troubleshooting Question

Layer 3 switch and ISP Router

Avatar of tolinrome
tolinromeFlag for United States of America asked on
RoutersNetworkingSwitches / Hubs
10 Comments1 Solution1349 ViewsLast Modified:
I'm having a hard time getting vlan traffic past the L3 switch to the internet. I have a couple of L2 switches and some vlans and a L3 switch. All hosts on all vlans can ping each other, but I cant get them past the L3 switch, only the L3 switch can ping the router which is directly connected.

vlans
10 - 10.1.10.0
20 - 10.1.20.0
30 - 10.1.30.0
40 - 10.1.40.0
50 - 10.1.50.0
60 - 10.1.60.0 (vlan to ISP) (10.1.10.62 is the inside interface of the ISP router)
100 - 10.1.00.0 (Management vlan)

I created vlan interfaces for all the vlans on the L3 switch, all hosts point to the L3 switch as their default gateway. On the L3 switch I set a route to the ISP router as:

ip route 0.0.0.0 0.0.0.0 10.1.10.62
I also enabled ip routing

Topology
Since the switch is directly connected to the router I learned that I do not need to set static routes on on it, correct?

Where did I go wrong, why can I ping from the L3 switch to the router but thats it?

Show run on the L3 switch:

hostname Switch
!
!
!
!
!
ip routing
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
interface FastEthernet0/1
 switchport mode access

!
interface FastEthernet0/24
 switchport mode access
!
interface GigabitEthernet0/1
 switchport access vlan 60
 switchport trunk encapsulation dot1q
 switchport mode access
!
interface GigabitEthernet0/2
 switchport access vlan 100
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan10
 description SERVERS_VLAN
 ip address 10.1.10.1 255.255.255.0
!
interface Vlan20
 description SALES_VLAN
 ip address 10.1.20.1 255.255.255.0
!
interface Vlan30
 description ACCOUNTING_VLAN
 ip address 10.1.30.1 255.255.255.0
!
interface Vlan40
 description IT_VLAN
 ip address 10.1.40.1 255.255.255.0
!
interface Vlan50
 description VOICE_VLAN
 ip address 10.1.50.1 255.255.255.0
!
interface Vlan60
 description TO_ISP
 ip address 10.1.60.1 255.255.255.0
!
interface Vlan100
 ip address 10.1.0.1 255.255.255.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.60.2
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
 login
!
!
!
end

Switch#show int gi0/1 switchport
Name: Gig0/1
Switchport: Enabled
Administrative Mode: static access
Operational Mode: static access
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: native
Negotiation of Trunking: Off
Access Mode VLAN: 60 (TO_ISP)
Trunking Native Mode VLAN: 1 (default)
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan: none
Trunking VLANs Enabled: All
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL
Protected: false
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none


ROUTER:

Router#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
       * - candidate default, U - per-user static route, o - ODR
       P - periodic downloaded static route

Gateway of last resort is not set

     10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C       10.1.60.0/24 is directly connected, GigabitEthernet0/0
L       10.1.60.2/32 is directly connected, GigabitEthernet0/0

Router#show ip int brief
Interface              IP-Address      OK? Method Status                Protocol
 
GigabitEthernet0/0     10.1.60.2       YES manual up                    up
 
GigabitEthernet0/1     unassigned      YES unset  administratively down down
 
FastEthernet0/0/0      unassigned      YES unset  administratively down down
 
FastEthernet0/0/1      unassigned      YES unset  administratively down down
 
FastEthernet0/0/2      unassigned      YES unset  administratively down down
 
FastEthernet0/0/3      unassigned      YES unset  administratively down down
 
Serial0/1/0            unassigned      YES unset  administratively down down
 
Serial0/1/1            unassigned      YES unset  administratively down down
 
Vlan1                  unassigned      YES unset  administratively down down
ASKER CERTIFIED SOLUTION
Join our community to see this answer!
Unlock 1 Answer and 10 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 10 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros