I am having a bit of a problem with one of my VLANs... Hopefully someone can point me in the right direction...
I have a few VLANs
VLAN 1 - 10.9.1.0/24
VLAN 2 - 192.168.2.0/24
VLAN 300 - 10.9.9.0/24
On VLAN 1, I can ping only VLAN 2.
On VLAN 2, I can ping VLAN 1 and 3.
ON VLAN 3, I can only ping VLAN 2.
There seems to be some issues with VLAN 3 in which it cannot communicate with VLAN 1, and vice versa.
Some more information...
I am using a Cisco Cat 3560 L3 switch for the vlan configs and routing.
There is another router on the network that the 10.9.1.0 subnet uses as the default gateway, 10.9.1.1, which is configured by the ISP. It will be going away soon. Remember, VLAN 2 can ping hosts in both VLANs just fine.
Here is the running config of the 3560:
3560-1-MGMT#show running-config
Building configuration...
Current configuration : 12344 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service sequence-numbers
!
hostname 3560-1-MGMT
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$haND$xV4FfsrC5DaV.H18X.6IS1
!
!
!
no aaa new-model
clock timezone UTC -8
clock summer-time UTC recurring
system mtu routing 1500
ip routing
!
!
!
mls qos map cos-dscp 0 8 16 24 32 46 48 56
mls qos srr-queue input bandwidth 70 30
mls qos srr-queue input threshold 1 80 90
mls qos srr-queue input priority-queue 2 bandwidth 30
mls qos srr-queue input cos-map queue 1 threshold 2 3
mls qos srr-queue input cos-map queue 1 threshold 3 6 7
mls qos srr-queue input cos-map queue 2 threshold 1 4
mls qos srr-queue input dscp-map queue 1 threshold 2 24
mls qos srr-queue input dscp-map queue 1 threshold 3 48 49 50 51 52 53 54 55
mls qos srr-queue input dscp-map queue 1 threshold 3 56 57 58 59 60 61 62 63
mls qos srr-queue input dscp-map queue 2 threshold 3 32 33 40 41 42 43 44 45
mls qos srr-queue input dscp-map queue 2 threshold 3 46 47
mls qos srr-queue output cos-map queue 1 threshold 3 4 5
mls qos srr-queue output cos-map queue 2 threshold 1 2
mls qos srr-queue output cos-map queue 2 threshold 2 3
mls qos srr-queue output cos-map queue 2 threshold 3 6 7
mls qos srr-queue output cos-map queue 3 threshold 3 0
mls qos srr-queue output cos-map queue 4 threshold 3 1
mls qos srr-queue output dscp-map queue 1 threshold 3 32 33 40 41 42 43 44 45
mls qos srr-queue output dscp-map queue 1 threshold 3 46 47
mls qos srr-queue output dscp-map queue 2 threshold 1 16 17 18 19 20 21 22 23
mls qos srr-queue output dscp-map queue 2 threshold 1 26 27 28 29 30 31 34 35
mls qos srr-queue output dscp-map queue 2 threshold 1 36 37 38 39
mls qos srr-queue output dscp-map queue 2 threshold 2 24
mls qos srr-queue output dscp-map queue 2 threshold 3 48 49 50 51 52 53 54 55
mls qos srr-queue output dscp-map queue 2 threshold 3 56 57 58 59 60 61 62 63
mls qos srr-queue output dscp-map queue 3 threshold 3 0 1 2 3 4 5 6 7
mls qos srr-queue output dscp-map queue 4 threshold 1 8 9 11 13 15
mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14
mls qos queue-set output 1 threshold 1 100 100 50 200
mls qos queue-set output 1 threshold 2 125 125 100 400
mls qos queue-set output 1 threshold 3 100 100 100 400
mls qos queue-set output 1 threshold 4 60 150 50 200
mls qos queue-set output 1 buffers 15 25 40 20
mls qos
!
crypto pki trustpoint TP-self-signed-1442627584
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1442627584
revocation-check none
rsakeypair TP-self-signed-1442627584
!
!
crypto pki certificate chain TP-self-signed-1442627584
quit
spanning-tree mode pvst
spanning-tree extend system-id
auto qos srnd4
!
!
!
!
vlan internal allocation policy ascending
!
!
!
interface FastEthernet0
no ip address
no ip route-cache cef
no ip route-cache
no ip mroute-cache
!
interface GigabitEthernet0/1
description 2400-1-MGMT
switchport trunk encapsulation dot1q
switchport mode trunk
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust dscp
macro description cisco-router
auto qos trust
spanning-tree portfast trunk
spanning-tree bpduguard enable
!
interface GigabitEthernet0/2
switchport trunk encapsulation dot1q
switchport mode trunk
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust dscp
macro description cisco-router
auto qos trust
spanning-tree portfast trunk
spanning-tree bpduguard enable
!
interface GigabitEthernet0/3
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1
switchport mode trunk
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust cos
macro description cisco-switch
auto qos trust
spanning-tree link-type point-to-point
!
interface GigabitEthernet0/4
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,2,215
switchport mode trunk
switchport port-security
switchport port-security aging time 2
switchport port-security violation restrict
switchport port-security aging type inactivity
macro description cisco-desktop
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet0/5
switchport access vlan 215
switchport mode access
switchport port-security
switchport port-security aging time 2
switchport port-security violation restrict
switchport port-security aging type inactivity
macro description cisco-desktop
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet0/6
switchport mode access
switchport port-security
switchport port-security aging time 2
switchport port-security violation restrict
switchport port-security aging type inactivity
macro description cisco-desktop
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet0/7
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1
switchport mode trunk
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust cos
macro description cisco-switch
auto qos trust
spanning-tree link-type point-to-point
!
interface GigabitEthernet0/8
switchport mode access
switchport port-security
switchport port-security aging time 2
switchport port-security violation restrict
switchport port-security aging type inactivity
macro description cisco-desktop
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet0/9
switchport access vlan 4
switchport trunk encapsulation dot1q
switchport trunk native vlan 4
switchport trunk allowed vlan 4
switchport mode trunk
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust cos
macro description cisco-switch
auto qos trust
spanning-tree link-type point-to-point
!
interface GigabitEthernet0/10
switchport access vlan 2
switchport trunk encapsulation dot1q
switchport trunk native vlan 2
switchport trunk allowed vlan 2
switchport mode trunk
switchport port-security
switchport port-security aging time 2
switchport port-security violation restrict
switchport port-security aging type inactivity
macro description cisco-desktop
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet0/11
description Rehab Reserved
switchport trunk encapsulation dot1q
switchport trunk native vlan 2
switchport trunk allowed vlan 2
switchport mode trunk
!
interface GigabitEthernet0/12
description Rehab Reserved
!
interface GigabitEthernet0/13
switchport trunk encapsulation dot1q
switchport trunk native vlan 3
switchport mode trunk
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust cos
macro description cisco-switch
auto qos trust
spanning-tree link-type point-to-point
!
interface GigabitEthernet0/14
description Vet Reserved
!
interface GigabitEthernet0/15
switchport trunk encapsulation dot1q
switchport trunk native vlan 4
switchport mode trunk
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust cos
macro description cisco-switch
auto qos trust
spanning-tree link-type point-to-point
!
interface GigabitEthernet0/16
description CTC Srv Rsvd
!
interface GigabitEthernet0/17
description CTC Reserved
!
interface GigabitEthernet0/18
switchport trunk encapsulation dot1q
switchport trunk native vlan 5
switchport mode trunk
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust cos
macro description cisco-switch
auto qos trust
spanning-tree link-type point-to-point
!
interface GigabitEthernet0/19
switchport access vlan 5
switchport mode access
switchport port-security
switchport port-security aging time 2
switchport port-security violation restrict
switchport port-security aging type inactivity
macro description cisco-desktop
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet0/20
switchport trunk encapsulation dot1q
switchport mode trunk
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust cos
macro description cisco-switch
auto qos trust
spanning-tree link-type point-to-point
!
interface GigabitEthernet0/21
description Sonicwall 1
switchport trunk encapsulation dot1q
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust cos
macro description cisco-switch
auto qos trust
spanning-tree link-type point-to-point
!
interface GigabitEthernet0/22
description Sonicwall 2
!
interface GigabitEthernet0/23
description ESX Host
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,215,300,995
switchport mode trunk
!
interface GigabitEthernet0/24
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1
switchport mode trunk
switchport port-security aging time 2
switchport port-security violation restrict
switchport port-security aging type inactivity
macro description cisco-desktop
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/1
switchport trunk encapsulation dot1q
switchport trunk native vlan 2
switchport trunk allowed vlan 2,215
switchport mode trunk
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust cos
macro description cisco-switch
auto qos trust
spanning-tree link-type point-to-point
!
interface GigabitEthernet1/2
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1
switchport mode trunk
srr-queue bandwidth share 1 30 35 5
queue-set 2
priority-queue out
mls qos trust cos
macro description cisco-switch
auto qos trust
spanning-tree link-type point-to-point
!
interface GigabitEthernet1/3
!
interface GigabitEthernet1/4
!
interface TenGigabitEthernet1/1
!
interface TenGigabitEthernet1/2
!
interface Vlan1
ip address 10.9.1.5 255.255.255.0
ip helper-address 10.9.1.1
!
interface Vlan2
ip address 192.168.2.5 255.255.255.0
ip helper-address 192.168.2.160
!
interface Vlan3
ip address 192.168.1.5 255.255.255.0
!
interface Vlan4
ip address 192.168.3.5 255.255.255.0
!
interface Vlan5
ip address 10.9.5.5 255.255.255.0
!
interface Vlan6
ip address 10.0.0.5 255.255.255.0
!
interface Vlan10
no ip address
!
interface Vlan215
ip address 10.10.8.5 255.255.255.0
ip helper-address 10.9.1.9
!
interface Vlan300
ip address 10.9.9.5 255.255.255.0
ip helper-address 10.9.1.9
!
interface Vlan995
ip address 10.9.15.5 255.255.255.248
!
router rip
network 10.0.0.0
network 192.168.1.0
network 192.168.2.0
network 192.168.3.0
!
ip default-gateway 10.9.1.2
ip classless
ip route 0.0.0.0 0.0.0.0 10.9.1.2
ip http server
ip http secure-server
!
ip sla enable reaction-alerts
snmp-server community Public RO
snmp-server community Private RW
snmp-server location Pasadena Mgmt
snmp-server contact Jared Edelson
!
!
line con 0
line vty 0 4
password 1Pasadena!
login
length 0
line vty 5 15
password *************
login
!
end