to see this answer
Signing up is free. No credit card required.
Create Account

Thanks again for responding. I'm not at work so can't provide the show version. However, its very the latest 2960-S. Its the only 2960-S that utilises the Flex Stack.

I did try 'ip routing' in configuration mode. It actually isn't available.

I also can't configure sub interfaces.

I was able to log onto the device remotely and do a show version.

From the show version would you be able let me know what the problem is?

And why I can't add sub-interfaces to Fast 0? Or make Fast 0 into a switchport?


Switch#show ver
Cisco IOS Software, C2960S Software (C2960S-UNIVERSALK9-M), Version 12.2(55)SE5, RELEASE SOFTWARE (fc1)
Technical Support:
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Thu 09-Feb-12 19:22 by prod_rel_team
Image text-base: 0x00003000, data-base: 0x01B00000

ROM: Bootstrap program is Alpha board boot loader
BOOTLDR: C2960S Boot Loader (C2960S-HBOOT-M) Version 12.2(55r)SE, RELEASE SOFTWARE (fc1)

Switch uptime is 6 hours, 15 minutes
System returned to ROM by power-on
System image file is "flash:/c2960s-universalk9-mz.122-55.SE5/c2960s-universalk9-mz.122-55.SE5.bin"

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

If you require further assistance please contact us by sending email to

cisco WS-C2960S-48FPD-L (PowerPC) processor (revision E0) with 131072K bytes of memory.
Processor board ID FOC1705W22N
Last reset from power-on
3 Virtual Ethernet interfaces
1 FastEthernet interface
50 Gigabit Ethernet interfaces
2 Ten Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.

512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address       : 50:06:04:0B:67:00
Motherboard assembly number     : 73-12561-09
Power supply part number        : 341-0382-02
Motherboard serial number       : FOC170520E4
Power supply serial number      : DCA1647V0H2
Model revision number           : E0
Motherboard revision number     : A0
Model number                    : WS-C2960S-48FPD-L
Daughterboard assembly number   : 73-11933-04
Daughterboard serial number     : FOC17050PTP
System serial number            : FOC1705W22N
Top Assembly Part Number        : 800-32643-03
Top Assembly Revision Number    : A0
Version ID                      : V03
CLEI Code Number                : COMGH00ARC
Daughterboard revision number   : A0
Hardware Board Revision Number  : 0x01

Switch Ports Model              SW Version            SW Image                
------ ----- -----              ----------            ----------              
*    1 52    WS-C2960S-48FPD-L  12.2(55)SE5           C2960S-UNIVERSALK9-M    

Configuration register is 0xF
OK, it appears that the 2960s is not a full-featured layer 3 device.   It can have multiple interfaces, and it can have static routes, but many expected layer 3 features are not available.

Try running this command in global configuration mode:

sdm prefer lanbase-routing

Thanks again for responding.  I will try the command and let you know how I get on. In the meantime can you tell me what its meant to achieve?

What I don't understand is why can't I ping from the pc with ip address, however I can ping from the switch svi with ip address of

And the PC uses as its default gateway....

Hi Carlton,

Having a look at what you have setup here I can see where the issue for you is. As the Cisco 2960-S is only a layer 2 access switch it is not able to do the routing you are hoping that it will do for you. The other issue is that the interface Fa0/0 is an out-of-band management port which is not used for anything other than this.

I have taken some of your configurations and modified them to get this gear to route as you have explained.

I would recommend changing the routing point from the 2960-S to the 1921 Router.

Steps to achieve this:
1) Setup the sub interface on the 1921 with the default gateway IP address and VLAN ID

interface GigabitEthernet0/1.1
 encapsulation dot1Q 10 native
interface GigabitEthernet0/1.2
 description Local VLAN for site
 encapsulation dot1Q 112
 ip address
 ip helper-address
 ip helper-address

2) Move the cable you have from the router to the switch from Fa0/0 and put it into Gi1/0/1 and apply the following configurations assuming your PC is plugged into Gi1/0/45

interface FastEthernet0
 no description xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 no ip address
interface GigabitEthernet1/0/1
 description Link to 1921-Router
 switchport mode trunk
interface GigabitEthernet1/0/45
 switchport access vlan 112
interface Vlan10
 ip address
 no ip helper-address
 no ip helper-address
 no shut
no interface Vlan112

Once this has been changed your traffic will pass through the switch and get dealt with by the router out through the tunnel or any other interfaces you create later on down the track.

To confirm that the configuration is working you can run the show ip route command on the 1921 and make sure there is an entry for and

I hope that this helps you and let me know how you get on.


Wow Doug,

You've renewed my faith in EE.

I will attempt your configuration later this afternoon and let you know how I get on.

Cheers mate.
Any update on how the configuration went?