VLAN - VTP Are ports not placed in clients automatically?

[wilder7bc]

Issue with pinging from switch to router interfaces


first my router:
--------------------------------------
r3#show ip int brief
Interface IP-Address OK? Method Status Prot
ocol
FastEthernet0/0 unassigned YES manual up up

FastEthernet0/0.1 192.168.1.65 YES manual up up

FastEthernet0/0.10 192.168.1.129 YES manual up up

Serial0/0 unassigned YES manual down down

Serial0/1 unassigned YES manual down down

----------------------------------------


on my switch if I assign vlan 1 ip address 192.168.1.70 255.255.255.192

I am able to ping all the interfaces on my router, and any host connected on not only the .128/27 subnet, but also the .64/26 subnet.


If I change my IP address to 192.168.1.133 255.255.255.224

I am unable to ping anything.
---------------------------------------------------
s1#show ip int brief
Interface IP-Address OK? Method Status Prot
ocol
Vlan1 192.168.1.133 YES manual up up

FastEthernet0/1 unassigned YES unset up up

----------------------------------------------------



s1#ping 192.168.1.129

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.129, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
s1#ping 192.168.1.65

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.65, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
s1#

=======================================

now if I change it to 192.168.1.70/192 I can ping everything:

s1(config)#int vlan 1
s1(config-if)#ip address
s1(config-if)#ip address 192.168.1.70 255.255.255.192
s1(config-if)#end

s1#show ip int brief
Interface IP-Address OK? Method Status Prot
ocol
Vlan1 192.168.1.70 YES manual up up

------------------------------

s1#ping 192.168.1.65

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.65, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/202/1000 ms
s1#ping 192.168.1.129

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.129, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/202/1000 ms
s1#


===================================

Can anyone explain that craziness?

I tested it so many different ways to try and find what was happening. I thought at first maybe it needed to be connected to a subnet it could communicate with it. However, that was not the case or the .133/224 would have worked as thats a subnet its connected to.


------------edited-------------

Here is a copy of my vlans but I dont think this has anything to do with it simply because they have no ip assigned to them and port 4 while it does have a host connected to it with ip 192.168.1.130/27 it should not affect pinging the router which is not associated with a vlan.

s1#show vlan brief

VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/2, Fa0/3, Fa0/5, Fa0/6
Fa0/7, Fa0/8, Fa0/9, Fa0/10
Fa0/11, Fa0/12, Fa0/13, Fa0/14
Fa0/15, Fa0/16, Fa0/17, Fa0/18
Fa0/19, Fa0/20, Fa0/21, Fa0/22
Fa0/23, Fa0/24
10 VLAN0010 active Fa0/4
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
s1#

----------------------------------------------

------------edited---------------------

I have went over this a few time in my mind and I can only figure out one answer for this. So I think I have found the answer. In theory its logical and make sense with defined method that can be repeated in a controlled enviroment.

it starts with the setup of the sub interface on the router:

-------------
r3(config-subif)#int f0/0.1
r3(config-subif)#encapsulation dot1Q 1
r3(config-subif)#ip address 192.168.1.65 255.255.255.192
r3(config-subif)#end
------------

I assigned 192.168.1.65/26 to the vlan 1 in the second line above. In addition, if you look at my show vlan brief output above you will see that my port 0/1 is in vlan 1.

In addition, my router is connected to my switch by port 0/1 only which is also my trunk.

When you ping has no mask, so the /26 would cover the full range of IP`s involved and thus would give me back a ping even though I was trying to ping a /27 mask ip the ping command has no way of knowing this and just returns the IP that it finds.

So I think I found my own answer. to test it easy enough I can simply transfer to 192.168.1.129/27 sub interface to the vlan 1 and move the /26 out of that subnet and then send my pings again.

Anyway sounds good to me let me know if I missed something here!


==============
===========
========
Ok so I reversed my sub interfaces on the router went back to switch as expected I could no longer ping until I changed my switch vlan 1 to be the same ip subnet as that of the sub interface assigned to vlan 1.

So test proves theory was correct and I had the right answer!


So just finished VLAN chapter. Made 100% on test at end of chapter so feeling like I have decent grasp of the main ideas in VlAN.

About to move into Chapter 12 which is security, and I think access list! My time schedule is day 10/60. So I basically have 50 more days to prep for the test. hopefully I can finish up the rest of the chapters in a month max so I can put in heavy time reviewing and lab after lab. Just in case though I have been doing the labs now as well which helps pound in the information. I start my networking class around Aug 8-13 not sure which the interesting thing is we use Mr Lammle 6th edition book.

So that tells you how popular his book is that its being used as a college text book at RSU. I will pretty much be done and to review at that time but hey I dont mind easy A in the class and it will certainly not hurt to cover the material yet again as I personally feel that the CCNA material may be the most important material out of all the Cisco Training. You have to have a great base before you move into advance studies if you dont you will certainly struggle with key concepts later on; at least its that way with advanced physics and math.

Sept 16th is the day I am suppose to be ready for the test but thats a sunday so may be a few days after that. I guess its time to call and setup a test date to to 100% lock in my testing. I think I may be more nervous about this test than any for a very long time including my Engineering physics test. However, Im putting in the work and making the big sacrifices and that almost always pays off so I guess I should not worry.

Oh well enough talking, and on to chapter 12!


mmmmwwaaaaaaa!!!