Catalyst 4000

[vince62s]

When you have 2 VLANS on a catalyst 4000 acting as a VTP server for other switches, do we need to define more than one IP address.

we have Vlan 1 inet 10.0.0.21 netmask 255.255.252.0

we have vlan 2 defined and hosts connected to vlan 2 with another subnet.

hosts between 4000/vlan 2 and other switches with Vlan 2 cannot communicate.

Do I need to set up another ip address on the 4000 for the Vlan 2 subnet??????

help!

thanks

 

[baddos]

No... The IP addresses on a layer2 switch is for management only. In fact, in can have no IP addresses at all and it will work fine.

Post a show vtp status and a show vlan on your other switch.

 

[vince62s]

thanks baddos


here is the configuration of the 3548 connected to the 4003
two ports 1 and 2 of 3548 connected to 43 and 44 of the 4003.

port 44 and 46 (VLAN 3) of the 3548 cannot communicate with ports 9 to 12 of the 4003.

thanks

*********************************************************
CONFIGURATION 3548
*********************************************************
!
version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname CP2-2
!
enable secret 5 $1$6VRU$E9TNWjFN4y9rxdhmYdCxR0
!
!
!
!
!
!
ip subnet-zero
no ip domain-lookup
!
!
!
interface FastEthernet0/1
description Trunk vers 4003
duplex full
speed 100
port group 1
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/2
description Trunk vers 4003
duplex full
speed 100
port group 1
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/3
spanning-tree portfast
!
SAME FROM 0/3 TO 0/42
!
interface FastEthernet0/42
spanning-tree portfast
!
interface FastEthernet0/43
spanning-tree portfast
!
interface FastEthernet0/44
duplex half
speed 100
switchport access vlan 3
spanning-tree portfast
!
interface FastEthernet0/45
spanning-tree portfast
!
interface FastEthernet0/46
duplex half
speed 10
port monitor FastEthernet0/2
switchport access vlan 3
spanning-tree portfast
!
interface FastEthernet0/47
spanning-tree portfast
!
interface FastEthernet0/48
description Backup vers 3548-IP32
duplex full
speed 100
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface VLAN1
ip address 10.0.0.33 255.255.252.0
no ip directed-broadcast
no ip route-cache
!
snmp-server engineID local 000000090200000216FD6040
snmp-server community private RW
snmp-server community public RO
snmp-server chassis-id 0x17
!
line con 0
transport input none
stopbits 1
line vty 0 4
password 7 045902140720474B0014
login
line vty 5 15
password 7 01110F16530A0D0A2841
login
!
end

*****************************************************************
CONFIGURATION 4003
*********************************************************************

#system
set system name CC2-1
!
#frame distribution method
set port channel all distribution mac both
!
#vtp
set vtp domain NAME
set vtp v2 enable
set vtp pruning enable
set vlan 1 name default type ethernet mtu 1500 said 100001 state active
set vlan 2 name Internet type ethernet mtu 1500 said 100002 state active
set vlan 3 name DMZ type ethernet mtu 1500 said 100003 state active
set vlan 4 name mobi type ethernet mtu 1500 said 100004 state active
set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active
set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state activ
e bridge 0x0 stp ieee
set vlan 1005 name trbrf-default type trbrf mtu 4472 said 101005 state active br
idge 0x0 stp ibm
set vlan 1003 name trcrf-default type trcrf mtu 4472 said 101003 state active pa
rent 0 ring 0x0 mode srb aremaxhop 0 stemaxhop 0 backupcrf off
!
#ip
set interface sc0 1 10.0.0.21/255.255.252.0 10.0.3.255

set interface sl0 down
set interface me1 down
!
#spantree
#vlan 1
set spantree priority 2000 1
!
#syslog
set logging level cops 2 default
!
#set boot command
set boot config-register 0x2
set boot system flash bootflash:cat4000.5-5-3.bin
!
#port channel
set port channel 2/1-4 1
set port channel 2/5-8 2
set port channel 2/9-12 3
set port channel 2/13-16 4
set port channel 2/17-20 5
set port channel 2/21-24 6
set port channel 2/25-28 7
set port channel 2/29-32 8
set port channel 2/45-48 13
set port channel 2/41-42 14
set port channel 2/43-44 15
set port channel 2/39 17
set port channel 2/40 18
set port channel 2/35-36 144
set port channel 2/37-38 146
set port channel 2/33-34 160
!
#http configuration
set ip http server enable
!
#module 1 : 0-port Switching Supervisor
!
#module 2 : 48-port 10/100BaseTx Ethernet
set vlan 2 2/1-7
set vlan 3 2/9-12
set vlan 4 2/22-24
set port auxiliaryvlan 2/17 2
set port speed 2/1-2,2/16,2/19-30 10
set port speed 2/3,2/5-7,2/9-15,2/17-18,2/33-48 100
set port duplex 2/1,2/3,2/5-6,2/10-14,2/33-48 full
set port name 2/1 Internet UUNET
set port name 2/2 Internet Colt
set port name 2/5 PIX1 Internet
set port name 2/6 PIX2 Internet
set port name 2/10 Free DMZ
set port name 2/11 PIX1 DMZ
set port name 2/12 PIX2 DMZ
set port name 2/13 PIX1 Intranet
set port name 2/14 PIX2 Intranet
set port name 2/33 Trunk vers 10.0.0.35
set port name 2/34 Trunk vers 10.0.0.35
set port name 2/35 Trunk vers 10.0.0.34
set port name 2/36 Trunk vers 10.0.0.34
set port name 2/37 Trunk vers 10.0.0.37
set port name 2/38 Trunk vers 10.0.0.37
set port name 2/39 Trunk vers 10.0.0.31
set port name 2/40 Trunk vers 10.0.0.31
set port name 2/41 Trunk 3548-2eme/1
set port name 2/42 Trunk 3548-2eme/1
set port name 2/43 Trunk 3548-2eme/2
set port name 2/44 Trunk 3548-2eme/2
set port name 2/45 Trunk 4003 1er
set port name 2/46 Trunk 4003 1er
set port name 2/47 Trunk 4003 1er
set port name 2/48 Trunk 4003 1er
set trunk 2/1 off dot1q 1-1005
set trunk 2/2 off dot1q 1-1005
set trunk 2/3 off dot1q 1-1005
set trunk 2/4 off dot1q 1-1005
set trunk 2/5 off dot1q 1-1005
set trunk 2/6 off dot1q 1-1005
set trunk 2/7 off dot1q 1-1005
set trunk 2/8 off dot1q 1-1005
set trunk 2/9 off dot1q 1-1005
set trunk 2/10 off dot1q 1-1005
set trunk 2/11 off dot1q 1-1005
set trunk 2/12 off dot1q 1-1005
set trunk 2/13 off dot1q 1-1005
set trunk 2/14 off dot1q 1-1005
set trunk 2/15 off dot1q 1-1005
set trunk 2/16 off dot1q 1-1005
set trunk 2/17 off dot1q 1-1005
set trunk 2/18 off dot1q 1-1005
set trunk 2/19 off dot1q 1-1005
set trunk 2/20 off dot1q 1-1005
set trunk 2/21 off dot1q 1-1005
set trunk 2/22 off dot1q 1-1005
set trunk 2/23 off dot1q 1-1005
set trunk 2/24 off dot1q 1-1005
set trunk 2/25 off dot1q 1-1005
set trunk 2/26 off dot1q 1-1005
set trunk 2/27 off dot1q 1-1005
set trunk 2/28 off dot1q 1-1005
set trunk 2/29 off dot1q 1-1005
set trunk 2/30 off dot1q 1-1005
set trunk 2/31 off dot1q 1-1005
set trunk 2/32 off dot1q 1-1005
set trunk 2/33 on dot1q 1-1005
set trunk 2/34 on dot1q 1-1005
set trunk 2/35 on dot1q 1-1005
set trunk 2/36 on dot1q 1-1005
set trunk 2/37 on dot1q 1-1005
set trunk 2/38 on dot1q 1-1005
set trunk 2/39 on dot1q 1-1005
set trunk 2/40 on dot1q 1-1005
set trunk 2/41 on dot1q 1-1005
set trunk 2/42 on dot1q 1-1005
set trunk 2/43 on dot1q 1-1005
set trunk 2/44 on dot1q 1-1005
set trunk 2/45 on dot1q 1-1005
set trunk 2/46 on dot1q 1-1005
set trunk 2/47 on dot1q 1-1005
set trunk 2/48 on dot1q 1-1005
set spantree portfast 2/1-4,2/7-8,2/15-32,2/39 enable
set port channel 2/33-36,2/39-48 mode on
set port channel 2/1-32,2/37-38 mode off
!
#module 3 empty
end
CC2-1> (enable)

 

[vipergg]

If you are asking how make vlan 1 and 2 communicate the answer is you need a router unless you have a layer3 card installed in your Cat 4000 , the newer 4506 you can get a supII plus card which will give you basic rip function and you can talk between two different vlans , if you have a plain layer 2 4000 with a SupII card then you will need a router to go between the vlans .

 

[vipergg]

Did not understand this comment "we have vlan 2 defined and hosts connected to vlan 2 with another subnet". Just because you have trunked vlan2 to a different switches all users must be in the same address range for them to communicate . They will not be able to talk unless their address range is in the same subnet .

 

[vince62s]

thanks vipergg but it's not even to that point..

two hosts belonging to the same vlan (3) but hooked to a different switch , 1 to the 4003 and the other to the 3548 cannot even communicate. same subnet, same gateway.
cant understand why.

 

[vipergg]

Simple question , on the 3548 did you activate the vlan ?
conf t
vlan 3
state active

 

[vince62s]

yes it is.

actually the 4003 is a VTP server and all my 3548 are VTP clients. replication works fine.

I just cant communicate for example between port 44 of the 3548 and 11 of the 4003.

cant find waht I miss