[c-nsp] 3560 SVI

Peter Rathlev peter at rathlev.dk
Tue Nov 16 13:13:48 EST 2010


On Tue, 2010-11-16 at 13:06 -0400, Sharlon R. Carty wrote:
> I have a odd situation. I created a SVI on a 3560 switch, assigned an IP
> address(public) without enabling ip routing and I was able to remotely
> access the switch.
> No default route added or anything like that. So how is it that I am able to
> access the switch?
>  switch is connected to another switch which has a trunk connection to a
> cisco 7206.

With "no ip routing" you'd normally have "ip default-gateway" in the
configuration, but I assume that's not the case here. Even with a
correct netmask I've seen examples of a switch learning ARP entries for
"foreign" hosts. Try "show ip arp" on the device. You should be able to
configure all routers on the subnet with "no ip proxy-arp", a best
practice IMO.

-- 
Peter




More information about the cisco-nsp mailing list