Solved

Client PCs not getting internet traffic

Posted on 2014-12-17
5
287 Views
Last Modified: 2014-12-28
Hi Expert!

I need help on configuring a network. you will find attached the illustration of that network. I have a cisco C3560 that I am using to create multiple vlans. this layer 3 switch is connected to a Cisco Meraki security Appliance. The clients machines receive address from the DHCP server and the InterVlan is working fine. each client machine can ping each other on different VLAN. The problem I am facing now the internet is not flowing in the network. It seems it blocked somewhere on the cisco 3560 layer 3 device. Find below the configuration I made:

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
on the Cisco Meraki MX80, I setup the lan port ip address to:  10.10.10.2 255.255.255.252 and create a static route: 0.0.0.0 0.0.0.0 10.10.10.1
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
on Cisco 3560
!
version 15.0
no service pad
service timestamps debug uptime
service timestamps log datetime
service password-encryption
service sequence-numbers
!
hostname 3560G
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$7viV$AVBSBmfScyebtHtpcVmNd.
!
no aaa new-model
system mtu routing 1500
ip routing
!
!
!
!
!
crypto pki trustpoint TP-self-signed-553539200
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-553539200
 revocation-check none
 rsakeypair TP-self-signed-553539200
!
!
crypto pki certificate chain TP-self-signed-553539200
 certificate self-signed 01 nvram:IOS-Self-Sig#1.cer
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
!
!
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface GigabitEthernet0/3
!
interface GigabitEthernet0/4
!
interface GigabitEthernet0/5
!
interface GigabitEthernet0/6
!
interface GigabitEthernet0/7
!
interface GigabitEthernet0/8
!
interface GigabitEthernet0/9
!
interface GigabitEthernet0/10
!
interface GigabitEthernet0/11
!
interface GigabitEthernet0/12
!
interface GigabitEthernet0/13
 description to internet firewall Cisco MX80
 no switchport
 ip address 10.10.10.1 255.255.255.252
!
interface GigabitEthernet0/14
 switchport access vlan 24
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/15
 switchport access vlan 24
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/16
 switchport access vlan 24
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/17
 switchport access vlan 24
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/18
 switchport access vlan 24
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/19
 switchport access vlan 24
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/20
 switchport access vlan 24
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/21
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet0/22
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet0/23
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet0/24
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet0/25
!
interface GigabitEthernet0/26
!
interface GigabitEthernet0/27
!
interface GigabitEthernet0/28
!
interface Vlan1
 ip address 192.168.1.30 255.255.255.0
!
interface Vlan20
 description VLAN-Direction-Generale
 ip address 192.168.20.1 255.255.255.0
 ip helper-address 192.168.24.13
!
interface Vlan21
 description VLAN-Direction-Administrative-Financiere
 ip address 192.168.21.1 255.255.255.0
 ip helper-address 192.168.24.13
!
interface Vlan22
 description VLAN-Direction-CR-DT
 ip address 192.168.22.1 255.255.255.0
 ip helper-address 192.168.24.13
!
interface Vlan24
 description VLAN-Management
 ip address 192.168.24.1 255.255.255.0
 ip helper-address 192.168.24.13
!
ip http server
ip http secure-server
!
!
ip route 0.0.0.0 0.0.0.0 10.10.10.2
!
logging esm config
!
!
banner motd authorized access only
!
line con 0
 password 7 094A5C1E54170F51485C55
 logging synchronous
 login
line vty 0 4
 password 7 110F0B125A00134F477A7A
 logging synchronous
 login
 length 0
line vty 5 15
 password 7 110F0B125A00134F477A7A
 logging synchronous
 login
 length 0
!
end
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
0
Comment
Question by:Kanga Kangatchi
  • 3
5 Comments
 
LVL 11

Expert Comment

by:rharland2009
ID: 40506846
The problem is your default route on your layer 3 switch points to the Meraki, and the default route on the Meraki points back to the VLAN IP address on the layer 3 switch. You need a route on the Meraki to point traffic to the Internet - whatever is configured on the WAN/Internet side of the Meraki.
0
 
LVL 9

Accepted Solution

by:
Donboo earned 500 total points
ID: 40508159
Yeah your default routing on the L3 switch and Meraki is creating a routing loop.

your Meraki should look like this:

0.0.0.0 0.0.0.0 WAN-DEFAULT-GATEWAY-IP
192.168.1.0 255.255.255.0 10.10.10.2
192.168.20.0 255.255.255.0 10.10.10.2
192.168.21.0 255.255.255.0 10.10.10.2
192.168.22.0 255.255.255.0 10.10.10.2
192.168.24.0 255.255.255.0 10.10.10.2
0
 

Author Comment

by:Kanga Kangatchi
ID: 40520990
thanks, it solved. I just needed to set my default route on the meraki to point to 10.10.10.2
static route: 192.168.0.0 255.255.0.0 10.10.10.2
0
 

Author Comment

by:Kanga Kangatchi
ID: 40520996
I've requested that this question be closed as follows:

Accepted answer: 0 points for Kanga Kangatchi's comment #a40520990

for the following reason:

the cisco meraki is configuration is quite simple. i was looking for complex configs.
0
 

Author Closing Comment

by:Kanga Kangatchi
ID: 40520997
he put me on the way
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now