cancel
Showing results for 
Search instead for 
Did you mean: 

Pulling out hairs and I'm already balding - ICX routing help

tony_butler_9y6
New Contributor III

Image_ images_messages_5f91c3fe135b77e24790f364_2ff0f34dafc5de4a72dea25db501b13b_RackMultipart20200213100680w11-1a8773c3-5b1b-4f7a-b7fe-e90b531607e1-1865353503.png1581637259

If you solve this, you could be the one!  

We have a closed network environment with NO ROUTER, but we do have a layer 3 switch.  Please refer to the diagram; we have a server with IP address 192.168.1.3/24 with gateway of 192.168.1.1  The server is connected to Ethernet port 1/1/1 of the Brocade Ruckus ICX 7150 switch which has vlan 192 untagged with ve 192 on IP address of 192.168.1.1.  

We have a fiber link on port 1/3/1 that goes out to a layer 2 switch.  On port 1/3/1 we have vlan 51 tagged with ve 51 on IP address 10.174.241.99 and vlan 351 with tagged ve on IP address 11.174.246.99.  

From the Brocade Ruckus we can ping the Layer 2 switch at 10.174.241.20, the Camera at 11.174.246.30, and the server at 192.168.1.3.  From the server we cannot ping or communicate with the camera at 11.174.246.30.

On the server we even added static routes: 

route add 10.174.241.0 mask 255.255.255.0 192.168.1.1

route add 11.174.246.0 mask 255.255.255.0 192.168.1.1 

What are we missing?

I'll be happy to share our running config if you're interested in making someone's week.

6 REPLIES 6

andrew_giancol1
Contributor III
In your diagram, it doesn't show if the other 'Pingable' devices are also on the layer 2. Have you checked the arp tables of each switch independently to see which Vlan each switch thinks the mac address of your non-reachable device is?

Show ARP from the ICX shows the correct MAC addresses of the layer 2 switch and camera.  I've verified the port the camera is on is set to vlan 351, however the layer 2 switch has a different IP subnet than the camera, show arp on that switch doesn't show the mac address of the camera, only the laptop we connected to it to view the arp tables.

To update, let's take the camera out of the equation.  We can't ping the layer 2 switch at 10.174.241.20 from the server at 192.168.1.3 and we can verify the MAC address is correct in arp on the layer 2 and the icx match mac addresses for the switch.

Was this always broken?also who makes the layer 2 switch, and lacking 'arp' commands on the l2, are you able to run a 'show mac address table interface' to verify the device is registering a mac address and that its appearing on the correct vlan?. 
i wonder if you might be having a spanning tree convergence, or vtp issue.
have you unplugged the Camera, run any packet sniffers? that might show you at least which items on the L3 you can see via broadcast.