CiscoForums.it

Inviato: **mer 12 mar , 2008 11:53 am**

Salve,
ho problema su un Catalyst 3750 -12.2(25)SEE2-IP-BASE sul routing
tra le VLAN: in pratica non riesco ad arrivare tramite la porta FastEthernet1/0/1 verso il
router (192.168.1.1) da un qualsiasi host nelle 3 VLAN, mentra direttamente dallo switch ci riesco.
Premetto che le macchine nelle VLAN hanno come gateway l'indirizzo
della relativa interfaccia VLAN del Catalyst, infatti riesco a pingare host
di altre subnet, le interfacce VLAN del Catalyst ed anche la porta FastEthernet1/0/1 collegata al gateway.

Ecco la mia configurazione.

Codice: Seleziona tutto

version 12.2
no service pad
service timestamps debug uptime
service timestamps log datetime
service password-encryption
!
hostname SW1
!
enable secret **********************
enable password **********************
!
username admin privilege 15 password **********************
aaa new-model
aaa authentication login default local
aaa authorization exec default local 
!
aaa session-id common
clock timezone CET 1
clock summer-time CET recurring last Sun Mar 2:00 last Sun Oct 3:00
ip subnet-zero
ip routing
no ip domain-lookup 
! 
vlan internal allocation policy ascending
!
vlan 2
 name LOCAL1
!
vlan 3
 name LOCAL2
!
vlan 4
 name LOCAL3
!

!
!
!
no file verify auto
spanning-tree mode pvst 
no spanning-tree optimize bpdu transmission 
spanning-tree extend system-id 
!

!
interface FastEthernet1/0/1
 description To-->Router
 no switchport 
 ip address 192.168.1.2 255.255.255.0 
 no shutdown
!
interface FastEthernet1/0/2
 switchport access vlan 2
 switchport mode access

!
interface FastEthernet1/0/3
 switchport access vlan 2
 switchport mode access

 
 
!
interface FastEthernet1/0/4
 switchport access vlan 2
 switchport mode access

 
 
!
interface FastEthernet1/0/5
 switchport access vlan 2
 switchport mode access

 
 
!
interface FastEthernet1/0/6
 switchport access vlan 2
 switchport mode access

 
 
!
interface FastEthernet1/0/7
 switchport access vlan 2
 switchport mode access

 
 
!
interface FastEthernet1/0/8
 switchport access vlan 2
 switchport mode access

 
 
!
interface FastEthernet1/0/9
 switchport access vlan 3
 switchport mode access

 
 
!
interface FastEthernet1/0/10
 switchport access vlan 3
 switchport mode access

 
 
!
interface FastEthernet1/0/11
 switchport access vlan 3
 switchport mode access

 
 
!
interface FastEthernet1/0/12
 switchport access vlan 3
 switchport mode access

 
 
!
interface FastEthernet1/0/13
 switchport access vlan 3
 switchport mode access

 
 
!
interface FastEthernet1/0/14
 switchport access vlan 3
 switchport mode access

 
 
!
interface FastEthernet1/0/15
 switchport access vlan 3
 switchport mode access

 
 
!
interface FastEthernet1/0/16
 switchport access vlan 3
 switchport mode access

 
 
!
interface FastEthernet1/0/17
 switchport access vlan 4
 switchport mode access

 
 
!
interface FastEthernet1/0/18
 switchport access vlan 4
 switchport mode access

 
 
!
interface FastEthernet1/0/19
 switchport access vlan 4
 switchport mode access

 
 
!
interface FastEthernet1/0/20
 switchport access vlan 4
 switchport mode access

 
 
!
interface FastEthernet1/0/21
 switchport access vlan 4
 switchport mode access

 
 
!
interface FastEthernet1/0/22
 switchport access vlan 4
 switchport mode access

 
 
!
interface FastEthernet1/0/23
 switchport access vlan 4
 switchport mode access

 
 
!
interface FastEthernet1/0/24
 switchport access vlan 4
 switchport mode access

 
 
!
interface GigabitEthernet1/0/1
!
interface GigabitEthernet1/0/2
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan2
 description LOCAL1
 ip address 10.0.1.253 255.255.255.0
!
interface Vlan3
 description LOCAL2
 ip address 10.0.2.253 255.255.255.0
!
interface Vlan4
 description LOCAL3
 ip address 10.0.3.253 255.255.255.0
!

ip classless 
ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip http server
ip http authentication local
!
radius-server source-ports 1645-1646
!
control-plane
!

line con 0
 exec-timeout 0 0
line vty 0 4
 password **********************
line vty 5 15
 password **********************
!
ntp clock-period 36028916
ntp server 193.204.114.232 key 0 prefer
end

mentre questo è la tebella di routing:

Codice: Seleziona tutto

     10.0.0.0/24 is subnetted, 3 subnets
C       10.0.2.0 is directly connected, Vlan3
C       10.0.3.0 is directly connected, Vlan4
C       10.0.1.0 is directly connected, Vlan2
C    192.168.1.0/24 is directly connected, FastEthernet1/0/1
S*   0.0.0.0/0 [1/0] via 192.168.1.1

Grazie
Bittner

Inviato: **gio 13 mar , 2008 12:14 am**

ciao,

senti ma il router in questione (il 192.168.1.1) lo sa che le tre reti 10 (10.0.1.0 - 10.0.2.0 - 10.0.3.0) si trovano dietro la FastEthernet1/0/1 del 3750 con ip 192.168.1.2 ???

controlla la tabella di routing del router e facci sapere!!

ciaoooo

Inviato: **gio 13 mar , 2008 4:13 pm**

Grazie Hashashin,
in effetti nel router non ho caricato il routing relativo alle Vlan,
in quanto non posso entrarci. Ho visto che sullo switch in questione
non è possibile utilizzare il nat. Come potrei ovviare lavorando solo sulla
configurazione del Catalyst? Ho bisogno per forza di interporre un ulteriore
router? Oppure devo riportare le subnet vlan in un unica subnet (quella del
router)?

Grazie di tutto.

CiscoForums.it

Problema routing VLAN su 3750

Problema routing VLAN su 3750