3550 with working VTP not passing traffic across trunk?

[acrowe]

I have an odd situation...

I've configured a 3550 (3550-48-SMI running IOS V 12.1(22)EA10) software - c3550-i5k212q3-mz.121-22.EA10.bin) for VTP and a dot1q trunk to our 6509 (running IOS V 12.1(11b)E).

I then configured an IP on the vlan.

I can now see the VLAN's from the 6500 on the 3550. However from what I can tell no traffic is being passed across the trunk. I am not able to ping, etc and get out.

I've been able to get all of this working on our older network running CATOS, but the IOS based stuff isn't behaving...

Any help would be appreciated. Thanks!

6500 Config (trimmed for brevity):
show run
Building configuration...

Current configuration : 14114 bytes
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname hq-core
!
boot system flash c6msfc2-boot-mz.121-11b.E.bin
enable password <snip>
!
redundancy
main-cpu
auto-sync standard
ip subnet-zero
!
!
!
no mls ip multicast aggregate
no mls ip multicast non-rpf cef
mls qos statistics-export interval 300
mls qos statistics-export delimiter |
!
!
!
interface GigabitEthernet1/1
no ip address
shutdown
!
interface GigabitEthernet1/2
no ip address
shutdown
!
interface FastEthernet7/1
description ASA_Uplink
switchport
switchport access vlan 64
no ip address
duplex full
speed 100
!
interface FastEthernet7/2
switchport
switchport access vlan 64
no ip address
!
<TRIMMED>
!
interface FastEthernet8/17
description crowe-switch
switchport
switchport trunk encapsulation dot1q
switchport trunk native vlan 64
switchport mode trunk
switchport nonegotiate
no ip address
duplex full
speed 100
!
<TRIMMED>
!
interface Vlan1
no ip address
shutdown
!
interface Vlan64
ip address 10.0.64.100 255.255.255.0
!
interface Vlan100
ip address 10.0.100.1 255.255.255.0
!
interface Vlan101
ip address 10.0.101.1 255.255.255.0
shutdown
!
ip default-gateway 10.0.64.1
ip classless
ip route 0.0.0.0 0.0.0.0 10.0.64.1 permanent
no ip http server
!
snmp-server community stratacache RO
snmp-server enable traps snmp authentication warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps casa
snmp-server enable traps vtp
snmp-server enable traps slb
snmp-server enable traps hsrp
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps bgp
snmp-server enable traps rsvp
snmp-server enable traps frame-relay
snmp-server enable traps rtr
snmp-server enable traps dlsw
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server host <snip> stratacache config entity snmp
!
!
line con 0
line vty 0 4
password <snip>
logging synchronous
login
transport input telnet
!
end


3550 Config (trimmed for brevity):
show run
Building configuration...

Current configuration : 5891 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Crowe-3550
!
enable secret 5 <snip>
enable password <snip>
!
ip subnet-zero
ip routing
!
ip ssh time-out 120
ip ssh authentication-retries 3
!
spanning-tree mode pvst
spanning-tree extend system-id
!
--More-- !
!
!
!
interface FastEthernet0/1
switchport access vlan 64
switchport mode access
spanning-tree portfast
!
<TRIMMED>
!
interface FastEthernet0/48
description Uplink to 6500
switchport trunk encapsulation dot1q
switchport trunk native vlan 64
switchport mode trunk
switchport nonegotiate
speed 100
duplex full
!
<TRIMMED>
interface Vlan1
no ip address
shutdown
!
interface Vlan64
ip address 10.0.64.5 255.255.255.0
ip dhcp relay information trusted
!
ip classless
ip http server
!
snmp-server community stratacache RO
!
line con 0
line vty 0 4
password <snip>
login
line vty 5 15
password <snip>
login
!
!
end

 

[North323]

think you need a default gateway (route) on the 3550

 

[North323]

like this added to the 3550, ip default-gateway 10.0.64.1

 

[acrowe]

I'll check that, but shouldn't it at least ping devices on the same subnet (10.0.64.0/24) without the gateway?

 

[acrowe]

still nothing with the default gateway.

I've also tried placing hosts on the switch. They can ping each other and the switch, but nothing up the trunk.

 

[North323]

what about your gateway being 10.0.64.100 on the 3550

 

[acrowe]

nope no go there either...

It seems like the VLAN trunking isn't working right? The information is there but the traffic isn't passing across the trunk or something...

 

[North323]

on the 6500, can you ping the vlan IP? can you ping the default gateway? and you are only trunking port 48 on the 3550 that connects to 6500

 

[acrowe]

on the 6500 I can ping the default gateway (.1)
from a host connected to the 6500 I can ping the gateway and the 6500 (.100)
(I also have users connected to the ports on the 6500 and they are working fine getting out of the network.)

However from the 6500 side I cannot ping anything on the 3500 side. Not the switch itself, nor any hosts connected to it.

 

[North323]

could be that the 6500 is not advertising any routes.
1) what device is 10.0.64.1? is that another router?
2) are you using eigrp?

adding to the 6500
router eigrp 1
network 10.0.0.0

would start advertising routes to other switches

 

[acrowe]

possible that there are no routes advertised as it hasn't been setup (still confused why the routes would need to be there for intra-VLAN communication)

10.0.64.1 is our ASA connected off of the 6500

no luck with eigrp on the 6500 either...

 

[unclerico]

on both switches issue sh int trunk. Does it say that both interfaces are currently trunking?? Are you using a straight-through or cross-over cable??

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[North323]

can you post 'sh vlan' for th 3550 and 6500?

 

[burtsbees]

No routing protocol/static route is needed---everything is directly connected.

Likely you are using a straight cable and not a crossover cable, which is what you need.

One more thing---where is the VTP config?

/

 

[acrowe]

6500 sh int trunk:
hq-core#sh int trunk

Port Mode Encapsulation Status Native vlan
Fa8/17 on 802.1q trunking 64

Port Vlans allowed on trunk
Fa8/17 1-1005

Port Vlans allowed and active in management domain
Fa8/17 1,64,100-102,1002-1005

Port Vlans in spanning tree forwarding state and not pruned
Fa8/17 1,64,100-102,1002-1005


3550 sh int trunk:
Crowe-3550#sh int trunk

Port Mode Encapsulation Status Native vlan
Fa0/48 on 802.1q trunking 64

Port Vlans allowed on trunk
Fa0/48 1-4094

Port Vlans allowed and active in management domain
Fa0/48 1,64,100-102

Port Vlans in spanning tree forwarding state and not pruned
Fa0/48 1,64,100-102


using a crossover cable to connect the 2. Link on both sides.


6500 sh vlan:
hq-core#sh vlan

VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active
64 Uplink_Network active Fa7/1, Fa7/2, Fa7/3, Fa7/4
Fa7/5, Fa7/6, Fa7/7, Fa7/8
Fa7/9, Fa7/10, Fa7/11, Fa7/12
Fa8/1, Fa8/2, Fa8/3, Fa8/4
Fa8/5, Fa8/6, Fa8/7, Fa8/8
Fa8/9, Fa8/10, Fa8/11, Fa8/12
Fa8/13, Fa8/14, Fa8/15, Fa8/16
Fa8/18, Fa8/19, Fa8/20, Fa8/21
Fa8/22, Fa8/23, Fa8/24, Fa8/25
Fa8/26, Fa8/27, Fa8/28, Fa8/29
Fa8/30, Fa8/31, Fa8/32, Fa8/33
Fa8/34, Fa8/35, Fa8/36, Fa8/37
Fa8/38, Fa8/39, Fa8/40, Fa8/41
Fa8/42, Fa8/43, Fa8/44, Fa8/45
Fa8/46, Fa8/47, Fa8/48, Fa9/1
Fa9/2, Fa9/3, Fa9/4, Fa9/5
Fa9/6, Fa9/7, Fa9/8, Fa9/9
Fa9/10, Fa9/11, Fa9/12, Fa9/13
Fa9/14, Fa9/15, Fa9/16, Fa9/17
Fa9/18, Fa9/19, Fa9/20, Fa9/21
Fa9/22, Fa9/23, Fa9/24, Fa9/25
Fa9/26, Fa9/27, Fa9/28, Fa9/29
Fa9/30, Fa9/31, Fa9/32, Fa9/33
Fa9/34, Fa9/35, Fa9/36, Fa9/37
Fa9/38, Fa9/39, Fa9/40, Fa9/41
Fa9/42, Fa9/43, Fa9/44, Fa9/45
Fa9/46, Fa9/47, Fa9/48
100 users active Fa7/13, Fa7/14, Fa7/15, Fa7/16
Fa7/17, Fa7/18, Fa7/19, Fa7/20
Fa7/21, Fa7/22, Fa7/23, Fa7/24
Fa7/25, Fa7/26, Fa7/27, Fa7/28
Fa7/29, Fa7/30, Fa7/31, Fa7/32
Fa7/33, Fa7/34, Fa7/35, Fa7/36

VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
Fa7/37, Fa7/38, Fa7/39, Fa7/40
Fa7/41, Fa7/42, Fa7/43, Fa7/44
Fa7/45, Fa7/46, Fa7/47, Fa7/48
101 Engineering active
102 test active
1002 fddi-default active
1003 trcrf-default active
1004 fddinet-default active
1005 trbrf-default active

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
64 enet 100064 1500 - - - - - 0 0
100 enet 100100 1500 - - - - - 0 0
101 enet 100101 1500 - - - - - 0 0
102 enet 100102 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0
1003 trcrf 101003 4472 1005 3276 - - srb 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0
1005 trbrf 101005 4472 - - 15 ibm - 0 0

VLAN AREHops STEHops Backup CRF
---- ------- ------- ----------
1003 7 7 off

Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------



3550 sh vlan:
Crowe-3550#sh vlan

VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi0/1, Gi0/2
64 Uplink_Network active Fa0/1, Fa0/2, Fa0/3, Fa0/4
Fa0/5, Fa0/6, Fa0/7, Fa0/8
Fa0/9, Fa0/10, Fa0/11, Fa0/12
Fa0/13, Fa0/14, Fa0/15, Fa0/16
Fa0/17, Fa0/18, Fa0/19, Fa0/20
Fa0/21, Fa0/22, Fa0/23, Fa0/24
Fa0/25, Fa0/26, Fa0/27, Fa0/28
Fa0/29, Fa0/30, Fa0/31, Fa0/32
Fa0/33, Fa0/34, Fa0/35, Fa0/36
Fa0/37, Fa0/38, Fa0/39, Fa0/40
Fa0/41, Fa0/42, Fa0/43, Fa0/44
Fa0/45, Fa0/46, Fa0/47
100 users active
101 Engineering active
102 test active
1002 fddi-default act/unsup
1003 trcrf-default act/unsup
1004 fddinet-default act/unsup
1005 trbrf-default act/unsup

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
64 enet 100064 1500 - - - - - 0 0
100 enet 100100 1500 - - - - - 0 0
101 enet 100101 1500 - - - - - 0 0
102 enet 100102 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0
1003 trcrf 101003 4472 1005 3276 - - srb 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0
1005 trbrf 101005 4472 - - 15 ibm - 0 0


VLAN AREHops STEHops Backup CRF
---- ------- ------- ----------
1003 7 7 off

Remote SPAN VLANs
------------------------------------------------------------------------------


Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------

 

[acrowe]

sh vtp status from 3550:
Crowe-3550#sh vtp status
VTP Version : 2
Configuration Revision : 1
Maximum VLANs supported locally : 1005
Number of existing VLANs : 9
VTP Operating Mode : Client
VTP Domain Name : stratacache
VTP Pruning Mode : Disabled
VTP V2 Mode : Enabled
VTP Traps Generation : Disabled
MD5 digest : 0x5A 0x7C 0xF8 0x5F 0xD3 0x83 0xF9 0x70
Configuration last modified by 10.0.64.100 at 11-12-08 04:47:19

sh vtp status on 6500:
hq-core#sh vtp status
VTP Version : 2
Configuration Revision : 1
Maximum VLANs supported locally : 1005
Number of existing VLANs : 9
VTP Operating Mode : Server
VTP Domain Name : stratacache
VTP Pruning Mode : Disabled
VTP V2 Mode : Enabled
VTP Traps Generation : Enabled
MD5 digest : 0x5A 0x7C 0xF8 0x5F 0xD3 0x83 0xF9 0x70
Configuration last modified by 10.0.64.100 at 11-12-08 04:47:19
Local updater ID is 10.0.64.100 on interface Vl64 (lowest numbered VLAN interface found)

You can see that the 3550 received the VTP config from the 6500 (haven't fixed the dates yet).

Burts since neither the 3550 or 6500 are auto MDI MDX you need a crossover to connect between switches.