Saturday, December 22, 2018

[ Cisco 2960G Switch ] - Static route between vlan is not working

Hello,

We have this 2960G switch that I am trying to get up and running, it's a gigabit switch with a weird config. It is a L3 switch, but is very different from many other L3 switches. I am creating several VLANS on this switch, I want ports 9-18 to be on one VLAN just to test. I assigned it the subnet 172.31.200.0/24. However, when trying to add a static route from this vlan doing this command:

ip route 172.31.200.0 255.255.255.0 10.0.0.1

The route doesn't show up in the routing table, and it inevitably fails to ping anything outside of that subnet. The default gateway on the switch is 10.0.0.1, which is the IP of the router interface connected on port 1. I figure it's doing this because it cannot reach 10.0.0.1 for whatever reason, not sure why.

I don't want to spend too much time on such an easy task. Assistance por favor

!

! Last configuration change at 00:27:21 UTC Mon Mar 1 1993 by admin

!

version 12.2

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

!

hostname 2960G

!

boot-start-marker

boot-end-marker

!

enable secret 5 $1$.ebn$VOBRwQlgDRCc.7HPnaBXW0

!

username admin privilege 15 secret 5 $1$9YUi$dUxXa7ncApMbI3uaHSr0y/

username root privilege 15 password 7 0519090035

username oswaldoadmin password 7 00071A1507544B

aaa new-model

!

!

aaa authentication login default group radius local

!

!

!

!

!

aaa session-id common

system mtu routing 1500

ip routing

ip dhcp excluded-address 10.0.1.0 10.0.1.150

ip dhcp excluded-address 10.0.1.251 10.0.1.255

!

!

no ip domain-lookup

ip name-server 8.8.8.8

ip name-server 4.2.2.2

ip name-server 10.0.0.1

!

!

crypto pki trustpoint TP-self-signed-3245150976

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-3245150976

revocation-check none

rsakeypair TP-self-signed-3245150976

!

!

crypto pki certificate chain TP-self-signed-3245150976

certificate self-signed 01

3082023D 308201A6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030

31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274

69666963 6174652D 33323435 31353039 3736301E 170D3933 30333031 30303032

31345A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649

4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 32343531

35303937 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281

8100BF40 47F624CB 9B2F6CD7 9DFB2C6B 48AFB101 725B606B B18E24D4 8FD95BFA

DDC671F9 7182C0D0 1A1111D9 98919C1D 4307C30D 92194AE3 19D37499 6093E6E0

AD89CF58 6752896C AE666F92 4511D1A9 AD9E526A 6549A282 D383EC57 6C39B396

B084A048 B41B5BAE EDED07BA 6C5EA46B F926C713 7A0A4D2B BDE541BC 70628608

82DD0203 010001A3 65306330 0F060355 1D130101 FF040530 030101FF 30100603

551D1104 09300782 05323936 3047301F 0603551D 23041830 168014FA 2DA8651B

C53F740D 1756C12E 5D52DAE8 6324F530 1D060355 1D0E0416 0414FA2D A8651BC5

3F740D17 56C12E5D 52DAE863 24F5300D 06092A86 4886F70D 01010405 00038181

005B4C9F E13DE8AA A591B107 0F16CF35 3A1B9A8A A02DDC8E 8CD06942 EE733E07

50D06F61 13169941 D74FE56D 1C0D2093 A00BE1C6 A99E08B8 FB6D1A3A D02A5C37

6D539C38 6D99C1C7 5DFDEFD4 33A61158 FE27C9A9 817066FF D391B1D5 ED17333D

4B9224EB 269A6497 A43E3CCC B0BFE691 4383651D 11C2A2AE C16ABABA FF9BEDD2 E2

quit 

!

!

!

spanning-tree mode pvst

spanning-tree portfast bpduguard default

spanning-tree extend system-id

!

vlan internal allocation policy ascending

!

ip ssh version 2

!

!

!

!

!

interface Loopback1

ip address 1.1.1.1 255.255.255.255

!

interface GigabitEthernet0/1

switchport mode trunk

switchport port-security

ip dhcp snooping trust

!

interface GigabitEthernet0/2

switchport mode trunk

switchport port-security mac-address sticky

spanning-tree portfast

!

interface GigabitEthernet0/3

switchport mode trunk

!

interface GigabitEthernet0/4

switchport mode trunk

!

interface GigabitEthernet0/5

switchport mode trunk

!

interface GigabitEthernet0/6

switchport mode trunk

!

interface GigabitEthernet0/7

switchport mode trunk

shutdown

!

interface GigabitEthernet0/8

switchport mode trunk

!

interface GigabitEthernet0/9

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/10

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/11

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/12

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/13

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/14

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/15

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/16

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/17

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/18

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/19

!

interface GigabitEthernet0/20

!

interface GigabitEthernet0/21

!

interface GigabitEthernet0/22

!

interface GigabitEthernet0/23

!

interface GigabitEthernet0/24

switchport access vlan 999

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/25

switchport mode access

switchport port-security

spanning-tree portfast

spanning-tree bpduguard enable

ip dhcp snooping trust

!

interface GigabitEthernet0/26

switchport mode access

switchport port-security

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/27

switchport mode access

switchport port-security

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/28

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/29

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/30

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/31

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/32

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/33

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/34

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/35

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/36

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/37

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/38

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/39

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/40

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/41

!

interface GigabitEthernet0/42

!

interface GigabitEthernet0/43

!

interface GigabitEthernet0/44

!

interface GigabitEthernet0/45

!

interface GigabitEthernet0/46

!

interface GigabitEthernet0/47

!

interface GigabitEthernet0/48

!

interface Vlan1

ip address 10.0.0.3 255.255.255.0

!

interface Vlan10

no ip address

!

interface Vlan99

no ip address

!

interface Vlan100

ip address 172.31.200.1 255.255.255.0

!

interface Vlan499

no ip address

!

interface Vlan999

description MAIN VLAN

ip address 10.0.1.1 255.255.255.0

!

interface Vlan1000

description ROUTER

no ip address

!

ip default-gateway 10.0.0.1

ip http server

ip http authentication local

ip http secure-server

ip route profile

ip route 172.31.200.0 255.255.255.0 10.0.0.1

ip route 172.31.200.0 255.255.255.0 Vlan1

logging esm config

radius-server host 10.0.0.254 test username ofernandez key 7 00071A1507544B

radius-server host 10.0.0.3

radius-server key 7 045802150C2E

!

radius server RADIUS

key 7 060506324F41



No comments:

Post a Comment