Showing results for 
Search instead for 
Did you mean: 

Pulling out hairs and I'm already balding - ICX routing help

New Contributor III

Image_ images_messages_5f91c3fe135b77e24790f364_2ff0f34dafc5de4a72dea25db501b13b_RackMultipart20200213100680w11-1a8773c3-5b1b-4f7a-b7fe-e90b531607e1-1865353503.png1581637259

If you solve this, you could be the one!  

We have a closed network environment with NO ROUTER, but we do have a layer 3 switch.  Please refer to the diagram; we have a server with IP address with gateway of  The server is connected to Ethernet port 1/1/1 of the Brocade Ruckus ICX 7150 switch which has vlan 192 untagged with ve 192 on IP address of  

We have a fiber link on port 1/3/1 that goes out to a layer 2 switch.  On port 1/3/1 we have vlan 51 tagged with ve 51 on IP address and vlan 351 with tagged ve on IP address  

From the Brocade Ruckus we can ping the Layer 2 switch at, the Camera at, and the server at  From the server we cannot ping or communicate with the camera at

On the server we even added static routes: 

route add mask

route add mask 

What are we missing?

I'll be happy to share our running config if you're interested in making someone's week.


Contributor III
In your diagram, it doesn't show if the other 'Pingable' devices are also on the layer 2. Have you checked the arp tables of each switch independently to see which Vlan each switch thinks the mac address of your non-reachable device is?

Show ARP from the ICX shows the correct MAC addresses of the layer 2 switch and camera.  I've verified the port the camera is on is set to vlan 351, however the layer 2 switch has a different IP subnet than the camera, show arp on that switch doesn't show the mac address of the camera, only the laptop we connected to it to view the arp tables.

To update, let's take the camera out of the equation.  We can't ping the layer 2 switch at from the server at and we can verify the MAC address is correct in arp on the layer 2 and the icx match mac addresses for the switch.

Was this always broken?also who makes the layer 2 switch, and lacking 'arp' commands on the l2, are you able to run a 'show mac address table interface' to verify the device is registering a mac address and that its appearing on the correct vlan?. 
i wonder if you might be having a spanning tree convergence, or vtp issue.
have you unplugged the Camera, run any packet sniffers? that might show you at least which items on the L3 you can see via broadcast.