Change of IP range in same VLAN - Cisco Catalyst 3750 Stack

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER

So, right now I have this

interface Vlan1
ip address 172.27.187.254 255.255.255.0
!

after I add the secondary IP address I will have this

interface Vlan1
ip address 172.27.187.254 255.255.255.0
ip address 10.10.40.1 255.255.255.0 secondary
!

And will both networks coexist in the same VLAN?
Just like that?

Yes. Sometimes things are easy... sometimes.

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER

Good morning Don,
I just added the secondary IP, but from a test PC configured with an IP of the new range (10.10.40.30) I can't connect to a device in the other range (172.27.187.1).

I can connect to other vlans, though.

What am I missing here?

You're not missing anything. It should work the same for the local addresses as the non-local addresses.

From a device on the 10.10.40.0 network, can you successfully ping the 172.27.287.254 address?

From a device on the 172.27.287.0 network, can you successfully ping the 10.10.40.1 address.

ASKER

No, I can't.

C:\ping 10.10.40.1

Pinging 10.10.40.1 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 10.10.40.1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Ethernet adapter Ethernet:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Qualcomm Atheros AR8162/8166/8168 PCI-E F
ast Ethernet Controller (NDIS 6.30)
Physical Address. . . . . . . . . : 08-9E-01-D1-E2-51
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::818e:9b9f:6ce:286d%4(Preferred)
IPv4 Address. . . . . . . . . . . : 172.27.187.206(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Monday, July 27, 2015 9:07:11 AM
Lease Expires . . . . . . . . . . : Tuesday, July 28, 2015 9:07:11 AM
Default Gateway . . . . . . . . . : 172.27.187.1
DHCP Server . . . . . . . . . . . : 172.27.187.2
DHCPv6 IAID . . . . . . . . . . . : 252222977
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-83-F7-8C-08-9E-01-D1-E2-51

DNS Servers . . . . . . . . . . . : 172.27.187.1
75.75.75.75

ASKER

But from the device in the 10.10.40.0/24
I can ping the Cisco Stack 10.10.40.1
and I can ping ips in other vlans

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

The addition of secondary IP range to a VLAN only competes that task, your issue is likely related to ACLs that restrict what traffic and to where is permitted to and from each VLAN and to the Internet.

What is on ip 172.27.187.1?

Double check your 172.27.187 scope definition on the DHCP server and look at the options you are setting this is where the default IP and name servers you are pushing.

ASKER

You are right, I can ping from a PC in 10.10.70.0/24 to another PC in 172.27.187.0/24
But I still can't ping from the same PC (10.10.70.30) to 172.27.187.1

I have a firewall on 172.27.187.1
That's our Internet access.

ASKER

Don,
I think I have to add a new route to my firewall so that it knows where the 10.10.70.0/24 is.
But it is requesting me to restart and I will need a window for that.

I will leave this question open until I can restart the firewall.

Thanks.

In your comment, your secondary VLAN IP is 172.27.187.254

I think to you are confusing the question. You need to post what IP and the information the 10.10.40.0/24 segment ip is allocated and its settings.
Not sure where the 10.10.70.0/24 segment is coming from.

If the default gateway is NOT the SVI, then the firewall will need a route to the secondary network. And you may need to modify ACL's or any other permissions.