Solved

ping with source specified

Posted on 2014-03-27
6
418 Views
Last Modified: 2014-04-08
When I ping the remote site from my core switch, it does not work. But when I specify "source vlan 10", it works. Why is that?
0
Comment
Question by:leblanc
  • 2
  • 2
  • 2
6 Comments
 
LVL 9

Accepted Solution

by:
rfportilla earned 167 total points
Comment Utility
Because whichever vlan the switch is using by default does not have access to the Internet, but VLAN 10 does.  Are you familiar with VLAN's?  They are used to segment traffic like a router.
0
 
LVL 1

Author Comment

by:leblanc
Comment Utility
My layer 3 core switch has a default route pointed to the distribution WAN layer 3 switch, then to the FW to access the internet. I have SVIs configured on my core switch. I believe all of my VLAN can access the Internet.
I did not have to specify the source vlan with the ping before I moved from layer 2 to layer 3 between the core switch and the distribution WAN layer 3 switch.
0
 
LVL 57

Assisted Solution

by:giltjr
giltjr earned 333 total points
Comment Utility
What IP address does your L3 core use by default?

Maybe your WAN L3 switch or your firewall does not have a route back to that address/subnet?
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 1

Author Comment

by:leblanc
Comment Utility
On my L3 core, my default route is pointed to the next hop /30 of the WAN distribution L3 switch interface. All subnets are /24.
0
 
LVL 9

Expert Comment

by:rfportilla
Comment Utility
I don't know your switch.  Is there a command to determine the default network interface and/or vlan?  I think there might be a default vlan that is used internally that might be default in the management if.  I've seen many switches with extra interfaces and vlans that don't seem like they are needed, but they exist (and not always easily visible).  

In either case, is this just a curiosity or is there an issue stemming from this?
0
 
LVL 57

Assisted Solution

by:giltjr
giltjr earned 333 total points
Comment Utility
Assuming your setup is like:

CORE-L3 < -- > WAN-L3 <----> Firewall

Typically a L3 switch (your CORE-L3) will use the IP address of the SVI based on your routing table.  So if you are ping'ing 1.1.1.1, what is the IP address of the router it will use as the next hop.

I would assume that it would be the IP address in CORE-L3 that is on the subnet between CORE-L3 and WAN-L3.

So first thing to check is does the firewall have a route back to that subnet.
Second thing to check is does the firewall have a policy that would allow ICMP to/from that subnet.
0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Join & Write a Comment

Suggested Solutions

Network ports are the threads that hold network communication together. They are an essential part of networking that can be easily ignore or misunderstood, my goals is to show those who don't have a strong network foundation how network ports opera…
Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now