gillsr at yahoo
Jul 25, 2002, 2:15 PM
Post #2 of 2
(415 views)
Permalink
|
2500 users in one broadcast domain?? -grimaces-
Perhaps you have a netmask problem on the server or computer?
As per the ACL, you might enable logging for each of the entries and see
where that takes you.
-- steve
-----Original Message-----
From: cisco-nsp-admin [at] puck
[mailto:cisco-nsp-admin [at] puck] On Behalf Of WATTIER Denis
Sent: Thursday, July 25, 2002 11:47 AM
To: 'cisco-nsp [at] puck'
Subject: [nsp] Question about a ping.
Hello,
A customer has got a Cisco 4006 with a MSFC and sup II in order to route
inter-vlan(usual).
He has got a vlan 1 with approximatly 2500 users (the interface of the
vlan
1 is 10.12.10.6)
A computer connects to the 4006 (@IP 10.X.X.X) on the vlan 1.
A server connects to the 4006 (@IP 10.1.8.121) on the vlan 1.
Ping Computer -> Server : OK
Ping Server -> Computer : OK
Now we are deconnecting the server from the 4006.
If we ping the computer to server, the answer of the ping is :
H:\>ping ps002121 -t
Pinging ps002121 [10.1.8.121] avec 32 octets de données :
Réponse de 10.12.10.6 : Impossible de joindre le réseau de destination.
Réponse de 10.12.10.6 : Impossible de joindre le réseau de destination.
Réponse de 10.12.10.6 : Impossible de joindre le réseau de destination.
Réponse de 10.12.10.6 : Impossible de joindre le réseau de destination.
Réponse de 10.12.10.6 : Impossible de joindre le réseau de destination.
Réponse de 10.12.10.6 : Impossible de joindre le réseau de destination.
Request time out
Réponse de 10.12.10.6 : Impossible de joindre le réseau de destination.
Request time out
Réponse de 10.12.10.6 : Impossible de joindre le réseau de destination.
Réponse de 10.12.10.6 : Impossible de joindre le réseau de destination.
Réponse de 10.12.10.6 : Impossible de joindre le réseau de destination.
Request time out
Réponse de 10.12.10.6 : Impossible de joindre le réseau de destination.
Réponse de 10.12.10.6 : Impossible de joindre le réseau de destination.
Why have i got "Réponse de 10.12.10.6 : Impossible de joindre le réseau
de
destination"
altought it will have to do layer two (because it's in the same vlan and
it's the switch)
and so the packet hasn't have to reach the layer 3.
I think that the theoric answer will always be "Request time out".
We add ACL on layer 3 (on MSFC)
Configuration ACL
interface Port-channel1.1
description Interface-virtuelle-VLAN1-Natif
encapsulation dot1Q 1 native
ip address 10.12.10.6 255.0.0.0
ip access-group 100 in
no ip redirects
no ip directed-broadcast
standby 255 priority 100
standby 255 preempt
standby 255 ip 10.12.10.5
access-list 100 permit ip 10.0.0.0 0.255.255.255 host 10.12.10.5
access-list 100 permit ip 10.0.0.0 0.255.255.255 host 10.12.10.6
access-list 100 deny ip 10.0.0.0 0.255.255.255 10.0.0.0 0.255.255.255
access-list 100 permit ip any any
Why is the packet not dropped?
Thanx you for all.
_______________________________________________
cisco-nsp mailing list real_name)s [at] puck
http://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
|
