Router on a stick config cannot ping

[xskasmithx]

Hi Inter Webers,

I am greatly in need of your assistance and would be greatly for any help. I am in the process of setting up a voice lab and I am having issues with my router on a stick setup. It seems I cannot ping the hosts.

PCs:

192.168.15.4 ping 192.168.77.2

request timed out...

I can ping the 192.168.X.1 and 192.168.X.254 for all the subnets.

SW Config:

_________________________________________________________
Current configuration : 3514 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Switch
!
boot-start-marker
boot-end-marker
!
enable password password@
!
!
!
no aaa new-model
system mtu routing 1500
!
!
!
!
crypto pki trustpoint TP-self-signed-2546737920
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2546737920
revocation-check none
rsakeypair TP-self-signed-2546737920
!
!
crypto pki certificate chain TP-self-signed-2546737920
certificate self-signed 01
3082023F 308201A8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32353436 37333739 3230301E 170D3933 30333031 30303031
30325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 35343637
33373932 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
81009BB9 F550144E 428E4152 49B60749 6C510DEC 77C83AE8 50503375 7819E677
A3A7B237 15815FC6 F1CC7BB4 14D99CE6 F9EA49F1 08A8721D 5666A583 5D8E53B7
0AB19360 C4BEFBBE B7A02467 104A4C86 F5F9AFA6 C8912289 B5A7F54E ED1B7A32
53313CCA F39B056A 2D0B6D21 4FDAA85A EDF9D491 1E951349 1C3995DC 22621AD3
6EA30203 010001A3 67306530 0F060355 1D130101 FF040530 030101FF 30120603
551D1104 0B300982 07537769 7463682E 301F0603 551D2304 18301680 1417E235
6FFE5431 57D71B80 FD65DF22 959F37FC 01301D06 03551D0E 04160414 17E2356F
FE543157 D71B80FD 65DF2295 9F37FC01 300D0609 2A864886 F70D0101 04050003
8181001F 07D5ACCC 0BE459B6 9055F345 3E35BF59 F1E2C3BA AEB6876F 2C6B6195
FCF4B049 BAE67D56 C0E42AC7 1014A52C 5034D29D 3070F444 B8DFCBD3 25AEB49D
8983A0C2 39A1A605 50EBBF11 5B1FF5F9 DC47EADE C7467863 B7852AAC 719C9301
0A1BA054 152B9F7F 81A9DA15 E25724F5 5E68273D 59BB17F9 77F3B143 45258A83 25FBF8
quit
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
interface FastEthernet0/1
switchport access vlan 15
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/2
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 77
switchport mode access
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
switchport access vlan 77
spanning-tree portfast
!
interface FastEthernet0/24
description TRUNK-to-ROUTER
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree portfast trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
!
interface Vlan15
ip address 192.168.15.254 255.255.255.0
!
interface Vlan20
ip address 192.168.20.254 255.255.255.0
!
interface Vlan77
ip address 192.168.77.254 255.255.255.0
!
ip default-gateway 192.168.20.1
ip classless
ip http server
ip http secure-server
!
!
!
line con 0
line vty 0 4
password password@
login
line vty 5
password password@
login
line vty 6 15
login
!
end

_________________________________________________________

Router


Building configuration...

Current configuration : 1427 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable password password@
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip dhcp pool VLAN15_VOICE
network 192.168.15.0 255.255.255.0
default-router 192.168.20.1
!
ip dhcp pool VLAN20_DATA
network 192.168.20.0 255.255.255.0
default-router 192.168.20.1
!
ip dhcp pool VLAN77_MANAGE
network 192.168.77.0 255.255.255.0
default-router 192.168.20.1
!
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
description TRUNK-to-SWITCH
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.15
description VOICE
encapsulation dot1Q 15
ip address 192.168.15.1 255.255.255.0
!
interface FastEthernet0/0.20
description DATA
encapsulation dot1Q 20 native
ip address 192.168.20.1 255.255.255.0
!
interface FastEthernet0/0.77
description MANAGEMENT
encapsulation dot1Q 77
ip address 192.168.77.1 255.255.255.0
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
ip http server
no ip http secure-server
ip classless
!
!
!
!
voice-port 1/0/0
!
voice-port 1/0/1
!
voice-port 1/1/0
!
voice-port 1/1/1
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password password@
login
!
!
end

 

[bill001g]

You should be getting warning messages about a native vlan mismatch unless you somehow disabled CDP.

Your router has configured the native to vlan 20 but the switch is still using vlan 1. You need to have this consistent. The untagged vlan does not technically need to match but it is poor design to not do it. You could for example delete vlan 20 interface on the switch and move the ip to vlan 1.

 

[xskasmithx]

You should be getting warning messages about a native vlan mismatch unless you somehow disabled CDP.

Your router has configured the native to vlan 20 but the switch is still using vlan 1. You need to have this consistent. The untagged vlan does not technically need to match but it is poor design to not do it. You could for example delete vlan 20 interface on the switch and move the ip to vlan 1.

Is there away no enable CDP? I didn't receive any errors.

I added the native VLAN but no change.

interface fa0/24
switchport trunk native vlan 20

 

[bill001g]

The default gateway on the dhcp settings is not correct. You want the gateway to be the router ip for that vlan.

 

[xskasmithx]

The default gateway on the dhcp settings is not correct. You want the gateway to be the router ip for that vlan.

Thanks, the default GW on the subnet's have been changed-- 192.168.X.1 for all 3-vlans but no change :0(

 

[bill001g]

Not sure do you see the correct arp entries in the clients for the gateway.

You should be able to issue a ping command and ping between the switch vlans but it will go via the router. You want to force the source address to be say 192.168.77.254 and ping the 192.168.15.254. You can shut the trunk port down to confirm it is really going via the router.

You could define a monitor port to copy the trunk port and run wireshark on a pc. By default it strips the tags off so you will get 2 copies of every packet when you are pinging between vlans.