Free Courses

Login Register

Client 1 is unable to ping Client 2 as well as DSW1

Lesson 7/18 | Study Time: 60 Min

Course: CCNP Troubleshooting Lab Online Access

Client 1 is unable to ping Client 2 as well as DSW1

Ticket 7 – Port Security

Client 1 is getting a 169.x.x.x IP address & is unable to ping Client 2 as well as DSW1. The command ‘sh interfaces e0/0′ will show the following message in the first line

‘Ethernet0/0 is down, line protocol is down (err-disabled)’

On ASW1 port-security mac 0000.0000.0001, interface in err-disable state

Initial Configuration

ASW1#show running-config

Building configuration...

Current configuration : 1837 bytes

!

! Last configuration change at 18:31:29 IST Thu Oct 25 2018

!

version 15.2

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

service compress-config

!

hostname ASW1

!

boot-start-marker

boot-end-marker

!

!

!

no aaa new-model

clock timezone IST 5 30

!

!

!

!

!

no ip routing

!

!

!

no ip cef

no ipv6 cef

!

!

!

spanning-tree mode rapid-pvst

spanning-tree extend system-id

!

vlan internal allocation policy ascending

!

!

!

!

!

!

!

!

!

!

!

!

!

!

interface Port-channel1

switchport trunk encapsulation dot1q

switchport mode trunk

!

interface Port-channel3

switchport trunk encapsulation dot1q

switchport mode trunk

!

interface Ethernet0/0

switchport access vlan 10

switchport mode access

switchport port-security mac-address 0000.0000.0001

switchport port-security

!

interface Ethernet0/1

switchport access vlan 10

switchport mode access

!

interface Ethernet0/2

switchport access vlan 10

switchport mode access

!

interface Ethernet0/3

switchport access vlan 10

switchport mode access

!

interface Ethernet1/0

switchport trunk encapsulation dot1q

switchport mode trunk

channel-group 3 mode passive

!

interface Ethernet1/1

switchport trunk encapsulation dot1q

switchport mode trunk

channel-group 3 mode passive

!

interface Ethernet1/2

switchport trunk encapsulation dot1q

switchport mode trunk

channel-group 1 mode passive

!

interface Ethernet1/3

switchport trunk encapsulation dot1q

switchport mode trunk

channel-group 1 mode passive

!

interface Vlan200

ip address 192.168.1.131 255.255.255.224

no ip route-cache

!

ip default-gateway 192.168.1.129

ip forward-protocol nd

!

no ip http server

no ip http secure-server

!

!

!

!

!

!

control-plane

!

!

line con 0

exec-timeout 0 0

logging synchronous

line aux 0

line vty 0 4

privilege level 15

no login

!

!

end

ASW1#

Configuration of ASW1

interface ethernet0/0

 switchport access vlan 10

 switchport mode access

 switchport port-security

switchport port-security maximum 1

switchport port-security violation shutdown

 switchport port-security mac-address 0000.0000.0001

Answer: on ASW1 delete port-security & do on interfaces shutdown, no shutdown

Ans1) ASW1

Ans2) Port security

Ans3) In Configuration mode, using the interface range e0/0 – 1, then no switchport port-security, followed by shutdown, no shutdown interface configuration commands.

Solution

ASW1#show running-config

Building configuration...

Current configuration : 1758 bytes

!

! Last configuration change at 18:33:47 IST Thu Oct 25 2018

!

version 15.2

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

service compress-config

!

hostname ASW1

!

boot-start-marker

boot-end-marker

!

!

!

no aaa new-model

clock timezone IST 5 30

!

!

!

!

!

no ip routing

!

!

!

no ip cef

no ipv6 cef

!

!

!

spanning-tree mode rapid-pvst

spanning-tree extend system-id

!

vlan internal allocation policy ascending

!

!

!

!

!

!

!

!

!

!

!

!

!

!

interface Port-channel1

switchport trunk encapsulation dot1q

switchport mode trunk

!

interface Port-channel3

switchport trunk encapsulation dot1q

switchport mode trunk

!

interface Ethernet0/0

switchport access vlan 10

switchport mode access

!

interface Ethernet0/1

switchport access vlan 10

switchport mode access

!

interface Ethernet0/2

switchport access vlan 10

switchport mode access

!

interface Ethernet0/3

switchport access vlan 10

switchport mode access

!

interface Ethernet1/0

switchport trunk encapsulation dot1q

switchport mode trunk

channel-group 3 mode passive

!

interface Ethernet1/1

switchport trunk encapsulation dot1q

switchport mode trunk

channel-group 3 mode passive

!

interface Ethernet1/2

switchport trunk encapsulation dot1q

switchport mode trunk

channel-group 1 mode passive

!

interface Ethernet1/3

switchport trunk encapsulation dot1q

switchport mode trunk

channel-group 1 mode passive

!

interface Vlan200

ip address 192.168.1.131 255.255.255.224

no ip route-cache

!

ip default-gateway 192.168.1.129

ip forward-protocol nd

!

no ip http server

no ip http secure-server

!

!

!

!

!

!

control-plane

!

!

line con 0

exec-timeout 0 0

logging synchronous

line aux 0

line vty 0 4

privilege level 15

no login

!

!

end

ASW1#

Previous Lesson Next Lesson

Thrilok Thallapelly

Product Designer

★★★★★ 4.98

Profile

Class Sessions

1- Client is unable to ping R1’s serial interface from the client. 2- DSW1 is configured to be active but it does not become active. 3- Client 1 is able to ping 209.65.200.226 but can’t ping the Web Server 209.65.200.241 4- Client 1 & 2 are not able to ping the web server 209.65.200.241 5- Except for R1, no one else can ping the server. 6- Unable to ping DSW1 or the FTP Server 7- Client 1 is unable to ping Client 2 as well as DSW1 8- Client 1 & 2 can’t ping DSW1 or FTP Server 9- Client 1 & 2 can ping each other but they are unable to ping DSW1 or FTP Server 10- DSW1 can ping e0/1 of R4 but can’t ping s1/0.34 11- Client 1 is not able to ping the Webserver 12- DSW1 & R4 can’t ping R2′s loopback interface 13- DHCP Range Misconfiguration 14- Neighborship between R4 and DSW1 wasn’t establised 15- Loopback address on R1 is not able to ping the loopback address on DSW2 16- Loopback address on R1 (2026::111:1) is not able to ping the loopback address on DSW2 17- Problem with Switchport Encapsulation 18- Configurations