This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
RUCKUS Self Help |   ASK the Pack
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Pulling out hairs and I'm already balding - ICX routing help

tony_butler_9y6
New Contributor III

‎02-13-2020 03:45 PM

Image_ images_messages_5f91c3fe135b77e24790f364_2ff0f34dafc5de4a72dea25db501b13b_RackMultipart20200213100680w11-1a8773c3-5b1b-4f7a-b7fe-e90b531607e1-1865353503.png1581637259

If you solve this, you could be the one!  

We have a closed network environment with NO ROUTER, but we do have a layer 3 switch.  Please refer to the diagram; we have a server with IP address 192.168.1.3/24 with gateway of 192.168.1.1  The server is connected to Ethernet port 1/1/1 of the Brocade Ruckus ICX 7150 switch which has vlan 192 untagged with ve 192 on IP address of 192.168.1.1.  

We have a fiber link on port 1/3/1 that goes out to a layer 2 switch.  On port 1/3/1 we have vlan 51 tagged with ve 51 on IP address 10.174.241.99 and vlan 351 with tagged ve on IP address 11.174.246.99.  

From the Brocade Ruckus we can ping the Layer 2 switch at 10.174.241.20, the Camera at 11.174.246.30, and the server at 192.168.1.3.  From the server we cannot ping or communicate with the camera at 11.174.246.30.

On the server we even added static routes: 

route add 10.174.241.0 mask 255.255.255.0 192.168.1.1

route add 11.174.246.0 mask 255.255.255.0 192.168.1.1 

What are we missing?

I'll be happy to share our running config if you're interested in making someone's week.

6 REPLIES 6

andrew_giancol1
Contributor III

‎02-13-2020 03:48 PM

In your diagram, it doesn't show if the other 'Pingable' devices are also on the layer 2. Have you checked the arp tables of each switch independently to see which Vlan each switch thinks the mac address of your non-reachable device is?

tony_butler_9y6
New Contributor III
In response to andrew_giancol1

‎02-13-2020 04:35 PM

Show ARP from the ICX shows the correct MAC addresses of the layer 2 switch and camera.  I've verified the port the camera is on is set to vlan 351, however the layer 2 switch has a different IP subnet than the camera, show arp on that switch doesn't show the mac address of the camera, only the laptop we connected to it to view the arp tables.
0 Kudos

tony_butler_9y6
New Contributor III
In response to andrew_giancol1

‎02-13-2020 04:44 PM

To update, let's take the camera out of the equation.  We can't ping the layer 2 switch at 10.174.241.20 from the server at 192.168.1.3 and we can verify the MAC address is correct in arp on the layer 2 and the icx match mac addresses for the switch.
0 Kudos

andrew_giancol1
Contributor III
In response to andrew_giancol1

‎02-13-2020 04:52 PM

Was this always broken?also who makes the layer 2 switch, and lacking 'arp' commands on the l2, are you able to run a 'show mac address table interface' to verify the device is registering a mac address and that its appearing on the correct vlan?. 
i wonder if you might be having a spanning tree convergence, or vtp issue.
have you unplugged the Camera, run any packet sniffers? that might show you at least which items on the L3 you can see via broadcast.
Copyright © 2024 Khoros, LLC