VLAN on Cisco 3560G

[roomi008]

Experts, IThis is the first time, I am creating a VLAN. I have Cisco 3560G Switch which is connected to router through G0/1 interface of Switch. I was looking at different forums and it seems I can do all the routing on this switch because this is a Layer-3 switch. I have 3 VLANs already configured, VLAN-10, VLAN-15 and VLAN-1. I can ping from one VLAN to another but I can not ping to the gateway(router in the diagram) which is 172.23.200.1. Another thing, I can not access the configuration of this router and I have to configure everything on the switch if it can be. Please see my configuration as below. You can also look at the setup diagram in the link provided.

Lab_Test_Setup#sh run
Building configuration...

Current configuration : 2857 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lab_Test_Setup
!
enable secret 5 $1$gHib$dbAbmm5nRPYPsm6plenfW.
enable password telecom
!
no aaa new-model
ip subnet-zero
ip routing
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface GigabitEthernet0/1
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface GigabitEthernet0/3
!
interface GigabitEthernet0/4
!
interface GigabitEthernet0/5
!
interface GigabitEthernet0/6
!
interface GigabitEthernet0/7
!
interface GigabitEthernet0/8
!
interface GigabitEthernet0/9
!
interface GigabitEthernet0/10
!
interface GigabitEthernet0/11
!
interface GigabitEthernet0/12
!
interface GigabitEthernet0/13
!
interface GigabitEthernet0/14
!
interface GigabitEthernet0/15
!
interface GigabitEthernet0/16
!
interface GigabitEthernet0/17
switchport access vlan 5
!
interface GigabitEthernet0/18
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet0/19
!
interface GigabitEthernet0/20
!
interface GigabitEthernet0/21
!
interface GigabitEthernet0/22
!
interface GigabitEthernet0/23
!
interface GigabitEthernet0/24
!
interface GigabitEthernet0/25
!
interface GigabitEthernet0/26
!
interface GigabitEthernet0/27
!
interface GigabitEthernet0/28
!
interface GigabitEthernet0/29
switchport access vlan 10
switchport mode access
!
interface GigabitEthernet0/30
switchport access vlan 10
switchport mode access
!
interface GigabitEthernet0/31
switchport access vlan 10
switchport mode access
!
interface GigabitEthernet0/32
switchport access vlan 10
switchport mode access
!
interface GigabitEthernet0/33
!
interface GigabitEthernet0/34
!
interface GigabitEthernet0/35
!
interface GigabitEthernet0/36
!
interface GigabitEthernet0/37
!
interface GigabitEthernet0/38
!
interface GigabitEthernet0/39
!
interface GigabitEthernet0/40
!
interface GigabitEthernet0/41
!
interface GigabitEthernet0/42
!
interface GigabitEthernet0/43
!
interface GigabitEthernet0/44
!
interface GigabitEthernet0/45
!
interface GigabitEthernet0/46
!
interface GigabitEthernet0/47
!
interface GigabitEthernet0/48
!
interface GigabitEthernet0/49
!
interface GigabitEthernet0/50
!
interface GigabitEthernet0/51
!
interface GigabitEthernet0/52
!
interface Vlan1
ip address 172.23.200.30 255.255.254.0
!
interface Vlan5
ip address 172.23.210.110 255.255.254.0
!
interface Vlan10
ip address 172.23.220.110 255.255.254.0
!
ip default-gateway 172.23.200.1
ip classless
ip route 0.0.0.0 0.0.0.0 172.23.200.1
ip route 172.23.210.0 255.255.254.0 172.23.200.1
ip http server
!
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

 

[burtsbees]

Post sh int of the trunk interface, as well as a config of the router.

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[unclerico]

i'm sure you can ping from a host on VLAN1 to the .1 interface on the router. more than likely what is happening is the router doesn't know about the 172.23.210.0/23 and the 172.23.220.0/23 networks so it doens't know where to send return traffic. g0/1 needs to only be an access port and not a trunk port in this config since the 3560 is doing the routing. also, remove this statement from your config:

ip route 172.23.210.0 255.255.254.0 172.23.200.1

your VLAN5 SVI is already routing for that subnet.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[burtsbees]

I wanted to see if it actually trunking to annother switch...

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[VinceWhirlwind]

1/ You have configured the switch uplink port as a dot1Q trunk - bet you haven't configured the router the same.

2/ In any case, that's wrong. You said you want to use the 3560 to route for those VLANs, so you should not trunk ANY of them to the router. The connection to the router should be an entirely separate VLAN from the VLANs provided by the 3560 out of any of its other ports.