vlan configuration for routing unable to ping own subnet
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎10-29-2015 07:25 PM
Hi guys, First of all, I'm really new to this and have been stumbling through to figure out a nagging issue
We created 4 VLANs with corresponding Virtual Routers (as well as separate subnets) in our brand new environment (Users,Server, Lab,Phone). One of our VLANs ("User") is the only one currently utilized. It is on a 10.1.15.x subnet (part of a B5 stack) seems to be restricting certain computers from accessing the internet. Most of the other client computers (on same subnet) are able to access the network and internet, with the exception of a few. The VLANs were setup last weekend, and I believe it may be a configuration issue.
The affected clients receive IP via DHCP and are able to get IPs;
IP: 10.1.15.x
Subnet Mask: 255.255.255.0
Gateway: 10.1.15.254
but are unable to ping the internal VLAN gateway (10.1.15.254). They can ping any IP on the same subnet (and vice versa) but are unable to ping any other IP on other subnet (the unnafected computers on same subnet are able to ping other subnets just fine, and have no problems connecting to internet).
I suspect some sort of MAC blocking?? It happens no matter what active port i try them on.
Any assistance in troubleshooting is hugely appreciated. We have had no luck figuring it out.
We created 4 VLANs with corresponding Virtual Routers (as well as separate subnets) in our brand new environment (Users,Server, Lab,Phone). One of our VLANs ("User") is the only one currently utilized. It is on a 10.1.15.x subnet (part of a B5 stack) seems to be restricting certain computers from accessing the internet. Most of the other client computers (on same subnet) are able to access the network and internet, with the exception of a few. The VLANs were setup last weekend, and I believe it may be a configuration issue.
The affected clients receive IP via DHCP and are able to get IPs;
IP: 10.1.15.x
Subnet Mask: 255.255.255.0
Gateway: 10.1.15.254
but are unable to ping the internal VLAN gateway (10.1.15.254). They can ping any IP on the same subnet (and vice versa) but are unable to ping any other IP on other subnet (the unnafected computers on same subnet are able to ping other subnets just fine, and have no problems connecting to internet).
I suspect some sort of MAC blocking?? It happens no matter what active port i try them on.
Any assistance in troubleshooting is hugely appreciated. We have had no luck figuring it out.
12 REPLIES 12
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎10-29-2015 07:50 PM
Hi Drew, I sure can!
B5(su)->show vlan
VLAN: 1 NAME: DEFAULT VLAN
VLAN Type: Default
Egress Ports
tg.1.50, tg.2.50
Forbidden Egress Ports
None.
Untagged ports
tg.1.50, tg.2.50
VLAN: 5 NAME: Server
VLAN Type: Permanent
Egress Ports
None.
Forbidden Egress Ports
None.
Untagged ports
None.
VLAN: 7 NAME: iSCSI
VLAN Type: Permanent
Egress Ports
None.
Forbidden Egress Ports
None.
Untagged ports
None.
VLAN: 9 NAME: Voice
VLAN Type: Permanent
Egress Ports
tg.1.50, tg.2.50
Forbidden Egress Ports
None.
Untagged ports
None.
VLAN: 11 NAME: Finance
VLAN Type: Permanent
Egress Ports
None.
Forbidden Egress Ports
None.
Untagged ports
None.
VLAN: 12 NAME: MGMT-HR
VLAN Type: Permanent
Egress Ports
None.
Forbidden Egress Ports
None.
Untagged ports
None.
VLAN: 15 NAME: Users
VLAN Type: Permanent
Egress Ports
ge.1.7, ge.1.9, ge.1.23, ge.1.27, ge.1.31, tg.1.50, tg.2.50
Forbidden Egress Ports
None.
Untagged ports
ge.1.7, ge.1.9, ge.1.23, ge.1.27, ge.1.31
VLAN: 20 NAME: VPN
VLAN Type: Permanent
Egress Ports
None.
Forbidden Egress Ports
None.
Untagged ports
None.
VLAN: 25 NAME: Lab
VLAN Type: Permanent
Egress Ports
None.
Forbidden Egress Ports
None.
Untagged ports
None.
VLAN: 30 NAME: Testing
VLAN Type: Permanent
Egress Ports
None.
Forbidden Egress Ports
None.
Untagged ports
None.
B5(su)->show vlan
VLAN: 1 NAME: DEFAULT VLAN
VLAN Type: Default
Egress Ports
tg.1.50, tg.2.50
Forbidden Egress Ports
None.
Untagged ports
tg.1.50, tg.2.50
VLAN: 5 NAME: Server
VLAN Type: Permanent
Egress Ports
None.
Forbidden Egress Ports
None.
Untagged ports
None.
VLAN: 7 NAME: iSCSI
VLAN Type: Permanent
Egress Ports
None.
Forbidden Egress Ports
None.
Untagged ports
None.
VLAN: 9 NAME: Voice
VLAN Type: Permanent
Egress Ports
tg.1.50, tg.2.50
Forbidden Egress Ports
None.
Untagged ports
None.
VLAN: 11 NAME: Finance
VLAN Type: Permanent
Egress Ports
None.
Forbidden Egress Ports
None.
Untagged ports
None.
VLAN: 12 NAME: MGMT-HR
VLAN Type: Permanent
Egress Ports
None.
Forbidden Egress Ports
None.
Untagged ports
None.
VLAN: 15 NAME: Users
VLAN Type: Permanent
Egress Ports
ge.1.7, ge.1.9, ge.1.23, ge.1.27, ge.1.31, tg.1.50, tg.2.50
Forbidden Egress Ports
None.
Untagged ports
ge.1.7, ge.1.9, ge.1.23, ge.1.27, ge.1.31
VLAN: 20 NAME: VPN
VLAN Type: Permanent
Egress Ports
None.
Forbidden Egress Ports
None.
Untagged ports
None.
VLAN: 25 NAME: Lab
VLAN Type: Permanent
Egress Ports
None.
Forbidden Egress Ports
None.
Untagged ports
None.
VLAN: 30 NAME: Testing
VLAN Type: Permanent
Egress Ports
None.
Forbidden Egress Ports
None.
Untagged ports
None.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎10-29-2015 07:50 PM
Thanks, and welcome to The Hub!
I missed that you said this is part of the B-series. I only saw it was tagged as ExtremeXOS - I've re-tagged it EOS for you 🙂
One of our community members more familiar with the B-series will have to step in for me on this one.
I missed that you said this is part of the B-series. I only saw it was tagged as ExtremeXOS - I've re-tagged it EOS for you 🙂
One of our community members more familiar with the B-series will have to step in for me on this one.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎10-29-2015 07:44 PM
Can you share the output of
code:
with us?show vlan
