ExtremeSwitching (EXOS)

Expand all | Collapse all

Inter-VLAN Routing not working correctly

Eric Burke

Eric Burke07-17-2018 21:57

IT-SA

IT-SA07-17-2018 21:57

  • 1.  Inter-VLAN Routing not working correctly

    Posted 07-17-2018 19:43
      |   view attached
    Hello!

    I just took over a System Administrator role for a company and trying to figure out what happened to one of their VLANs.
    I am new to the Extreme Network devices. They currently have 3 stacked X450-e as their main switch stack/router.
    The previous SA setup a new VLAN (VLAN11) to free up some IPs on the main subnet.
    Some PCs started dropping from the network last week and we ended up figuring out that the VLAN had been removed from the switch configuration.
    I readded it and tried to set everything up as it should be but its not working and I am starting to bang my head against the wall and need some other eyes on this to tell me where the issue might be.

    I've gone through all the help guides on here and cannot get a PC to ping another PC on VLAN11 from VLAN1. I cannot even get VLAN11 to pass DHCP to the PC. Static set IP doesn't work either.
    DHCP server IP is 192.168.0.17

    Here is my current switch config:

    Attachment(s)

    txt
    switch-config.txt   29 KB 1 version


  • 2.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 20:20
    What's routing between VLAN's? I see all of your VLAN's, but I don't see anything routing between them. Do you have a firewall or some other device in place?


  • 3.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:04
    The switch that I uploaded should be the device doing routing.


  • 4.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:20
    Stupid question - the devices are untagged in V11, correct? Here's the list of items you show there: 1:41, 2:21, 2:30, 3:7. Try dumping a "show port vlan" and make sure that the devices needing to be routed are untagged. At first glance, it looks okay. Issue a "show ipconfig" and "show iproute" and make sure nothing jumps out there. You can also dump the arp cache on a PC (set IP manually first) and make sure the MAC of the DFGW is actually the extreme. Same on the DHCP server.


  • 5.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:30
    Did you enable IP forwarding on the VLAN? Do a 'show VLAN vlan11' and check


  • 6.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 22:31
    169.254.0.0/16 are IPv4 link-local addresses that are assigned when a DHCP client does not get a DHCP response.


  • 7.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 22:37
    Is the problem only getting a DHCP response on the VLAN? You said two ports are working but "other" ports fail to get DHCP replies. I'm trying to make sure this is not a dhcp-relay problem and that any statically configured IP system works.

    Yeah, I thought I remembered that each VLAN needs to have DHCP relay enabled. I'll go back and look at your config - is 'enable bootprelay ipv4 VLAN VLAN11' set? We'll see....

    Yep, you have it enabled....


  • 8.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 22:59
    I think I see it... Add the IP address of the relay server to your vlan based bootprelay commands (in addition to the global setting).

    enable bootprelay vlan VLAN11
    config bootprelay vlan11 add x.x.x.x


  • 9.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    I should mention that ports 1:41 and 2:30 are currently working. I thought I had it figured out last week but all the other ports I try to enable as VLAN11 seems to fail to pull DHCP IP.
    I can ping them from a VLAN1 PC too.


  • 10.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 22:07
    Other than not supporting IPv6 forwarding vlan11 looks okay.

    Are the PCs on the default VLAN able to ping systems on the voice or replication vlans? Can systems on voice/replication reach machines on vlan11? I never configure VLAN 1 so I don't know if it is a good practice do what you're doing here.


  • 11.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 23:04
    Hmm... that's not how my router is configured:

    configure bootprelay add 10.80.195.242 vr VR-Default configure bootprelay add 10.80.195.247 vr VR-Default

    configure bootprelay add 10.80.222.70 vr VR-Default

    enable bootprelay ipv4 vlan client2247

    enable bootprelay ipv4 vlan ISL-to-Nimbula

    enable bootprelay ipv4 vlan manmgt2247

    enable bootprelay ipv4 VLAN net2247

    enable bootprelay ipv4 vlan storage2247



  • 12.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 23:14
    Statically configured IPs seem to route correctly but clients needing a DHCP response seem to not get it. The VLAN and bootprelay seem to be configured properly so I would check the dhcp server to make sure it is still serving addresses for 192.168.11.0/24. If possible, I'd run a tcpdump on the DHCP server and check for DHCP Request packets coming from 192.168.11.1 and if so, does the server send a DCHP ACK packet back. If the server has a log file then check it. If that works then the DHCP server is not the issue and you know that bootprelay is not the issue. If the packet never arrives then it still something with the configuration.


  • 13.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:04
    Sorry about that - misread the configs (those ipforwarding commands hide in the middle of a bunch of stuff). Let me re-read 🙂...


  • 14.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:20
    Yeah, those are the ports I have been playing with trying to get it working.
    The ports are untagged.


  • 15.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:20
    show iproute

    Ori Destination Gateway Mtr Flags VLAN Duration
    #s Default Route 192.168.0.2 1 UG---S-um--f- Default 5d:22h:16m:30s
    d 10.90.0.0/29 10.90.0.1 1 -------um---- replication 5d:22h:16m:43s
    #d 192.168.0.0/24 192.168.0.1 1 U------um--f- Default 5d:22h:16m:43s
    #d 192.168.11.0/24 192.168.11.1 1 U------um--f- VLAN11 5d:6h:1m:47s
    #d 192.168.100.0/24 192.168.100.1 1 U------um--f- VOICE 5d:22h:16m:43s
    Origin(Ori): (b) BlackHole, (be) EBGP, (bg) BGP, (bi) IBGP, (bo) BOOTP
    (ct) CBT, (d) Direct, (df) DownIF, (dv) DVMRP, (e1) ISISL1Ext
    (e2) ISISL2Ext, (h) Hardcoded, (i) ICMP, (i1) ISISL1 (i2) ISISL2
    (is) ISIS, (mb) MBGP, (mbe) MBGPExt, (mbi) MBGPInter, (mp) MPLS Lsp
    (mo) MOSPF (o) OSPF, (o1) OSPFExt1, (o2) OSPFExt2
    (oa) OSPFIntra, (oe) OSPFAsExt, (or) OSPFInter, (pd) PIM-DM, (ps) PIM-SM
    (r) RIP, (ra) RtAdvrt, (s) Static, (sv) SLB_VIP, (un) UnKnown
    (*) Preferred unicast route (@) Preferred multicast route
    (#) Preferred unicast and multicast route
    Flags: (B) BlackHole, (b) BFD protection requested, (c) Compressed, (D) Dynamic
    (f) Provided to FIB, (G) Gateway, (H) Host Route, (L) Matching LDP LSP
    (l) Calculated LDP LSP, (3) L3VPN Route, (m) Multicast, (P) LPM-routing
    (p) BFD protection active, (R) Modified, (S) Static, (s) Static LSP
    (T) Matching RSVP-TE LSP, (t) Calculated RSVP-TE LSP, (u) Unicast, (U) Up
    MPLS Label: (S) Bottom of Label Stack
    Mask distribution:
    1 default routes 3 routes at length 24
    1 routes at length 29
    Route Origin distribution:
    4 routes from Direct 1 routes from Static
    Total number of routes = 5
    Total number of compressed routes = 0


  • 16.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:30
    VLAN Interface with name VLAN11 created by user
    Admin State: Enabled Tagging: 802.1Q Tag 11
    Description: None
    Virtual router: VR-Default
    IPv4 Forwarding: Enabled
    Primary IP : 192.168.11.1/24
    IPv6 Forwarding: Disabled
    IPv6: None
    STPD: None
    Protocol: Match all unfiltered protocols
    Loopback: Disabled
    NetLogin: Disabled
    QosProfile: None configured
    Egress Rate Limit Designated Port: None configured
    Flood Rate Limit QosProfile: None configured
    Ports: 4. (Number of active ports=3)
    Untag: *1:41, 2:21, *2:30, *3:7
    Flags: (*) Active, (!) Disabled, (g) Load Sharing port
    (b) Port blocked on the vlan, (m) Mac-Based port
    (a) Egress traffic allowed for NetLogin
    (u) Egress traffic unallowed for NetLogin
    (t) Translate VLAN tag for Private-VLAN
    (s) Private-VLAN System Port, (L) Loopback port
    (e) Private-VLAN End Point Port
    (x) VMAN Tag Translated port
    (G) Multi-switch LAG Group port


  • 17.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    You can do a "show port


  • 18.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    Port: 1:41
    Virtual-router: VR-Default
    Type: UTP
    Random Early drop: Unsupported
    Admin state: Enabled with auto-speed sensing auto-duplex
    Link State: Active, 1Gbps, full-duplex
    Link Ups: 24 Last: Tue Jul 17 19:02:11 2018
    Link Downs: 23 Last: Tue Jul 17 19:02:07 2018
    VLAN cfg:
    Name: VOICE, 802.1Q Tag = 10, MAC-limit = No-limit, Virtual router: VR-Default
    Name: VLAN11, Internal Tag = 11, MAC-limit = No-limit, Virtual router: VR-Default
    STP cfg:
    Protocol:
    Name: VLAN11 Protocol: ANY Match all protocols.
    Trunking: Load sharing is not enabled.
    EDP: Enabled
    ELSM: Disabled
    Ethernet OAM: Disabled
    Learning: Enabled
    Unicast Flooding: Enabled
    Multicast Flooding: Enabled
    Broadcast Flooding: Enabled
    Jumbo: Disabled
    Flow Control: Rx-Pause: Enabled Tx-Pause: Disabled
    Priority Flow Control: Disabled
    Reflective Relay: Disabled
    Link up/down SNMP trap filter setting: Enabled
    Egress Port Rate: No-limit
    Broadcast Rate: No-limit
    Multicast Rate: No-limit
    Unknown Dest Mac Rate: No-limit
    QoS Profile: None configured
    Ingress Rate Shaping : Unsupported
    Ingress IPTOS Examination: Disabled
    Ingress 802.1p Examination: Enabled
    Ingress 802.1p Inner Exam: Disabled
    Egress IPTOS Replacement: Disabled
    Egress 802.1p Replacement: Disabled
    NetLogin: Disabled
    NetLogin port mode: Port based VLANs
    Smart redundancy: Enabled
    Software redundant port: Disabled
    IPFIX: Disabled Metering: Ingress, All Packets, All Traffic
    IPv4 Flow Key Mask: SIP: 255.255.255.255 DIP: 255.255.255.255
    IPv6 Flow Key Mask: SIP: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
    DIP: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
    auto-polarity: Enabled
    Shared packet buffer: default
    VMAN CEP egress filtering: Disabled
    PTP Configured: Disabled
    Time-Stamping Mode: None

    show port 2:13 info detail
    Port: 2:13
    Virtual-router: VR-Default
    Type: UTP
    Random Early drop: Unsupported
    Admin state: Enabled with auto-speed sensing auto-duplex
    Link State: Active, 1Gbps, full-duplex
    Link Ups: 25 Last: Tue Jul 17 19:12:34 2018
    Link Downs: 24 Last: Tue Jul 17 19:12:31 2018
    VLAN cfg:
    Name: Default, 802.1Q Tag = 1, MAC-limit = No-limit, Virtual router: VR-Default
    Name: VOICE, 802.1Q Tag = 10, MAC-limit = No-limit, Virtual router: VR-Default
    STP cfg:
    Protocol:
    Trunking: Load sharing is not enabled.
    EDP: Enabled
    ELSM: Disabled
    Ethernet OAM: Disabled
    Learning: Enabled
    Unicast Flooding: Enabled
    Multicast Flooding: Enabled
    Broadcast Flooding: Enabled
    Jumbo: Disabled
    Flow Control: Rx-Pause: Enabled Tx-Pause: Disabled
    Priority Flow Control: Disabled
    Reflective Relay: Disabled
    Link up/down SNMP trap filter setting: Enabled
    Egress Port Rate: No-limit
    Broadcast Rate: No-limit
    Multicast Rate: No-limit
    Unknown Dest Mac Rate: No-limit
    QoS Profile: None configured
    Ingress Rate Shaping : Unsupported
    Ingress IPTOS Examination: Disabled
    Ingress 802.1p Examination: Enabled
    Ingress 802.1p Inner Exam: Disabled
    Egress IPTOS Replacement: Disabled
    Egress 802.1p Replacement: Disabled
    NetLogin: Disabled
    NetLogin port mode: Port based VLANs
    Smart redundancy: Enabled
    Software redundant port: Disabled
    IPFIX: Disabled Metering: Ingress, All Packets, All Traffic
    IPv4 Flow Key Mask: SIP: 255.255.255.255 DIP: 255.255.255.255
    IPv6 Flow Key Mask: SIP: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
    DIP: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
    auto-polarity: Enabled
    Shared packet buffer: default
    VMAN CEP egress filtering: Disabled
    PTP Configured: Disabled
    Time-Stamping Mode: None


  • 19.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    Whoops, wrong port.


  • 20.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    So, you have a mismatch there. The untagged ports are the ones listed with "internal tag". The second port you list is a trunk port with only "tagged" vlans. It sounds like that's not what you're looking for.


  • 21.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    Yeah, that port was previously one of the ones I was working on. Working on getting updated config.

    Here is the arp errors:

    Dynamic Entries : 160 Static Entries : 0
    Pending Entries : 0
    In Request : 5151717 In Response : 39365
    Out Request : 368235 Out Response : 466309
    Failed Requests : 55332
    Proxy Answered : 0
    Rx Error : 0 Dup IP Addr : 0.0.0.0
    Rejected Count : 344344 Rejected IP : 169.254.101.108
    Rejected Port : 2:41 Rejected I/F : Default
    Max ARP entries : 8192 Max ARP pending entries : 256
    ARP address check: Enabled ARP refresh : Enabled
    Timeout : 20 minutes ARP Sender-Mac Learning : Disabled
    Retransmit Time : 1000 milliseconds
    Reachable Time : 900000 milliseconds (Auto)


  • 22.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    Interesting. Port 2:41 saw an IP that did not match the VLAN on that port. It's probably just because your DHCP is not getting out and/or back.


  • 23.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    Port: 2:13
    Virtual-router: VR-Default
    Type: UTP
    Random Early drop: Unsupported
    Admin state: Enabled with auto-speed sensing auto-duplex
    Link State: Active, 1Gbps, full-duplex
    Link Ups: 26 Last: Tue Jul 17 19:20:45 2018
    Link Downs: 25 Last: Tue Jul 17 19:20:42 2018
    VLAN cfg:
    Name: Default, 802.1Q Tag = 1, MAC-limit = No-limit, Virtual router: VR-Default
    Name: VOICE, 802.1Q Tag = 10, MAC-limit = No-limit, Virtual router: VR-Default
    Name: VLAN11, Internal Tag = 11, MAC-limit = No-limit, Virtual router: VR-Default
    STP cfg:
    Protocol:
    Name: VLAN11 Protocol: ANY Match all protocols.
    Trunking: Load sharing is not enabled.
    EDP: Enabled
    ELSM: Disabled
    Ethernet OAM: Disabled
    Learning: Enabled
    Unicast Flooding: Enabled
    Multicast Flooding: Enabled
    Broadcast Flooding: Enabled
    Jumbo: Disabled
    Flow Control: Rx-Pause: Enabled Tx-Pause: Disabled
    Priority Flow Control: Disabled
    Reflective Relay: Disabled
    Link up/down SNMP trap filter setting: Enabled
    Egress Port Rate: No-limit
    Broadcast Rate: No-limit
    Multicast Rate: No-limit
    Unknown Dest Mac Rate: No-limit
    QoS Profile: None configured
    Ingress Rate Shaping : Unsupported
    Ingress IPTOS Examination: Disabled
    Ingress 802.1p Examination: Enabled
    Ingress 802.1p Inner Exam: Disabled
    Egress IPTOS Replacement: Disabled
    Egress 802.1p Replacement: Disabled
    NetLogin: Disabled
    NetLogin port mode: Port based VLANs
    Smart redundancy: Enabled
    Software redundant port: Disabled
    IPFIX: Disabled Metering: Ingress, All Packets, All Traffic
    IPv4 Flow Key Mask: SIP: 255.255.255.255 DIP: 255.255.255.255
    IPv6 Flow Key Mask: SIP: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
    DIP: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
    auto-polarity: Enabled
    Shared packet buffer: default
    VMAN CEP egress filtering: Disabled
    PTP Configured: Disabled
    Time-Stamping Mode: None


  • 24.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    Can you try removing everything but V11 from that port? conf def del port 2:13 | conf voice del port 2:13 and retest?


  • 25.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    Still nothing.

    Port: 2:13
    Virtual-router: VR-Default
    Type: UTP
    Random Early drop: Unsupported
    Admin state: Enabled with auto-speed sensing auto-duplex
    Link State: Active, 1Gbps, full-duplex
    Link Ups: 28 Last: Tue Jul 17 19:31:06 2018
    Link Downs: 27 Last: Tue Jul 17 19:31:02 2018
    VLAN cfg:
    Name: VLAN11, Internal Tag = 11, MAC-limit = No-limit, Virtual router: VR-Default
    STP cfg:
    Protocol:
    Name: VLAN11 Protocol: ANY Match all protocols.
    Trunking: Load sharing is not enabled.
    EDP: Enabled
    ELSM: Disabled
    Ethernet OAM: Disabled
    Learning: Enabled
    Unicast Flooding: Enabled
    Multicast Flooding: Enabled
    Broadcast Flooding: Enabled
    Jumbo: Disabled
    Flow Control: Rx-Pause: Enabled Tx-Pause: Disabled
    Priority Flow Control: Disabled
    Reflective Relay: Disabled
    Link up/down SNMP trap filter setting: Enabled
    Egress Port Rate: No-limit
    Broadcast Rate: No-limit
    Multicast Rate: No-limit
    Unknown Dest Mac Rate: No-limit
    QoS Profile: None configured
    Ingress Rate Shaping : Unsupported
    Ingress IPTOS Examination: Disabled
    Ingress 802.1p Examination: Enabled
    Ingress 802.1p Inner Exam: Disabled
    Egress IPTOS Replacement: Disabled
    Egress 802.1p Replacement: Disabled
    NetLogin: Disabled
    NetLogin port mode: Port based VLANs
    Smart redundancy: Enabled
    Software redundant port: Disabled
    IPFIX: Disabled Metering: Ingress, All Packets, All Traffic
    IPv4 Flow Key Mask: SIP: 255.255.255.255 DIP: 255.255.255.255
    IPv6 Flow Key Mask: SIP: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
    DIP: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
    auto-polarity: Enabled
    Shared packet buffer: default
    VMAN CEP egress filtering: Disabled
    PTP Configured: Disabled
    Time-Stamping Mode: None


  • 26.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    Still nothing.

    Port: 2:13
    Virtual-router: VR-Default
    Type: UTP
    Random Early drop: Unsupported
    Admin state: Enabled with auto-speed sensing auto-duplex
    Link State: Active, 1Gbps, full-duplex
    Link Ups: 28 Last: Tue Jul 17 19:31:06 2018
    Link Downs: 27 Last: Tue Jul 17 19:31:02 2018
    VLAN cfg:
    Name: VLAN11, Internal Tag = 11, MAC-limit = No-limit, Virtual router: VR-Default
    STP cfg:
    Protocol:
    Name: VLAN11 Protocol: ANY Match all protocols.
    Trunking: Load sharing is not enabled.
    EDP: Enabled
    ELSM: Disabled
    Ethernet OAM: Disabled
    Learning: Enabled
    Unicast Flooding: Enabled
    Multicast Flooding: Enabled
    Broadcast Flooding: Enabled
    Jumbo: Disabled
    Flow Control: Rx-Pause: Enabled Tx-Pause: Disabled
    Priority Flow Control: Disabled
    Reflective Relay: Disabled
    Link up/down SNMP trap filter setting: Enabled
    Egress Port Rate: No-limit
    Broadcast Rate: No-limit
    Multicast Rate: No-limit
    Unknown Dest Mac Rate: No-limit
    QoS Profile: None configured
    Ingress Rate Shaping : Unsupported
    Ingress IPTOS Examination: Disabled
    Ingress 802.1p Examination: Enabled
    Ingress 802.1p Inner Exam: Disabled
    Egress IPTOS Replacement: Disabled
    Egress 802.1p Replacement: Disabled
    NetLogin: Disabled
    NetLogin port mode: Port based VLANs
    Smart redundancy: Enabled
    Software redundant port: Disabled
    IPFIX: Disabled Metering: Ingress, All Packets, All Traffic
    IPv4 Flow Key Mask: SIP: 255.255.255.255 DIP: 255.255.255.255
    IPv6 Flow Key Mask: SIP: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
    DIP: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
    auto-polarity: Enabled
    Shared packet buffer: default
    VMAN CEP egress filtering: Disabled
    PTP Configured: Disabled
    Time-Stamping Mode: None


  • 27.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    grrr... I hate stuff like this. It's got to be something really stupid. Now I'm banging my head against the wall too!



  • 28.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    Yeah, I don't get it. Very bizarre behavior.
    This was all working and then I came to work last week and my coworker said certain PCs weren't working. Found out it was all VLAN11 PCs. Checked switch and everything looked good. Checked some more settings in the switch via web GUI about an hour later and the whole VLAN was gone. Just deleted. I suspected something is failing but hard to tell at this point.



  • 29.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    Only other thing I'm seeing in the configs is the application of jumbo ports on a handful of them. Usually, you'd want jumbo on all or nothing as you can get frames back that are too large for the end device to understand. Everything else really looks pretty straightforward.


  • 30.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    There is a report from the past of someone setting intervlan routing off using SNMP SET, but I'm not sure if you're someone who might be targeted by something like that. It sets an OID which in turn turns off routing. Describing the way some stuff is going away over time - could it be malicious?


  • 31.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    I really don't think so but you never know. I checked the security log on the switch and didn't see anything out of line. Just me and my coworker IPs showed up.


  • 32.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    In your first port comparison you sent 41 and 13, then said you had the wrong port. You resent 13 making me think that was the wrong one, but in the second example it had different vlan's. The first time it was not even on V11. Was 41 the working one or 2:13?



  • 33.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    Sorry, the first time I sent 2:13 I didn't have it setup for VLAN11. It was the port in my office that I was testing. I thought I had left it on VLAN11. I reconfigured it and sent the new info back to you.


  • 34.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    1:41 is a port in a different office that is currently working. I've deleted it's DHCP entry and it was able to repull. I can also ping that PC from VLAN1.


  • 35.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 21:57
    okay, how a bout a "sho fdb" and a "sho fdb port x:x" (big one to see general list, other to specifically see ports like 2:13 and 1:41. Should see MAC in proper VLAN for connected device(s).



  • 36.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 22:07
    Yes, the PCs on default VLAN can ping other devices on other VLANs. I did not create this mess lol.


  • 37.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 22:37
    I was thinking that too initially. If you static two devices on V11, can they ping eachother?


  • 38.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 22:37
    So, I thought 2:13 was still setup for VLAN11 earlier. So when I tried doing static IP, it didn't work. Now that it is setup for VLAN11, it does work with a static IP so it for sure is something with DHCP. But what is it and why does it work on a couple of the ports.


  • 39.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 22:37
    IMO VLAN's on Extreme are some of the easiest to work with. No funky PVID's or weird terms, just tagged or untagged membership - that's it. Multiple and it's a trunk, one untagged and it's an access port. I don't often route in the switch unless I need a small /30 for an outside ISP or something like that so in my case I'm not usually using Bootprelay. It looked like you had a relay on the default vlan which is native to most of your users, so I don't think you need that set. Depending on your server, you could also tag V11 into that adapter, trunk the port with both def/11 and essentially drop DHCP on that subinterface directly (getting rid of relay).


  • 40.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 22:37
    Okay, is your dhcp server handing out addresses based on MAC address or does it have a pool of addresses to hand out? Also, is the DHCP server configured to support the network 192.168.11.0/24? (Did I read that right in the top of your config? I thought it was 192.168.something_else.1/24)


  • 41.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 22:59
    My head kind of exploded reading that. I need easier instructions please. I'm on my 14th working hour, ready for sleep lol.


  • 42.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 22:59
    enable bootprelay x.x.x.x enables it globally, enable bootprelay vlan v11 enables for that vlan, config bootprelay v11 add x.x.x.x sets up the relay agent for that newly enabled vlan.


  • 43.  RE: Inter-VLAN Routing not working correctly



  • 44.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 22:59
    I just added the configure bootprelay vlan vlan11 add 192.168.0.17
    Doesn't seem to help 2:13 getting an IP.


  • 45.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 22:59
    Unconfig that and instead add it to default - I think I read it backwards. Rob's example does not show it but it looks like the docs show it. The vr-default is just the router instance that the vlan's live in. It reads like it needs to have the vlan passed into the config where the server lives too.


  • 46.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 22:59
    Just did that and same. Going to remove and call it a night. I'll resume tomorrow afternoon. Thank you for all your help!!!


  • 47.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 23:04
    Maybe I'm misreading it. That's how it looked from the sample.


  • 48.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 23:14
    I will dig into this tomorrow. I am going to call it a night. I appreciate all of your and Eric's help tonight. We are getting closer!


  • 49.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 23:14
    I think so. There are some other basic things like pinging the DHCP from an interface based IP in V11 that will show if the switch can get to the DHCP server by itself. In addition, I found a link that describes the difference between the global and vlan-specific DHCP server entries. It's toward the bottom of this post when you're back up and looking at it with fresh eyes... It still sounds like you might have a l2 problem if your devices can't ping when statically assigned in that vlan. Goodnight.

    https://community.extremenetworks.com/extreme/topics/how-to-configure-dhcp-server-in-extreme-switch-...


  • 50.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 23:14
    On the ports that work, I am getting DHCP requests packets on the server. On 2:13, nothing ever shows up in the wireshark.


  • 51.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 23:14
    Port 2:13 is not in VLAN11 according to the config posted in the initial question and according to the "show vlan VLAN11" output.
    Please verify the VLAN configuration for that port, e.g. using "show port 2:13 information detail," and post the output.
    Thanks,
    Erik


  • 52.  RE: Inter-VLAN Routing not working correctly

    Posted 07-17-2018 23:14
    VLAN Interface with name VLAN11 created by user
    Admin State: Enabled Tagging: 802.1Q Tag 11
    Description: None
    Virtual router: VR-Default
    IPv4 Forwarding: Enabled
    Primary IP : 192.168.11.1/24
    IPv6 Forwarding: Disabled
    IPv6: None
    STPD: None
    Protocol: Match all unfiltered protocols
    Loopback: Disabled
    NetLogin: Disabled
    QosProfile: None configured
    Egress Rate Limit Designated Port: None configured
    Flood Rate Limit QosProfile: None configured
    Ports: 5. (Number of active ports=5)
    Untag: *1:41, *2:13, *2:21, *2:30, *3:7
    Flags: (*) Active, (!) Disabled, (g) Load Sharing port
    (b) Port blocked on the vlan, (m) Mac-Based port
    (a) Egress traffic allowed for NetLogin
    (u) Egress traffic unallowed for NetLogin
    (t) Translate VLAN tag for Private-VLAN
    (s) Private-VLAN System Port, (L) Loopback port
    (e) Private-VLAN End Point Port
    (x) VMAN Tag Translated port
    (G) Multi-switch LAG Group port