Inter VLAN routing - 2950 & 2621 - 802.1q

[AmDAMman]

Hey guys I have no idea whats going on with my config. My computer on vlan 2 can not ping the pc on vlan 3. Can someone please help me out??? I would really apprecaite it.

Thanks,
Daniel

Here is my config:

2621 ROUTER:
Router#sho config
Using 844 out of 29688 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
speed auto
full-duplex
!
interface FastEthernet0/0.2
encapsulation dot1Q 2 native
ip address 10.10.11.1 255.255.255.0
!
interface FastEthernet0/0.3
encapsulation dot1Q 3
ip address 10.10.12.1 255.255.255.0
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
ip http server
no ip http secure-server
ip classless
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

Router#












2950 SWITCH CONFIG:

Switch#sho config
Using 1595 out of 32768 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Switch
!
enable password cisco
!
ip subnet-zero
!
ip ssh time-out 120
ip ssh authentication-retries 3
vtp mode transparent
!
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
no spanning-tree vlan 1-2
!
!
!
!
vlan 2
name Data
!
vlan 3
name Voice
!
interface FastEthernet0/1
!
interface FastEthernet0/2
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/3
switchport access vlan 3
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
switchport trunk native vlan 2
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 10.10.10.2 255.255.255.0
no ip route-cache
shutdown
!
ip default-gateway 10.10.10.1
ip http server
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
login
!
!
end

Switch#

 

[AmDAMman]

Ok i gave it another shot. Here is my new config and it still doesnt work. What i'm trying to accomplish is 2 different scenarios. 1st i want to have two PC's on the same network but in different VLANS communicate. 2nd Scenario i want to have two pc's on different VLANS and in different networks communicate. Can someone help. I'm going crazy. =) Thanks a lot.

Switch config:

!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Switch
!
!
ip subnet-zero
!
ip ssh time-out 120
ip ssh authentication-retries 3
vtp mode transparent
!
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
no spanning-tree vlan 10,20,30
!
--More--
00:36:59: %SYS-5-CONFIG_I: Configured from console ! e
!
!
vlan 10
name Hosts
!
vlan 20
name Servers
!
vlan 30
name Voice
!
interface FastEthernet0/1
description VLAN 10 Hosts
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/2
description VLAN 10 Hosts
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/3
description VLAN 10 Hosts
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/4
description VLAN 10 Hosts
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/5
description VLAN 10 Hosts
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/6
description VLAN 10 Hosts
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/7
description VLAN 10 Hosts
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/8
description VLAN 10 Hosts
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/9
description VLAN 20 Servers
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/10
description VLAN 20 Servers
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/11
description VLAN 20 Servers
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/12
description VLAN 20 Servers
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/13
description VLAN 20 Servers
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/14
description VLAN 20 Servers
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/15
description VLAN 20 Servers
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/16
description VLAN 20 Servers
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/17
description IP Phones
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/18
description IP Phones
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/19
description IP Phones
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/20
description IP Phones
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/21
description IP Phones
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/22
description IP Phones
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/23
!
interface FastEthernet0/24
description Trunk to router
switchport trunk native vlan 10
switchport mode trunk
speed 100
duplex full
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
description Managment VLAN
ip address 10.0.1.1 255.255.255.0
no ip route-cache
shutdown
!
interface Vlan10
ip address 10.0.10.1 255.255.255.0
no ip route-cache
shutdown
!
interface Vlan20
ip address 10.0.20.1 255.255.255.0
no ip route-cache
shutdown
!
interface Vlan30
ip address 10.0.30.1 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 5 15
!
!
end

Switch#

Switch#
Switch#sho vtp status
VTP Version : 2
Configuration Revision : 0
Maximum VLANs supported locally : 250
Number of existing VLANs : 8
VTP Operating Mode : Transparent
VTP Domain Name :
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0x59 0x10 0xAB 0xAE 0x45 0x05 0x73 0xE5
Configuration last modified by 0.0.0.0 at 3-1-93 00:04:00
Switch#
Switch#sho vlan brief

VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/23, Gi0/1, Gi0/2
10 Hosts active Fa0/1, Fa0/2, Fa0/3, Fa0/4
Fa0/5, Fa0/6, Fa0/7, Fa0/8
20 Servers active Fa0/9, Fa0/10, Fa0/11, Fa0/12
Fa0/13, Fa0/14, Fa0/15, Fa0/16
30 Voice active Fa0/17, Fa0/18, Fa0/19, Fa0/20
Fa0/21, Fa0/22
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
Switch#











Router config:

Router#sho config
Using 888 out of 29688 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
speed 100
full-duplex
!
interface FastEthernet0/0.1
encapsulation dot1Q 10 native
ip address 10.0.10.2 255.255.255.0
!
interface FastEthernet0/0.2
encapsulation dot1Q 20
ip address 10.0.20.2 255.255.255.0
!
interface FastEthernet0/0.3
encapsulation dot1Q 30
ip address 10.0.30.2 255.255.255.0
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
ip http server
no ip http secure-server
ip classless
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
!
!
end

Router#
Router#sho vlan

Virtual LAN ID: 1 (IEEE 802.1Q Encapsulation)

vLAN Trunk Interface: FastEthernet0/0

Protocols Configured: Address: Received: Transmitted:

Virtual LAN ID: 10 (IEEE 802.1Q Encapsulation)

vLAN Trunk Interface: FastEthernet0/0.1

This is configured as native Vlan for the following interface(s) :
FastEthernet0/0

Protocols Configured: Address: Received: Transmitted:
IP 10.0.10.2 54 7

Virtual LAN ID: 20 (IEEE 802.1Q Encapsulation)

vLAN Trunk Interface: FastEthernet0/0.2

Protocols Configured: Address: Received: Transmitted:
IP 10.0.20.2 15 7

Virtual LAN ID: 30 (IEEE 802.1Q Encapsulation)

vLAN Trunk Interface: FastEthernet0/0.3

Protocols Configured: Address: Received: Transmitted:
IP 10.0.30.2 0 7

Router#
Router#
Router#

 

[vipergg]

You can't have 2 different pcs in the same subnet segment and have them on 2 different vlans . Your first config would have worked if you had your 2950 management address in vlan 2 and the ip default gateway of the 2950 would be the router vlan 2 ip address . This address is to manage the 2950 only and nothing else . The router end looks ok , pc'S ADDRESS if in vlan 2 would have to be a 10.10.11.X address with a 10.10.11.1 default gateway address on the nic with anything in vlan 3 following the vlan 3 address scheme and router default address .

 

[AmDAMman]

Thanks!! I got it working. I'm curious how different networks can communicate without a routing protocol. How is this possible? Here is my new basic config that now works. =)


Switch config:

Switch#
Switch#sho config
Using 1392 out of 32768 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Switch
!
!
ip subnet-zero
!
ip ssh time-out 120
ip ssh authentication-retries 3
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
!
interface FastEthernet0/2
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/3
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
switchport mode trunk
speed 100
duplex full
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 10.0.1.1 255.255.255.0
no ip route-cache
!
ip default-gateway 10.0.1.2
ip http server
!
line con 0
line vty 5 15
!
!
end









Router:


Router#
Router#
Router#sho config
Using 779 out of 29688 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
speed 100
full-duplex
!
interface FastEthernet0/0.1
encapsulation dot1Q 1 native
ip address 10.0.1.2 255.255.255.0
!
interface FastEthernet0/0.2
encapsulation dot1Q 2
ip address 10.0.2.2 255.255.255.0
!
interface Serial0/0
no ip address
shutdown
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
ip http server
no ip http secure-server
ip classless
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
!
!
end

Router#

 

[vipergg]

When the networks are all attached to the same router you do not need a routing protocol you just have to make sure "ip routing is turned on the router . A routing protocol is used to propagate routes (subnets) from one router to another so that a remote router knows which interface to send a packet to a remote network . If your networks are local to your router a routing protocol is not needed . If you do a "show ip route you will see all subnets show as connected .