E
E
Evgeny Ferapontov2014-03-28 08:46:03
Computer networks
Evgeny Ferapontov, 2014-03-28 08:46:03

Cisco SG300: Why does ping fail between vlans?

Cisco SG300 in L3 mode, vlans are up, ips are assigned, dhcp relay is installed and a dhcp server is up under win2012 with several pools. DHCP does not want to issue IPs in any of the vlans, except for its own. Moreover, it does not ping any vlan except its own, although it itself (and its entire subnet allocated for servers) is pinged from everywhere. show ip route shows all vlans as direct connected.
PS: When I assigned ports to vlans, I set them to access for the corresponding vlans (vlans start immediately on the SG300, unmanaged switches go further). Maybe there are some pitfalls here?
Thanks in advance.

Answer the question

In order to leave comments, you need to log in

7 answer(s)
E
Evgeny Ferapontov, 2014-03-31
@e1ferapontov

In general, the problem turned out to be in a complex of reasons:
1) The built-in firewall (Windows Firewall) blocked ICMP requests;
2) DHCP-relay on Small Business - Tsiska should be enabled not only globally, but also for each vlan, it seems;
3) By default, WDS listens on DHCP ports and responds to requests with its data. Disabling the service solved the problem (if anything, in its settings there are checkboxes "do not listen on DHCP ports");
4) In the settings of the test client (a laptop with 8.1, the network from which was poked into different vlans), SSDP was disabled.
Thank you all for the provided answers. Next time I will take a closer look at the configs of the newly installed Windows.

T
throughtheether, 2014-03-31
@throughtheether

I suggest starting a ping from the router to the server you are interested in. Then see if the corresponding entries are formed in the ARP and MAC tables. In the case of the Cisco IOS CLI, this can be done like this

ping 192.168.0.2
show arp
show mac address-table

In your case, the syntax may be slightly different.
I generally believe that the lack of a response to an ICMP Echo-request does not necessarily imply a routing problem. As far as I know, in some cases (Windows OS) the built-in firewall (firewall) forbids incoming pings.

V
Vilos, 2014-03-28
@Vilos

I recommend that you completely abandon the DHCP server on Windows - the server itself can distribute addresses ..... well, let it distribute it.
And in your case, look at the dhcp helper documentation - most likely you will have to configure the helper.
ps For the future... if you ask questions about ciscos - immediately attach the configs, it's hard to guess what you have there.

V
Vilos, 2014-03-28
@Vilos

On the switch, the result of the sh vlan command is in the studio!

V
Vilos, 2014-03-28
@Vilos

What port is the DHCP server on?

J
Jan, 2014-03-28
@Buchachalo

Enable relay interfaces.
int vl 103
ip dh rel en

A
Alexander Karabanov, 2014-03-28
@karabanov

Shouldn't you say "no switchport" and assign an IP to the port. Actually here is an article for you: linkmeup.ru/blog/14.html

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question