2910al + Cisco3750G-TD16 = one-way ping of VLAN 1

[Alexi Lookin]

Hello there!

I configured LACP trunk between 2910al and Cisco3750G-TD16. The only problem is access to default VLAN 1 from 3750G. 

I ping 3750G from 2910al but cannot do the same from 3750G side

The parts of related config 

#2910al 

trunk 13-20 Trk60 LACP

ip routing
vlan 1
name "DEFAULT_VLAN"
ip address 192.168.111.16 255.255.255.0
tagged Trk60
exit
vlan 10
name "VLAN10"
ip address 192.168.201.16 255.255.255.0
tagged Trk60
exit

vlan 160
name "VLAN160"
untagged Trk60
ip address 192.168.160.16 255.255.255.0
exit

# 192.168.201.13 (vlan 10), \

# 192.168.111.13 (vlan   1)   /  is a core uplink switch connected to 2910al

# core switch has no direct connection to 3750E (via 2910al only)

ip route 0.0.0.0 0.0.0.0 192.168.201.13
ip route 192.168.111.0 255.255.255.0 192.168.111.13

ip route 192.168.111.12 255.255.255.255 192.168.160.12
ip route 192.168.144.12 255.255.255.255 192.168.160.12

#Cisco 3750G config

ip routing

vlan internal allocation policy ascending
vlan dot1q tag native

#L3 LACP trunk

interface Port-channel1
no switchport
ip address 192.168.160.12 255.255.255.0

interface GigabitEthernet1/0/1

no switchport
no ip address
channel-group 1 mode active
!
interface GigabitEthernet1/0/2
no switchport
no ip address
channel-group 1 mode active
!
interface GigabitEthernet1/0/3
no switchport
no ip address
channel-group 1 mode active
!
interface GigabitEthernet1/0/4
no switchport
no ip address
channel-group 1 mode active
!
interface GigabitEthernet1/0/5
no switchport
no ip address
channel-group 1 mode active
!
interface GigabitEthernet1/0/6
no switchport
no ip address
channel-group 1 mode active
!
interface GigabitEthernet1/0/7
no switchport
no ip address
channel-group 1 mode active
!
interface GigabitEthernet1/0/8
no switchport
no ip address
channel-group 1 mode active

!
interface Vlan1
ip address 192.168.111.12 255.255.255.0
ip accounting output-packets
!
interface Vlan144
ip address 192.168.144.12 255.255.255.0
!
interface Vlan160
no ip address
!
router rip
version 2
network 192.168.111.0
network 192.168.144.0
network 192.168.160.0

ip default-gateway 192.168.160.16
!
!
ip route 0.0.0.0 0.0.0.0 192.168.160.16

############################

LACP is safe and sound, both switches say everything is OK

sw12-3750G-TD16-1#sh etherchannel summary

Number of channel-groups in use: 1
Number of aggregators: 1

Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(RU) LACP Gi1/0/1(P) Gi1/0/2(P) Gi1/0/3(P)
Gi1/0/4(P) Gi1/0/5(P) Gi1/0/6(P)
Gi1/0/7(P) Gi1/0/8(P)

sw16-2910-blade-edge2# sh lacp

LACP

PORT LACP TRUNK PORT LACP LACP
NUMB ENABLED GROUP STATUS PARTNER STATUS
---- ------- ------- ------- ------- -------
13 Active Trk60 Up Yes Success
14 Active Trk60 Up Yes Success
15 Active Trk60 Up Yes Success
16 Active Trk60 Up Yes Success
17 Active Trk60 Up Yes Success
18 Active Trk60 Up Yes Success
19 Active Trk60 Up Yes Success
20 Active Trk60 Up Yes Success

######################################

pings from 2910al are nice, any VLAN adresses configured on 3750G are accessible:

sw16-2910-blade-edge2(config)# ping 192.168.160.12
192.168.160.12 is alive, time = 2 ms
sw16-2910-blade-edge2(config)# ping 192.168.144.12
192.168.144.12 is alive, time = 4 ms
sw16-2910-blade-edge2(config)# ping 192.168.111.12
192.168.111.12 is alive, time = 3 ms
sw16-2910-blade-edge2(config)#

pings from 3750G are also good, exept last one

# accessibility of 2910al vlan 160

sw12-3750G-TD16-1#ping 192.168.160.16

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.160.16, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/9/34 ms

#accessibility of 2910al vlan 10

sw12-3750G-TD16-1#ping 192.168.201.16

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.201.16, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/10/34 ms

#even core switch is accessible from 3750!
sw12-3750G-TD16-1#ping 192.168.201.13

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.201.13, timeout is 2 seconds:
!!!!!

#but vlan 1 on 2910al is not

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/8 ms
sw12-3750G-TD16-1#ping 192.168.111.16

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.111.16, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

######################################

1. If I configure vlan 160 on 2910al to 'tagged Trk60'  then interswitch link is broken - no pings. The possible reason is L3 trunking, so trk60 should be untagged to proper vlan

2. L3 trunk requires also ip address on Cisco 3750E

3. programming vlan 1 to 'untagged Trk60' also brokes link, since (port)trunk  may be untagged only in one vlan. 

4. setting vlan 1 to 'tagged Trk60' or 'no untagged Trk60' has no influence on pings to vlan 1.

How to achieve vlan 1 accessibility from 3750E ? I would need to create vlan 1 (192.168.111.0 network)  access ports on 3750G in future, so I eagerly want to manage this problem

[cenk sasmaztin]

please change 2910 config and  make test

trunk 13-20 Trk60 LACP

ip routing
vlan 1
name "DEFAULT_VLAN"
ip address 192.168.111.16 255.255.255.0
untagged Trk60
exit
vlan 10
name "VLAN10"
ip address 192.168.201.16 255.255.255.0
tagged Trk60
exit

vlan 160
name "VLAN160"
tagged Trk60
ip address 192.168.160.16 255.255.255.0
exit

[Alexi Lookin]

I had already tried that (pp.3-4). It has no effect. Well, I repeat that again.

sw16-2910-blade-edge2(config)# vlan 1
sw16-2910-blade-edge2(vlan-1)# untagged trk60
sw16-2910-blade-edge2(vlan-1)# vlan 160
sw16-2910-blade-edge2(vlan-160)# tagged trk60
sw16-2910-blade-edge2(vlan-160)# ping 192.168.160.12
Request timed out.
sw16-2910-blade-edge2(vlan-160)# ping 192.168.144.12
Request timed out.
sw16-2910-blade-edge2(vlan-160)# ping 192.168.111.12
Request timed out.
sw16-2910-blade-edge2(vlan-160)# vlan 1
sw16-2910-blade-edge2(vlan-1)# tagged trk60
sw16-2910-blade-edge2(vlan-1)# vlan 160
sw16-2910-blade-edge2(vlan-160)# untagged trk60
sw16-2910-blade-edge2(vlan-160)# ping 192.168.111.12
192.168.111.12 is alive, time = 5 ms
sw16-2910-blade-edge2(vlan-160)# ping 192.168.144.12
192.168.144.12 is alive, time = 3 ms
sw16-2910-blade-edge2(vlan-160)# ping 192.168.160.12
192.168.160.12 is alive, time = 2 ms
sw16-2910-blade-edge2(vlan-160)#

[cenk sasmaztin]

please send me

show  vlan print cisco switch  

[Alexi Lookin]

sw12-3750G-TD16-1#sh vlan

VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi1/0/9, Gi1/0/10, Gi1/0/11, Gi1/0/12, Gi1/0/13, Gi1/0/14, Gi1/0/15
144 VLAN0144 active Gi1/0/16
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
144 enet 100144 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0
1003 tr 101003 1500 - - - - - 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0
1005 trnet 101005 1500 - - - ibm - 0 0

Remote SPAN VLANs
------------------------------------------------------------------------------

Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------

[Alexi Lookin · Accepted solution]

Problem solved.

I added specific route on C3750G

ip route 192.168.111.16 255.255.255.255 192.168.160.16

And after that this network address sucessfully pings from Cisco switch.

111.0 network splitted between switches, so separate route is required