4850 intervlan routing not working?

[telecotek1]

Have an 4850 with 2 vlans

vlan 2 192.168.22.5
vlan 11 192.168.21.5

have a device with a static ip of 192.168.22.15 with a pvid of 2 and a member of vlan 2 that i can't ping from the 192.168.21.0 network. even i set my laptops default gateway to the ip address of the vlan 192.168.21.5 i still can't ping 22.15.

i have my ip route set to go to a router that has a return route to the ip of of the vlan 2.

is there a command on a 4850 that enables or disables intervlan routing or are 4850's sent with a default configs that would cause intervlan routing to not work?

 

[derfloh]

You have to enable IP routing globally on the switch and for every single VLAN Thais affected.

 

[telecotek1]

Not sure I understand. I thought running the command "ip routing" enables ip routing globally.

 

[derfloh]

You have run the same command when in 'interface vlan 2' and 'interface vlan 11'.

'show vlan' will show it in the last column IIRC.

 

[telecotek1]

thanks but that didn't help. any other ideas?
Id Name Type Protocol PID Active IVL/SVL Mgmt
---- -------------------- -------- ---------------- ------- ------ ------- ----
1 VLAN #1 Port None 0x0000 Yes IVL Yes
Port Members: NONE
2 Voice Voice None 0x0000 Yes IVL No
Port Members: 1/5-44,1/46-50,2/5-50
11 Data Port None 0x0000 Yes IVL No
Port Members: 1/1-45,1/49-50,2/1-47,2/49-50
Total VLANs: 3

 

[derfloh]

Hmm... Did you have a look into EDM webpage under VLAN\Basic in the last column?

 

[telecotek1]

the edm show routing as "true"

here's a copy of the config that im working with

vlan create 11 type port 1

vlan create 2 type port 1 voice-vlan

vlan name 2 "Voice"

vlan name 11 "Data"

vlan ports 1/1,1/3-50,2/1,2/3-50 tagging unTagPvidOnly

vlan configcontrol flexible

vlan members 1 NONE

vlan members 2 1/3-50,2/3-50

vlan members 11 1/1-2,1/4-47,1/49-50,2/1-2,2/4-50

vlan ports 1/1-2 pvid 11

vlan ports 1/3 pvid 2

vlan ports 1/4-47 pvid 11

vlan ports 1/48 pvid 2

vlan ports 1/49-50,2/1-2 pvid 11

vlan ports 2/3 pvid 2

vlan ports 2/4-50 pvid 11

no auto-pvid

ip routing

!

interface vlan 2

ip address 192.168.22.5 255.255.255.0 2

exit

interface vlan 11

ip address 192.168.21.5 255.255.255.0 3

exit

!

ip route 0.0.0.0 0.0.0.0 192.168.21.4 1

 

[derfloh]

Did you try to use the VLAN IP addresses as default gateway for your devices? If understand you right you route over another router and as the next step over the switch.

 

[telecotek1]

i tried it. And when you do a trace route you see the packet die on the vlan ip when using the router so it appears that the router is routing the voice vlan correctly. and when you use the vlan as a default gateway you get a similar result.

 

[derfloh]

The I'm out. Did it a few times and it was straight forward. Sorry...

 

[VinceWhirlwind]

Can the devices on each VLAN ping their default gateway?
Please provide us with:
- "ipconfig" from the devices in each VLAN
- "sh ip rout" for any relevant router on the network

When you say, "i have my ip route set to go to a router that has a return route to the ip of of the vlan 2." I'm not sure what that means exactly - does it mean you have a router patched into a switchport that is in VLAN2, that has the default GW for device that's on VLAN2 and that also has a route for the subnet that's on VLAN11, pointing at the switch's VLAN2 IP address?

 

[andy88]

Which ports did you have your laptop in for testing. If you put laptops in the following ports with the following IP config, can you ping between them?

1/2 IP address 192.168.21.x gateway 192.168.21.5
1/3 IP address 192.168.22.x gateway 192.168.22.5

Most of the other ports will need a 802.1q enabled device as the are set for both vlans with only pvid being untagged. If you were testing from these this will be why the test failed.

Why have you used the "voice-vlan" command are you using ADAC or lldp?

Which port has the router connected? It should be only in vlan 11, have pvid 11 and set to untagall. On the router you will need to add two static routes;

192.168.21.0 255.255.255.0 192.168.22.5
192.168.22.0 255.255.255.0 192.168.22.5

 

[andy88]

I made a mistake you only need the 192.168.21.0 255.255.255.0 192.168.22.5 static route on the router as the 192.168.22.0 subnet is locally connected on the router.

 

[telecotek1]

It wound up being the default gateways of the devices I was trying to ping were set wrong and since I didn't configure them I had no idea they were set wrong. Thank you for responding tho. By the way using LLDP. Should have been the first place I looked actually.