Solved

ping with source specified

Posted on 2014-03-27
6
428 Views
Last Modified: 2014-04-08
When I ping the remote site from my core switch, it does not work. But when I specify "source vlan 10", it works. Why is that?
0
Comment
Question by:leblanc
  • 2
  • 2
  • 2
6 Comments
 
LVL 9

Accepted Solution

by:
rfportilla earned 167 total points
ID: 39960320
Because whichever vlan the switch is using by default does not have access to the Internet, but VLAN 10 does.  Are you familiar with VLAN's?  They are used to segment traffic like a router.
0
 
LVL 1

Author Comment

by:leblanc
ID: 39960540
My layer 3 core switch has a default route pointed to the distribution WAN layer 3 switch, then to the FW to access the internet. I have SVIs configured on my core switch. I believe all of my VLAN can access the Internet.
I did not have to specify the source vlan with the ping before I moved from layer 2 to layer 3 between the core switch and the distribution WAN layer 3 switch.
0
 
LVL 57

Assisted Solution

by:giltjr
giltjr earned 333 total points
ID: 39960664
What IP address does your L3 core use by default?

Maybe your WAN L3 switch or your firewall does not have a route back to that address/subnet?
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
LVL 1

Author Comment

by:leblanc
ID: 39960679
On my L3 core, my default route is pointed to the next hop /30 of the WAN distribution L3 switch interface. All subnets are /24.
0
 
LVL 9

Expert Comment

by:rfportilla
ID: 39961338
I don't know your switch.  Is there a command to determine the default network interface and/or vlan?  I think there might be a default vlan that is used internally that might be default in the management if.  I've seen many switches with extra interfaces and vlans that don't seem like they are needed, but they exist (and not always easily visible).  

In either case, is this just a curiosity or is there an issue stemming from this?
0
 
LVL 57

Assisted Solution

by:giltjr
giltjr earned 333 total points
ID: 39961362
Assuming your setup is like:

CORE-L3 < -- > WAN-L3 <----> Firewall

Typically a L3 switch (your CORE-L3) will use the IP address of the SVI based on your routing table.  So if you are ping'ing 1.1.1.1, what is the IP address of the router it will use as the next hop.

I would assume that it would be the IP address in CORE-L3 that is on the subnet between CORE-L3 and WAN-L3.

So first thing to check is does the firewall have a route back to that subnet.
Second thing to check is does the firewall have a policy that would allow ICMP to/from that subnet.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question