<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hi,
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">If you want to route on an Extreme device you need to enable ipforwarding on the switch for the vlan’s that you want to enable that for.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Command:
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">enable ipforwarding <vlan name>
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">If you want to route only on the router, you need to give the router interfaces on each vlan, with it’s own IP address in each vlan.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hope that helps,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Erik Bais
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> extreme-nsp-bounces@puck.nether.net [mailto:extreme-nsp-bounces@puck.nether.net]
<b>On Behalf Of </b>root net<br>
<b>Sent:</b> donderdag 21 maart 2013 12:40<br>
<b>To:</b> Extreme NSP<br>
<b>Subject:</b> [e-nsp] Layer 2/3 VLAN Issue between two switches<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hello All,<br>
<br>
I am faced with a issue.<br>
<br>
I have for this scenario, one router, two switches and one server.<br>
<br>
router on a stick <-tagged-> switch 1 <-tagged-> switch 2 -> (untagged) server (dual nic/port)<br>
<br>
Vlans<br>
2 = staff<br>
3 = mgmt<br>
4 = servers<br>
<br>
switch 1 = bd6808 7.8e.4-1 MSM64ix2<br>
switch 2 = summit 400-48T 7.8e.4-1<br>
<br>
switch 1 and switch 2 are connected over copper.<br>
router and switch 2 are connected over copper.<br>
<br>
If I plug the server directly into switch 1 the server can ping gateway on router and switch 1 but not any device in same vlan on switch 2, just switch 1 and router.<br>
If I plug the server into switch 2 the server cannot ping anything but other servers on that vlan only on switch 2.<br>
<br>
Not sure what's wrong haven't had much sleep so it could be something simple I'm missing.<br>
<br>
I can see the mac address of switch 2 if I try to ping but can't get a successful ping. I can also see the other switch if I enable edp on the port.<br>
<br>
sh iparp on switch 2 when try to ping 192.168.100.2<br>
<br>
192.168.100.2 (incomplete) 0 NO servers[0004]<br>
<br>
<br>
BD6808:9 # sh iparp (switch 1)<br>
Destination Mac Age Static VLAN [VID] Port<br>
192.168.100.1 00:0F:34:57:A7:00 5 NO servers[0004] 2:25 (to router)<br>
192.168.100.3 00:04:96:18:49:C0 1 NO servers[0004] 6:3 (to switch 2)<br>
<br>
<br>
router <br>
<br>
interface fa0/0<br>
no ip add<br>
!<br>
!<br>
!<br>
interface fa0/0.4<br>
encap dot1q 4<br>
ip add 192.168.100.1 255.255.255.0<br>
<br>
<br>
switch 1<br>
<br>
IGMP snooping is enabled for all vlans BTW<br>
<br>
# Config information for VLAN servers.<br>
configure vlan "servers" tag 4 # VLAN-ID=0xc Global Tag 28<br>
configure vlan "servers" protocol "ANY"<br>
configure vlan "servers" qosprofile "QP1" <br>
configure vlan "servers" qosprofile ingress none<br>
configure vlan "servers" ipaddress 192.168.100.2 255.255.255.0 <br>
configure vlan "servers" add port 2:25 tagged (port to router)<br>
configure vlan "servers" add port 6:3 tagged (port to switch 2)<br>
<br>
# -- IP Interface[1] = "servers"<br>
enable icmp unreachable vlan "servers"<br>
enable icmp redirects vlan "servers"<br>
enable icmp port-unreachables vlan "servers"<br>
enable icmp time-exceeded vlan "servers"<br>
enable icmp parameter-problem vlan "servers"<br>
disable icmp timestamp vlan "servers"<br>
disable icmp address-mask vlan "servers"<br>
enable subvlan-proxy-arp "servers"<br>
configure ip-mtu 1500 vlan "servers"<br>
<br>
# IP ARP Configuration<br>
<br>
configure iparp timeout 20<br>
configure iparp max-entries 4096<br>
configure iparp max-pending-entries 256<br>
enable iparp checking<br>
enable iparp refresh<br>
#<br>
<br>
switch 2<br>
<br>
IGMP snooping is enabled for all vlans<br>
<br>
# Config information for VLAN servers.<br>
configure vlan "servers" tag 4 # VLAN-ID=0xc Global Tag 7<br>
configure vlan "servers" protocol "ANY"<br>
configure vlan "servers" qosprofile "QP1" <br>
configure vlan "servers" ipaddress 192.168.100.3 255.255.255.0 (only configured to see if could ping)<br>
configure vlan "servers" add port 15 untagged (to server)<br>
configure vlan "servers" add port 31 untagged (to server)<br>
configure vlan "servers" add port 9 tagged (going to switch 1)<br>
<br>
# -- IP Interface[4] = "servers"<br>
enable icmp unreachable vlan "servers"<br>
enable icmp redirects vlan "servers"<br>
enable icmp port-unreachables vlan "servers"<br>
enable icmp time-exceeded vlan "servers"<br>
enable icmp parameter-problem vlan "servers"<br>
disable icmp timestamp vlan "servers"<br>
disable icmp address-mask vlan "servers"<br>
configure ip-mtu 1500 vlan "servers"<br>
<br>
# IP ARP Configuration<br>
<br>
configure iparp timeout 20<br>
configure iparp max-entries 4096<br>
configure iparp max-pending-entries 256<br>
enable iparp checking<br>
enable iparp refresh<br>
#<br>
<br>
<br>
<br>
Any help is much appreciated!<o:p></o:p></p>
</div>
</body>
</html>