cancel
Showing results for 
Search instead for 
Did you mean: 

intra vlan routing issue. Can Ping but nothing else between vlans

intra vlan routing issue. Can Ping but nothing else between vlans

aaroncirilo
New Contributor II

I have 3 vlans on a x440. The default vlan 1 can ping vlan 10 VoIP phones. But I can't open a web interface from vlan 1. Across the vti tunnel I can. I can do a trace route and it hits the local inside gateway then sends it back to the switch then to the phone. It's almost like TCP isn't working between vlans. 

I can include whatever config is necessary. I've attached a diagram. 

4 REPLIES 4

Robert09
New Contributor

You can double-check the VLAN configuration on the x440 switch to ensure that all three VLANs (default VLAN 1, VLAN 10 for VoIP phones, and the VLAN used for the VTI tunnel) are correctly configured with the appropriate IP addresses and subnet masks.

I think it probably is some configuration issue. I'll post my vlan config on the X440.

I am not tagging anything on the VTI tunnel. I'm just using default routes pointing to the inside address of the ASA that is the end point of the vti tunnel. I can reach the VoIP on our local switch from the other side of the VTI tunnel so i know they are reachable from a web browser. 

* X440G2-48p-10G4.1 # sho confi | in ipforw
enable ipforwarding vlan Default
enable ipforwarding vlan VLAN_0010
enable ipforwarding vlan VLAN_0025


configure bootprelay add 192.168.1.10 vr VR-Default
enable bootprelay ipv4 vr VR-Default
configure bootprelay vlan Default add 192.168.1.10
configure bootprelay vlan VLAN_0010 add 192.168.1.10
configure bootprelay vlan VLAN_0025 add 192.168.1.10

KlausD
New Contributor II

Hello,

Do you have ip forwarding enabled on your VLANs?

Klaus

aaroncirilo
New Contributor II

* X440G2-48p-10G4.1 # sho confi | in ipforw
enable ipforwarding vlan Default
enable ipforwarding vlan VLAN_0010
enable ipforwarding vlan VLAN_0025

 

i do. Thanks. 

GTM-P2G8KFN