Solved

create inter vlan routing

Posted on 2013-12-18
11
491 Views
Last Modified: 2014-01-06
Hi Experts,

I have a firewall asa5510 and a cisco switch catalyst 3560.
From the switch I can ping both vlans directly
From my client connected to vlan 195 I cannot ping ip of vlan 194.

ip routing is set.

Can you help me what is missing ?
0
Comment
Question by:Eprs_Admin
  • 4
  • 4
  • 3
11 Comments
 
LVL 3

Assisted Solution

by:spamsucks72
spamsucks72 earned 286 total points
ID: 39727203
Add "switchport trunk encapsulation dot1q" on the 3560
0
 

Author Comment

by:Eprs_Admin
ID: 39727214
on which port ?
0
 
LVL 3

Assisted Solution

by:spamsucks72
spamsucks72 earned 286 total points
ID: 39727290
can you post your config from the 3560?

what does #show ip route give on the cat 3560?
0
 

Author Comment

by:Eprs_Admin
ID: 39727323
this is the output


Gateway of last resort is 198.64.195.253 to network 0.0.0.0

C    198.64.194.0/24 is directly connected, Vlan194
C    198.64.195.0/24 is directly connected, Vlan195
S*   0.0.0.0/0 [1/0] via 198.64.195.253
0
 

Author Comment

by:Eprs_Admin
ID: 39727325
where do you want to put the trunk ?
directly on the vlan interface setting ?

Which port must be a trunk ?
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 12

Assisted Solution

by:Infamus
Infamus earned 214 total points
ID: 39727444
Do you have interface IP for each VLAN?

Is the client default gateway set to VLAN interface IP address?
0
 
LVL 3

Assisted Solution

by:spamsucks72
spamsucks72 earned 286 total points
ID: 39727446
It has been a longtime since I advised without looking at the config.

Try the following ... but I always thought vlan1 was native anyway.

interface GigabitEthernet0/22
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 1
 switchport trunk allowed vlan 1,194,195
 switchport mode trunk
end

you may have to try using a ghost vlan 2 as the native trunk.

interface GigabitEthernet0/22
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 2
 switchport trunk allowed vlan 1,194,195
 switchport mode trunk
end
0
 
LVL 12

Assisted Solution

by:Infamus
Infamus earned 214 total points
ID: 39727455
I don't see why you would need a trunk port....routing is handled by the switch.
0
 
LVL 3

Assisted Solution

by:spamsucks72
spamsucks72 earned 286 total points
ID: 39727468
I agree but given the information supplied ... is it really routing (can't ping btwn Vlan 194 and 195 ... not routing).
0
 
LVL 12

Accepted Solution

by:
Infamus earned 214 total points
ID: 39727475
He can ping both clients on those VLANs from the switch so I think the client's gateway is set to the firewall IP not the vlan interface.
0
 

Author Comment

by:Eprs_Admin
ID: 39761380
thanks now is working, one subnet was missing.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cisco IP NAT Translation not working 9 26
syslog id vs. msg 2 20
logging buffered 8 37
How to route a specific IP address to a specific port on a Fortinet 90D 2 19
If you have an ASA5510 then this sort of thing would be better handled with a CSC Module, however on an ASA5505 thats not an option, and if you want to throw in a quick solution to stop your staff going to facebook during work time, then this is the…
Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now