Answer the question
In order to leave comments, you need to log in
Cisco SG300: Why does ping fail between vlans?
Cisco SG300 in L3 mode, vlans are up, ips are assigned, dhcp relay is installed and a dhcp server is up under win2012 with several pools. DHCP does not want to issue IPs in any of the vlans, except for its own. Moreover, it does not ping any vlan except its own, although it itself (and its entire subnet allocated for servers) is pinged from everywhere. show ip route shows all vlans as direct connected.
PS: When I assigned ports to vlans, I set them to access for the corresponding vlans (vlans start immediately on the SG300, unmanaged switches go further). Maybe there are some pitfalls here?
Thanks in advance.
Answer the question
In order to leave comments, you need to log in
In general, the problem turned out to be in a complex of reasons:
1) The built-in firewall (Windows Firewall) blocked ICMP requests;
2) DHCP-relay on Small Business - Tsiska should be enabled not only globally, but also for each vlan, it seems;
3) By default, WDS listens on DHCP ports and responds to requests with its data. Disabling the service solved the problem (if anything, in its settings there are checkboxes "do not listen on DHCP ports");
4) In the settings of the test client (a laptop with 8.1, the network from which was poked into different vlans), SSDP was disabled.
Thank you all for the provided answers. Next time I will take a closer look at the configs of the newly installed Windows.
I suggest starting a ping from the router to the server you are interested in. Then see if the corresponding entries are formed in the ARP and MAC tables. In the case of the Cisco IOS CLI, this can be done like this
ping 192.168.0.2
show arp
show mac address-table
I recommend that you completely abandon the DHCP server on Windows - the server itself can distribute addresses ..... well, let it distribute it.
And in your case, look at the dhcp helper documentation - most likely you will have to configure the helper.
ps For the future... if you ask questions about ciscos - immediately attach the configs, it's hard to guess what you have there.
Shouldn't you say "no switchport" and assign an IP to the port. Actually here is an article for you: linkmeup.ru/blog/14.html
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question