Routing Problem with one VLAN only

Question

Have two sets of two S4128's (installed in pairs at two sites) utilising OSPF routing with 20 VLANS. 19 VLANS working correctly, one is not.Hardware Revision          : A00Software Version           : 10.5.6.5 Having a strange issue with routing for one specific VLAN. With both switches VLAN 125 interfaces active traffic is not able to route out to the rest of the network, as soon as I shutdown the interface on Switch 01 traffic is able to reach the internet. As soon as enabled again it stops working.  This has happened before and deleting the VLAN (not this one) on both switches and re entering the config strangely fixed the issue. This time however it has not.  Switch 01 interface vlan125 description HQ-Guest-VLAN no shutdown mtu 1532 ip address 192.168.125.252/24 no ipv6 mld snooping ip ospf 1 area 0.0.0.0 ip ospf passive no ip igmp snooping ! vrrp-group 125  virtual-address 192.168.125.1! Switch 02 interface vlan125 description HQ-Guest-VLAN no shutdown mtu 1532 ip address 192.168.125.253/24 no ipv6 mld snooping ip ospf 1 area 0.0.0.0 ip ospf passive ip access-group Guest in no ip igmp snooping ! vrrp-group 125  priority 150  virtual-address 192.168.125.1! The other two switches in the other building same model same config are working completely fine.  Any suggestions of where to start ?

DELL-Marco B · Accepted Answer

Hello,

can you check VRRP status? You can see it with show vrrp.

Please check that switch02 is Master and Switch01 is backup.

Check also IP address.

Can you try also to remove the guest ACL on switch02 to see problem disappear.

Thanks

liam.williams.ebc · Answer

Hi,  Clearing the ACL off switch 2 did fix the issue. Can you give me an example ACL to prevent traffic reaching the other subnets. Many thanks

DELL-Chris H · Answer

You can find the examples of different type ACLs on page 477 here.   Let me know if this is what you were referring to.

Networking General

Was this post helpful?