Inter vlan routing doesn't work as expected on 2930M-48G

[Tim23]

Hello everybody ,

it is a really simple test, i would routing between two Vlan's but i really don't know why doesn't work.

i have two clients : client 1 : 192.168.152.101 , 255.255.255.0 , GW : 192.168.152.1   ---> untagged to vlan 152

                                 Client 2 : 192.168.150.102 255.255.255.0 GW: 192.168.150.1    ---> untagged to vlan 150

Problem: NO routing between Vlan's 

Can you help me please ?   it's really important for me .   Thank you so much .

Config:

hostname "Aruba 2930M"
module 1 type jl321a
flexible-module A type JL081A
timesync ntp
ntp unicast
ntp server 192.168.34.254 iburst
ntp enable
no telnet-server
telnet-server listen data
time daylight-time-rule western-europe
time timezone 60
web-management ssl
web-management listen data
ip dns domain-name "asp.betoche.net"
ip dns server-address priority 1 192.168.34.254
ip ssh listen data
ip routing
snmp-server community "public"
snmp-server mib hpSwitchAuthMIB excluded
snmp-server listen data
snmp-server contact "XXX" location ""
oobm
disable
ip address dhcp-bootp
exit
vlan 1
name "Vlan1"
no untagged 21,23,33,35,37,39
untagged 1-20,22,24-32,34,36,38,40-48,A3-A4
tagged A1-A2
ip address 192.168.34.61 255.255.255.0
ipv6 enable
ipv6 address dhcp full
exit
vlan 150
name "VLAN150"
untagged 21,33,37
ip address 192.168.150.1 255.255.255.0
exit
vlan 152
name "VLAN152"
untagged 23,35,39
ip address 192.168.152.1 255.255.255.0
exit
no tftp server
tftp server listen data
no autorun
no dhcp config-file-update
no dhcp image-file-update
password manager
password operator

[parnassus]

Hello! given the configuration posted say you have Host A (192.168.150.2/24 DG 192.168.150.1 = VLAN 150 SVI address) connected on Port 21 (Untagged member of VLAN 150) and Host B (192.168.152.2/24 DG 192.168.152.1 = VLAN 152 SVI address) connected on Port 23 (Untagged member of VLAN 152)...then, once IP Routing is enabled on the Switch, ICMP Ping tests between those hosts must work...provided that no OS Firewall/Antivirus jumps in to block that type of traffic/destination/source...and no Host's custom route to peer Host is conflicting with your tests.

Check: Ping to respective SVI Address, Ping to peer VLAN's SVI Address and then Ping to destination Host. Repeat on other Host.

[Tim23]

thank you for your response .

Yes everything seems to be right and it should work , firewall and antivirus are disabled. 

the problem is i have no ROUTING. Host's are in their own Vlan's they have ping only to their own SVI address and host's that they are in same vlan.

Really confused . unfortunatly we must to run a project and have no time .

[parnassus]

Very strange. Are you able to post (sanitized) outputs of show ip and show ip routing commands?

[Tim23]

Show IP:

Internet (IP) Service

IP Routing : Enabled

Default TTL : 64
Arp Age : 20
Domain Suffix : asp.proheris.de
DNS server : 192.168.34.254

| Proxy ARP
VLAN | IP Config IP Address Subnet Mask Std Local
-------------------- + ---------- --------------- --------------- ----------
Backup DO | Manual 192.168.34.61 255.255.255.0 No No
vlan-150 | Manual 192.168.150.1 255.255.255.0 No No
vlan-152 | Manual 192.168.152.1 255.255.255.0 No No

Show IP route :

Destination Gateway VLAN Type Sub-Type Metric Dist.
------------------ --------------- ---- --------- ---------- ---------- -----
127.0.0.0/8 reject static 0 0
127.0.0.1/32 lo0 connected 1 0
192.168.34.0/24 Backup DO 1 connected 1 0
192.168.150.0/24 vlan-150 150 connected 1 0
192.168.152.0/24 vlan-152 152 connected 1 0

[parnassus]

Those portions of VLAN table and Routing Table look good:

Internet (IP) Service

IP Routing : Enabled

Default TTL   : 64
Arp Age       : 20
Domain Suffix : 
DNS server    : 192.168.34.254

					 |                                            Proxy ARP
VLAN				 | IP Config  IP Address      Subnet Mask     Std Local
-------------------- + ---------- --------------- --------------- ----------
Backup DO			 | Manual     192.168.34.61   255.255.255.0    No   No
vlan-150			 | Manual     192.168.150.1   255.255.255.0    No   No
vlan-152			 | Manual     192.168.152.1   255.255.255.0    No   No

Destination 		Gateway			VLAN	Type 		Sub-Type	Metric		Dist.
------------------	--------------- ----	---------	----------	----------	-----
127.0.0.0/8			reject					static					0			0
127.0.0.1/32		lo0						connected				1			0
192.168.34.0/24		Backup DO		1		connected				1			0
192.168.150.0/24	vlan-150		150		connected				1			0
192.168.152.0/24	vlan-152		152		connected				1			0

Does show logging reports any warning/error? do you have ACL in place preventing routing between such VLANs? Have you tried to disable/enable the ip routing? What is the running software version?

[Tim23]

no, not yet. i only want at the first have a routing between Vlan's and then ather things . I've also updated the software .

Software revision : WC.16.07.0006 Base MAC Addr : 3821c7-513bc0
ROM Version : WC.17.02.0006 Serial Number : Info Erased

[parnassus]

OK. I suggest you to start with updating your Aruba 2930M to latest WC.16.10.0002 of WC.16.10 software branch instead of staying on WC.16.07 software branch.

I'm pretty much sure there could be something weird on your hosts or on the switch (write memory and then reboot, then recheck status of VLAN, IP and IP Routing).

[Tim23]

thank you so much . I did and its works. thanks again 

[parnassus · Accepted solution]

Really? that's magic, isn't it?

Please mark it solved and provide some kudos (if you want). Thanks.