L3 switch VLAN ip helper question

[Nocturnalis]

I've got a bunch of VLANs running and everything is working great Here is the question;

We are using Symantec Ghost to image workstations and manage software roll outs. All of my VLANs show up in the ghost console accept one. My 12th floor. I've checked the configs in the L3 switch and everything on all my VLANs are the same. When I added the ip helper-address to the 12th floor VLAN all the machines started showing up in the ghost console.

I know why this works but why do did I have to resort to it and my other VLANs don't need it. I like to keep my configs clean and consistent.

Thanks
Noc

http://nocturnalis.blogspot.com

 

[jneiberger]

That's a strange problem. I used to have problems at another company when were using the multicast method to push out images to new PCs. It worked really well on older "dumb" switches, but things got really weird on the newer switches. It was just because the new switches had some multicast stuff on by default that was breaking the transfers. I doubt that's the problem in your case, though.

I'll have to ponder this a bit more. The only thing I can say at this point is that something must be different, you just have to figure out what it is. It's either something in the configs of those machines, in the Ghost application or on your L3 switch. Sounds like you've already checked the switch.

 

[Nocturnalis]

I can't figure it out for the life of me. I was watching the ghost console while I added the helper address and immediately
the 12th floor VLAN network showed up and the machines started to populate. Something somewhere is blocking the multicast for VLAN12 but everything looks identical in my L3 switch.

The funny thing is is that I bet if I step away for a while an d revisit it I may spot it right away

http://nocturnalis.blogspot.com

 

[burtsbees]

Post a config of one switch without the ip helper (and where it is) and of the one with the ip-helper.

Burt

 

[Nocturnalis]

Below is my L3 without the ip helper-address for VLAN12

The Helper-address is going to be 10.100.3.208

The VLAN12 section looks like this after the helper-address is added. (no need for me to post the entire config twice)

Notice all my other VLANs don't have that helper-address.

interface Vlan12
description CLIENT_FLOOR_12 VLAN
ip address 10.100.12.2 255.255.255.0
ip helper-address 10.100.1.22
ip helper-address 10.100.1.78
ip helper-address 10.100.1.10
ip helper-address 10.100.3.208
no ip redirects
no ip unreachables
no ip proxy-arp
standby 12 ip 10.100.12.1


My access layer switches are mostly connected to interface GigabitEthernet2/1 to 3/1 and my VLAN12 switch is connected to interface GigabitEthernet4/1. All these interfaces have the same configs.




____________________________________________________________

WITHOUT THE ABOVE HELPER

***506-A#sh run
Building configuration...

Current configuration : 16853 bytes
!
! Last configuration change at 05:24:15 EDT Wed Sep 19 2007 by ***
! NVRAM config last updated at 02:42:43 EST Fri Mar 16 2007 by ***
!
version 12.2
service nagle
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service compress-config
!
hostname ***4506-A
!
boot-start-marker
boot-end-marker
!
enable ***************************************************
!
username *** *********************************************
no aaa new-model
clock timezone EST -5
clock summer-time EDT recurring
clock calendar-valid
qos map cos 5 to dscp 46
qos map cos 7 to dscp 54
qos
vtp domain ''
vtp mode transparent
udld aggressive

ip subnet-zero
no ip source-route
no ip domain-lookup
ip domain-name ***.com
!
!
!
!
no file verify auto
!
spanning-tree mode rapid-pvst
spanning-tree loopguard default
spanning-tree portfast bpduguard default
spanning-tree extend system-id
spanning-tree vlan 3-4,14-16 priority 16384
spanning-tree vlan 99,101-103 priority 8192
power redundancy-mode redundant
!
!
!
vlan internal allocation policy ascending
!
vlan 3
name CLIENT_FLOOR_3
!
vlan 4
name CLIENT_FLOOR_4
!
vlan 12
name CLIENT_FLOOR_12
!
vlan 14
name CLIENT_FLOOR_14
!
vlan 15
name CLIENT_FLOOR_15
!
vlan 16
name CLIENT_FLOOR_16
!
vlan 99
name MANAGEMENT
!
vlan 101
name SERVER
!
vlan 102
name PRINTER
!
vlan 103
name VIDEO_VLAN
!
vlan 105
name VOICE_HARDWARE_VLAN
!
vlan 203
name 3rd_FLOOR_PHONE
!
vlan 204
name 4th_FLOOR_PHONE
!
vlan 212
name 12th_FLOOR_PHONE
!
vlan 214
name 14th_FLOOR_PHONE
!
vlan 215
name 15th_FLOOR_PHONE
!
vlan 216
name 16th_FLOOR_PHONE
!
class-map match-all TRUST_COS_CLASS
!
!
policy-map TRUST_COS_POLICY
class TRUST_COS_CLASS
trust cos
!
!
interface Port-channel1
description Etherchannel between Switches
switchport
switchport trunk encapsulation dot1q
switchport trunk native vlan 99
switchport trunk allowed vlan 2-1005
switchport mode dynamic desirable
!
interface GigabitEthernet1/1
description Trunk to ***4506-B G1/1
switchport trunk encapsulation dot1q
switchport trunk native vlan 99
switchport trunk allowed vlan 2-1005
switchport mode dynamic desirable
channel-group 1 mode desirable
!
interface GigabitEthernet1/2
description Trunk to ***4506-B G1/2
switchport trunk encapsulation dot1q
switchport trunk native vlan 99
switchport trunk allowed vlan 2-1005
switchport mode dynamic desirable
channel-group 1 mode desirable
!
interface GigabitEthernet2/1
description Trunk to ***3500_FL3_GALLERY
switchport trunk encapsulation dot1q
switchport trunk native vlan 99
switchport trunk allowed vlan 2-1005
switchport mode trunk
qos trust dscp
!
interface GigabitEthernet2/2
description Trunk to ***3560_FL4_NORTH
switchport trunk encapsulation dot1q
switchport trunk native vlan 99
switchport trunk allowed vlan 2-1005
switchport mode dynamic desirable
qos trust dscp
!
interface GigabitEthernet2/3
description Trunk to ***3560_FL4_SOUTH
switchport trunk encapsulation dot1q
switchport trunk native vlan 99
switchport trunk allowed vlan 2-1005
switchport mode dynamic desirable
qos trust dscp
!
interface GigabitEthernet2/4
description Trunk to ***3560_FL14_ST
switchport trunk encapsulation dot1q
switchport trunk native vlan 99
switchport trunk allowed vlan 2-1005
switchport mode dynamic desirable
qos trust dscp
!
interface GigabitEthernet2/5
description Trunk to ***3560_FL15_A
switchport trunk encapsulation dot1q
switchport trunk native vlan 99
switchport trunk allowed vlan 2-1005
switchport mode dynamic desirable
qos trust dscp
!
interface GigabitEthernet2/6
description Trunk to ***3560_FL16_A
switchport trunk encapsulation dot1q
switchport trunk native vlan 99
switchport trunk allowed vlan 2-1005
switchport mode dynamic desirable
qos trust dscp
!
interface GigabitEthernet3/1
description Trunk to ***3560_FL3_CLIENT_A
switchport trunk encapsulation dot1q
switchport trunk native vlan 99
switchport trunk allowed vlan 2-1005
switchport mode dynamic desirable
!
interface GigabitEthernet3/2
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/3
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/4
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/5
switchport access vlan 101
switchport mode access
speed 100
duplex full
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/6
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/7
switchport access vlan 101
switchport mode access
speed 1000
duplex full
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/8
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/9
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/10
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/11
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/12
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/13
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/14
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/15
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/16
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/17
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/18
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/19
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/20
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/21
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/22
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/23
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/24
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/25
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/26
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/27
switchport access vlan 105
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/28
switchport access vlan 105
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/29
switchport access vlan 105
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/30
switchport access vlan 105
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/31
switchport access vlan 105
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/32
switchport access vlan 105
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/33
switchport access vlan 103
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/34
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/35
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/36
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/37
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/38
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/39
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/40
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/41
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/42
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/43
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/44
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/45
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/46
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/47
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet3/48
switchport access vlan 101
switchport mode access
storm-control broadcast level 5.00
spanning-tree portfast
!
interface GigabitEthernet4/1
description Trunk to ***3560_FL12_SOUTH
switchport trunk encapsulation dot1q
switchport trunk native vlan 99
switchport trunk allowed vlan 2-1005
switchport mode dynamic desirable
qos trust dscp
!
interface GigabitEthernet4/2
!
interface GigabitEthernet4/3
!
interface GigabitEthernet4/4
!
interface GigabitEthernet4/5
!
interface GigabitEthernet4/6
!
interface Vlan1
no ip address
shutdown
!
interface Vlan3
description CLIENT_FLOOR_3 VLAN
ip address 10.100.3.2 255.255.255.0
ip helper-address 10.100.1.22
ip helper-address 10.100.1.78
ip helper-address 10.100.1.10
no ip redirects
no ip unreachables
no ip proxy-arp
standby 3 ip 10.100.3.1
!
interface Vlan4
description CLIENT_FLOOR_4 VLAN
ip address 10.100.4.2 255.255.255.0
ip helper-address 10.100.1.22
ip helper-address 10.100.1.78
ip helper-address 10.100.1.10
no ip redirects
no ip unreachables
no ip proxy-arp
standby 4 ip 10.100.4.1
!
interface Vlan12
description CLIENT_FLOOR_12 VLAN
ip address 10.100.12.2 255.255.255.0
ip helper-address 10.100.1.22
ip helper-address 10.100.1.78
ip helper-address 10.100.1.10
no ip redirects
no ip unreachables
no ip proxy-arp
standby 12 ip 10.100.12.1
!
interface Vlan14
description CLIENT_FLOOR_14 VLAN
ip address 10.100.14.2 255.255.255.0
ip helper-address 10.100.1.22
ip helper-address 10.100.1.78
ip helper-address 10.100.1.10
no ip redirects
no ip unreachables
no ip proxy-arp
standby 14 ip 10.100.14.1
!
interface Vlan15
description CLIENT_FLOOR_15 VLAN
ip address 10.100.15.2 255.255.255.0
ip helper-address 10.100.1.22
ip helper-address 10.100.1.78
ip helper-address 10.100.1.10
no ip redirects
no ip unreachables
no ip proxy-arp
standby 15 ip 10.100.15.1
!
interface Vlan16
description CLIENT_FLOOR_16 VLAN
ip address 10.100.16.2 255.255.255.0
ip helper-address 10.100.1.22
ip helper-address 10.100.1.78
ip helper-address 10.100.1.10
no ip redirects
no ip unreachables
no ip proxy-arp
standby 16 ip 10.100.16.1
!
interface Vlan99
description MANAGEMENT
ip address 10.100.100.100 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
standby 100 ip 10.100.100.1
standby 100 priority 105
standby 100 preempt
!
interface Vlan101
description SERVER VLAN
ip address 10.100.1.253 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
standby 101 ip 10.100.1.254
standby 101 priority 105
standby 101 preempt
!
interface Vlan102
description PRINTER VLAN
ip address 10.100.2.2 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
standby 102 ip 10.100.2.1
standby 102 priority 105
standby 102 preempt
!
interface Vlan103
description VIDEO_VLAN
ip address 10.100.103.2 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
standby 103 ip 10.100.103.1
standby 103 priority 105
standby 103 preempt
!
interface Vlan105
description 12th_FLOOR_PHONE
ip address 10.100.105.2 255.255.255.0
ip helper-address 10.100.1.22
no ip redirects
no ip unreachables
no ip proxy-arp
standby 105 ip 10.100.105.1
standby 105 priority 105
standby 105 preempt
!
interface Vlan203
description 3rd_FLOOR_PHONE
ip address 10.100.203.2 255.255.255.0
ip helper-address 10.100.1.22
no ip redirects
no ip unreachables
no ip proxy-arp
standby 203 ip 10.100.203.1
standby 203 priority 105
standby 203 preempt
!
interface Vlan204
description 4th_FLOOR_PHONE
ip address 10.100.204.2 255.255.255.0
ip helper-address 10.100.1.22
no ip redirects
no ip unreachables
no ip proxy-arp
standby 204 ip 10.100.204.1
standby 204 priority 105
standby 204 preempt
!
interface Vlan212
description 12th_FLOOR_PHONE
ip address 10.100.212.2 255.255.255.0
ip helper-address 10.100.1.22
no ip redirects
no ip unreachables
no ip proxy-arp
standby 212 ip 10.100.212.1
standby 212 priority 105
standby 212 preempt
!
interface Vlan214
description 14th_FLOOR_PHONE
ip address 10.100.214.2 255.255.255.0
ip helper-address 10.100.1.22
no ip redirects
no ip unreachables
no ip proxy-arp
standby 214 ip 10.100.214.1
standby 214 priority 105
standby 214 preempt
!
interface Vlan215
description 15th_FLOOR_PHONE
ip address 10.100.215.2 255.255.255.0
ip helper-address 10.100.1.22
no ip redirects
no ip unreachables
no ip proxy-arp
standby 215 ip 10.100.215.1
standby 215 priority 105
standby 215 preempt
!
interface Vlan216
description 16th_FLOOR_PHONE
ip address 10.100.216.2 255.255.255.0
ip helper-address 10.100.1.22
no ip redirects
no ip unreachables
no ip proxy-arp
standby 216 ip 10.100.216.1
standby 216 priority 105
standby 216 preempt
!
router eigrp 128
network 10.0.0.0
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 10.100.1.1
ip route 10.99.5.0 255.255.255.0 10.100.1.202
ip route 192.168.7.0 255.255.255.0 172.16.0.2 name to_LD_network
ip route 192.168.53.0 255.255.255.0 172.16.0.2 name to_LD_network
ip route 192.168.169.0 255.255.255.0 10.100.1.102
ip http server
!
!
!
!
banner motd ^CCCC
+---------------------------------------------------------+
This computer system (including all hardware, software and
peripheral devices) is the property of ***. Use of this
computer system is for management approved purposes. ***
reserves the right to monitor the use of the computer system
at any time. Use of this computer system constitutes consent
to such monitoring. Any unauthorized access, use or modification
of the computer system can result in disciplinary action, civil
liability, or criminal penalties.
+---------------------------------------------------------+
^C
!
*** --- ***
!
!
monitor session 1 source interface Gi3/2
monitor session 1 destination interface Gi3/48
!
end

***4506-A#

http://nocturnalis.blogspot.com

 

[brianinms]

If you are using a ghostcast server, you should really configure multicast on your network.