Dell 3448 arp responses are not returning to the vlan interface

Is 237 the native vlan on teh Cisco?  If so, you need to set the native vlan on 3448 also. 

bh1633,

Thanks for responding.  No 237 is not the native vlan on the Cisco.  The native vlan on both the Cisco and 3448 are vlan 1.

Can you be very detailed in your tests and observations?   Please provide step by step on what you do, expect and observe and how you observe it.  How do you know the arp response gets to the 1/g1 port on the 34xx switch and is dropped?

BH1633,

I have a Cisco 1242 Aironet access point plugged into interface 1/e43 and have the same interface configured for vlan 237.  I have interface 1/g1 configured for trunking and have added vlan 237 to this interface.  Interface 1/g1 is connected to interface gig 7/2 on a Cisco 4500 layer 3 core switch.  Interface gig 7/2 is configured for trunking.  The Cisco 4500 has an interface vlan 237 configured on it and is providing the vlan routing.  Connected on interface gig 1/44 to the Cisco 4500 is another Cisco 1242 Aironet access point (also on vlan 237) and it works.  Connected to interface gig 1/40 is a Cisco 2950.  The uplink interfaces bewteen the Cisco 4500 and 2950 are configured for trunking.  The Cisco 2950 has a Cisco 1242 Aironet access point connected to interface fa0/1 and this interface is configured as vlan 237.

I have configured the Dell 3448 interface 1/e10 to monitor interface 1/e43.  The capture shows arp broadcasts for the default gateway (configured in the access point) from the access point's MAC but no responses.

I then changed the configuration of interface 1/e10 to monitor interface 1/g1 (the uplink interface).  The capture shows the arp broadcast from the access point's MAC and the cooresponding arp response back to the access point's MAC from the default gateway.

Wireshark was used for the capture.  I tried to see if the vlan tagging was present in the packets but I am not familiar enough with
Wireshark to determine if it was or not.

Below is my current configuration:

11-XXXXXXX# sh runn
interface range ethernet 1/g(1-2)
switchport mode trunk
exit
vlan database
vlan 237
exit
interface ethernet 1/e43
switchport access vlan 237
exit
interface range ethernet 1/g(1-2)
switchport trunk allowed vlan add 237
exit
interface ethernet 1/e10
port monitor 1/e43
exit
interface vlan 1
ip address nnn.nnn.nnn.hhh mmm.mmm.mmm.mmm
exit
ip default-gateway nnn.nnn.nnn.hhh
hostname 11-XXXXXXX
radius-server host nnn.nnn.nnn.hhh auth-port 1812 timeout 3 retransmit 3 deadtim
e 0 key *********** source nnn.nnn.nnn.hhh
management access-list encrypt_only
permit service https
deny service http
deny service snmp
deny service telnet
permit service ssh
permit service snmp
exit
management access-list encrypt_only2
permit service https
permit service ssh
permit service snmp
deny service http
deny service telnet
exit
management access-class encrypt_only2
logging nnn.nnn.nnn.hhh
logging file notifications
ip http authentication radius local
ip https authentication radius local
aaa authentication login Encrypt_only radius local
aaa authentication login default local radius
line telnet
login authentication Encrypt_only
exit
line ssh
login authentication Encrypt_only
exit
line console
login authentication Encrypt_only
exit
enable password level 15 ******************************* encrypted
username ########## password ******************************* level 15 encrypted
username ########## password ******************************* level 15 encrypted
ip ssh server
snmp-server community ********** ro view Default
snmp-server community ********** ro view Default
snmp-server host nnn.nnn.nnn.hhh ********** 2
ip https server
tacacs-server source-ip nnn.nnn.nnn.hhh
interface ethernet 2/e1
sntp client enable
exit
clock timezone -5
clock summer-time recurring usa zone utc
clock source sntp
sntp client poll timer 60
sntp unicast client enable
sntp anycast client enable
sntp broadcast client enable
sntp server nnn.nnn.nnn.hhh poll
ip domain-name thepig.net
ip name-server  nnn.nnn.nnn.hhh nnn.nnn.nnn.hhh

Default settings:
Service tag: XXXXXXX

SW version 1.0.0.112 (date  20-Jun-2005 time  22:04:47)

Fast Ethernet Ports
==========================
no shutdown
speed 100
duplex full
negotiation
flow-control off
mdix auto
no back-pressure

Gigabit Ethernet Ports
=============================
no shutdown
speed 1000
duplex full
negotiation
flow-control off
mdix auto
no back-pressure

interface vlan 1
interface port-channel 1 - 8

spanning-tree
spanning-tree mode STP

qos basic
11-XXXXXXX#

This is my first real configuration attempt on a Dell switch.  Dell switches are similar to Cisco switches in some cases but different in others.  I am thinking that I just do not understand enough about configuring a Dell switch to complete this task.  I appreciate your help.

Great description.  Nothing obvious though:

- Can you put an IP address on vlan 237 on the 34xx and then see if you can ping the AP and default gateway from there?

- Is it possible the Cisco router is returning the ARP response as untagged?  You can check this by putting wireshark on an access port in vlan 1 and see if you see the response.

- If you have more than 2 cisco devices connected to the 34xx, this may be confusing the Cisco gear.  The 34xx will forward Cisco proprietary protocols (CDP/VTP/PVST/etc) as multicast and this can cause unusual behaviour in Cisco gear when they see multiple Cisco devices on a single port.  Since the 34xx does not have ACLs, the best thing to do is to turn off these Cisco protocols on the ports connected to the 34xx. 

- Although I do not think it will shed much light, please post the output of "show spanning-tree" and "show interface status" on the 34xx if you still are having issue.