Link to home
Start Free TrialLog in
Avatar of Mike Satterfield
Mike Satterfield

asked on

Can't Assign Static IP on Cisco switch, but DHCP works

I have several stacks of cisco 3750x switches at the school I am working at. Each stack is configured the same, just on different Vlan's.

On one of the stacks I can't assign a static IP address to anything, even though DHCP is working fine. I can pull a DHCP address. and it works, but if I statically assign that address to a laptop it won't work, I have tried multiple ports/ multiple vlans.

this is not a subnet or gateway mistake on my end.

I am attaching the running config for the stack.  

I have tried multiple ports but the most recent was gi4/0/33 It's currently  set to vlan 32, however I had the same problem while it was set to vlan 24.

Thanks for your expertise.
hstcc1-running-config.txt
Avatar of NetExpert Network Solutions Pte Ltd
NetExpert Network Solutions Pte Ltd
Flag of Singapore image

While you assign the static ip address to the workstation, will you able to ping to your gateway ip address?

do you able to see the workstation mac address on the core switch?

Did you hard-coded anything like auto-discover mac address on the core switch ?
Avatar of Mike Satterfield
Mike Satterfield

ASKER

I was not able to ping the gateway address. I did not do a search for the mac address..  nothing like that is hardcoded.  
f
Lets troubleshoot the issue for one PC

connect your laptop to the stack switch
assign static ip address to the laptop
check the laptop mac address in both stack switch as well as on the core switch.

if you can't see the mac address on the switch,  remove the port-security command on the switch port and try again
not only can't i see the mac address.. port shows not connect. (i never disconnected it) and while the local lan is showing a configured IP the same as the dhcp, when i do an ip config it gives me a 169.x.x.x. address.

I change the nic back to dhcp .. it re-identifys grabs an address and the port shows connected.

it has to be some kind of security setting right ??

current  port configuration


interface GigabitEthernet3/0/33
 description Client Access Port
 switchport access vlan 32
 switchport mode access
 switchport nonegotiate
 switchport voice vlan 25
 ip arp inspection trust
 srr-queue bandwidth share 10 10 60 20
 queue-set 2
 priority-queue out
 mls qos trust device cisco-phone
 mls qos trust cos
 macro description CLIENTPORT | CLIENTPORT
 auto qos voip cisco-phone
 storm-control broadcast level bps 50m 25m
 storm-control multicast level bps 50m 25m
 storm-control action shutdown
 service-policy input AutoQoS-Police-CiscoPhone
It's pretty much clear that the port security blocking you if you  static ip on the laptop.

If you would like to confirm ,  remove the macro configuration under the interface and try
ASKER CERTIFIED SOLUTION
Avatar of Craig Beck
Craig Beck
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I have removed the macro and no-change.

I will run the no ip arp inspection vlan 32 on the port first thing tomorrow.

thanks,
Run it in global config, not on the port.