[Re: [nsp] 2950 & vlans]

joshua sahala joshua.ej.smith at usa.net
Wed Dec 10 18:24:10 EST 2003


Anthony Cennami <narziss at cdardn.net> wrote:

> Do you have SVI's built on a Layer 3 device that can route between the 
> two networks?

there is no routing between the networks being done - i have a private
lan for management traffic, and a public lan for dns/www traffic.  each
vlan has it's own interface on the router (yes, the topology was really
as simple as my diagram - sad isn't it?)

thanks

/joshua

> If you move your SVI's to the router, and ensure routing and either 
> trunking or native vlan tagging is enabled on the uplink ports to the 
> router, you should be able to ping throughout the network.
> 
> You'll also want to make sure that the VLANs have propagated throughout 
> the network, either through Client-Server VTP, or by statically entering 
> them in your VLAN database(s).
> 
> 
> 
> 
> Bruce Pinsky wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> > 
> > joshua sahala wrote:
> > 
> > | hello all,
> > |
> > | i have a config issue, but i cannot seem to figure it out.  using this
> > | toplogy:
> > |
> > | router---vlan10---
> > |   |              |
> > |   |              |
> > |   ---vlan12---switch
> > |        |         |
> > |      hosta---vlan10
> > |
> > | hosta is a server with two ethernet interfaces, one is addressed in the
> > | inside vlan (vlan10), and the external interface is in vlan12.  the
> > | switch has an ip address in vlan10 (int vlan10 172.16.24.4).  from the
> > | router, i can ping/ssh/telnet to anything with an internal address, but
> > | i cannot ping/ssh the server's public interface.
> > |
> > 
> > What kind of switch is it?  Does the server have unique MAC addresses for
> > each of its interfaces or is it a common MAC address across both? If
> > common, can the switch support the same MAC in two different VLANs?  If
> > unique, does the router have ARP entries for both of them?  If unique,
does
> > the switch see both in its CAM/forwarding table?
> > 
> > | i am at a loss to figure out why i cannot access the public side...any
> > | comments or suggestions are welcome.
> > |
> > | interface FastEthernet0/3
> > |  description connected_to_e0.ns1
> > |  switchport access vlan 12
> > |  switchport mode access
> > |  switchport nonegotiate
> > |  no ip address
> > |  duplex full
> > |  speed 100
> > |  no cdp enable
> > |  spanning-tree portfast
> > |  spanning-tree bpdufilter enable
> > | end
> > |
> > | interface FastEthernet0/14
> > |  description connected_to_e1.ns1
> > |  switchport access vlan 10
> > |  switchport mode access
> > |  switchport nonegotiate
> > |  no ip address
> > |  duplex full
> > |  speed 100
> > |  no cdp enable
> > |  spanning-tree portfast
> > |  spanning-tree bpdufilter enable
> > |
> > | interface Vlan10
> > |  ip address 172.16.24.4 255.255.255.240
> > |  no ip unreachables
> > |  no ip proxy-arp
> > |  no ip route-cache
> > | end
> > |
> > |
> > | thanks
> > |
> > | /joshua
> > |
> > |
> > | "Walk with me through the Universe,
> > |  And along the way see how all of us are Connected.
> > |  Feast the eyes of your Soul,
> > |  On the Love that abounds.
> > |  In all places at once, seemingly endless,
> > |  Like your own existence."
> > |      - Stephen Hawking -
> > |
> > |
> > |
> > | _______________________________________________
> > | cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > | https://puck.nether.net/mailman/listinfo/cisco-nsp
> > | archive at http://puck.nether.net/pipermail/cisco-nsp/
> > 
> > 
> > - --
> > =========
> > bep
> > 
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.2.2 (MingW32)
> > 
> > iD8DBQE/16AjE1XcgMgrtyYRAg3ZAJ9PZLOO2Rat0BmTpFI4HvephuhdhgCg+cT5
> > pmvaTCD9GMCD0xGvUz42Cw4=
> > =DDXM
> > -----END PGP SIGNATURE-----
> > 
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 



"Walk with me through the Universe,
 And along the way see how all of us are Connected.
 Feast the eyes of your Soul,
 On the Love that abounds.
 In all places at once, seemingly endless,
 Like your own existence."
     - Stephen Hawking -





More information about the cisco-nsp mailing list