Traffic Issue inside newly created VLAN

  • 0
  • 1
  • Question
  • Updated 1 year ago
  • Answered
I'm new to VLAN's and i'm having some issues.  I've configured a test VLAN, but am unable to sucessfully ping the other client i've got sitting on this VLAN.  I can ping the Primary IP for the VLAN from either of my clients however.  Thanks
Photo of Mitch Hubbell

Mitch Hubbell

  • 140 Points 100 badge 2x thumb

Posted 1 year ago

  • 0
  • 1
Photo of Patrick Voss

Patrick Voss, Alum

  • 11,574 Points 10k badge 2x thumb
Hello Mitch,

What are the IP's you are trying to Ping. Are they in the same subnet? Are they both directly connected to the switch?
Photo of Nick Yakimenko

Nick Yakimenko

  • 2,404 Points 2k badge 2x thumb
I cannot see your thinkpad usb 3.0 adapter as properly installed one
Photo of Mitch Hubbell

Mitch Hubbell

  • 140 Points 100 badge 2x thumb
I have the dumb today.  I am able to ping the Primary IP from my PC's, yet still unable to ping from PC to PC
Photo of Mitch Hubbell

Mitch Hubbell

  • 140 Points 100 badge 2x thumb
What are you meaning about the thinkpad adapter not being properly installed?
Photo of Nick Yakimenko

Nick Yakimenko

  • 2,404 Points 2k badge 2x thumb
You are pinging Primary ip via default route on your 10.193.110.65 interface
I mean you did not configure static ip 10.193.150.50
Photo of Nick Yakimenko

Nick Yakimenko

  • 2,404 Points 2k badge 2x thumb
have you set the tag for a test vlan? Are both ports (yours and clients one) untagged and your pc and other's one have ip-s from one subnet?
Photo of Mitch Hubbell

Mitch Hubbell

  • 140 Points 100 badge 2x thumb
I have set the Tag for the VLAN to 5 and added the correct ports needed.  Both machines are on the proper subnet created for the VLAN
Photo of Nick Yakimenko

Nick Yakimenko

  • 2,404 Points 2k badge 2x thumb
issue commands 
show vlan port n 
where n - ports of the machines
Photo of Mitch Hubbell

Mitch Hubbell

  • 140 Points 100 badge 2x thumb
I can see both ports as active
Photo of Henrique

Henrique, Employee

  • 10,302 Points 10k badge 2x thumb
I believe you have a simple diagram as follows:

PC1 (10.193.150.50/24) -------- Switch ------- (10.193.150.50/24) PC2

Can you ping from the switch to both PC1 and PC2? Could be a PC firewall?
Photo of Mitch Hubbell

Mitch Hubbell

  • 140 Points 100 badge 2x thumb
I am able to ping the Primary IP of the switch, just not from PC to PC.  Also Windows Firewall is disabled per GPO
(Edited)
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 46,868 Points 20k badge 2x thumb
Let's start from scratch...
1) connect the PCs back to back with a patchcable - does the ping work
2) what kind of switch model is it
3) post the output for "show vlan X"
Photo of Mitch Hubbell

Mitch Hubbell

  • 140 Points 100 badge 2x thumb
* X440-48p-10G.11 # show vlan--------------------------------------------------------------------------------                                                                                                                                                             ---------------
Name            VID  Protocol Addr       Flags                         Proto  Po                                                                                                                                                             rts  Virtual
                                                                              Ac                                                                                                                                                             tive router
                                                                              /T                                                                                                                                                             otal
--------------------------------------------------------------------------------                                                                                                                                                             ---------------
Default         1    10.193.113.244 /24  -f----------T---------------- ANY    2                                                                                                                                                              /46  VR-Default
Mgmt            4095 10.193.113.251 /24  ----------------------------- ANY    0                                                                                                                                                              /1   VR-Mgmt
Test            5    10.193.150.1   /24  -f--------------------------- ANY    2                                                                                                                                                              /4   VR-Default
--------------------------------------------------------------------------------                                                                                                                                                             ---------------
Flags : (B) BFD Enabled, (c) 802.1ad customer VLAN, (C) EAPS Control VLAN,
        (d) Dynamically created VLAN, (D) VLAN Admin Disabled,
        (e) CES Configured, (E) ESRP Enabled, (f) IP Forwarding Enabled,
        (F) Learning Disabled, (h) TRILL Enabled, (i) ISIS Enabled,
        (I) Inter-Switch Connection VLAN for MLAG, (k) PTP Configured,
        (l) MPLS Enabled, (L) Loopback Enabled, (m) IPmc Forwarding Enabled,
        (M) Translation Member VLAN or Subscriber VLAN, (n) IP Multinetting Enab                                                                                                                                                             led,
        (N) Network Login VLAN, (o) OSPF Enabled, (O) Flooding Disabled,
        (p) PIM Enabled, (P) EAPS protected VLAN, (r) RIP Enabled,
        (R) Sub-VLAN IP Range Configured, (s) Sub-VLAN, (S) Super-VLAN,
        (t) Translation VLAN or Network VLAN, (T) Member of STP Domain,
        (v) VRRP Enabled, (V) VPLS Enabled, (W) VPWS Enabled, (Z) OpenFlow Enabl                                                                                                                                                             ed

Total number of VLAN(s) : 3
Photo of Mitch Hubbell

Mitch Hubbell

  • 140 Points 100 badge 2x thumb
X440-48p-10G
Photo of Mitch Hubbell

Mitch Hubbell

  • 140 Points 100 badge 2x thumb
Yes Pings work on the default VLAN
Photo of Henrique

Henrique, Employee

  • 10,302 Points 10k badge 2x thumb
I would create an ACL to count ICMP Replies and apply to both PC ports. That would help to confirm if both PC are replying the ICMP Requests.
Photo of Mitch Hubbell

Mitch Hubbell

  • 140 Points 100 badge 2x thumb
Interface: 10.193.150.50 --- 0xa  Internet Address      Physical Address      Type
  10.193.150.1          00-04-96-98-56-ea     dynamic

C:\WINDOWS\system32>arp -a 10.193.150.51

Interface: 10.193.150.50 --- 0xa
  Internet Address      Physical Address      Type
  10.193.150.51         f4-4d-30-69-f0-d1     dynamic

From the switch I cannot ping my PC's
Photo of Nick Yakimenko

Nick Yakimenko

  • 2,404 Points 2k badge 2x thumb
so this is a firewall issue now
vlan works properly at this time, also 10.193.150.1 should be pingable from both PCs
Photo of Mitch Hubbell

Mitch Hubbell

  • 140 Points 100 badge 2x thumb
Windows firewall is disabled on both PC's via Group Policy,  Yes 150.1 is pingable from both PC's
Photo of Nick Yakimenko

Nick Yakimenko

  • 2,404 Points 2k badge 2x thumb
well, it is not then.
You may manually enable ping respond from admin cmd:

netsh
firewall
set icmpsetting 8 ENABLE
Photo of Mitch Hubbell

Mitch Hubbell

  • 140 Points 100 badge 2x thumb
Wow, alright that worked.