> можете еще прислать конфиги Gi0/5 и Gi0/12 c 3560?
> и описать, вкратце, что хотите настроить в итоге?
> 2950 (User Access) - 3560 (Core/Distribution/Inter VLAN Routing) - 2801 - Internet
> так?Да, именно так - проблема оказалась в ip local-proxy-arp
После no ip local-proxy-arp и ip redirects на fa0/0 2801 трафик стал нормально идти через 3560
Всё это писано в гайде циско:
Usage Guidelines
The local proxy ARP feature allows the Multilayer Switching Feature Card (MSFC) to respond to ARP requests for IP addresses within a subnet where normally no routing is required. With the local proxy ARP feature enabled, the MSFC responds to all ARP requests for IP addresses within the subnet and forwards all traffic between hosts in the subnet. Use this feature only on subnets where hosts are intentionally prevented from communicating directly to the Catalyst 6500 series switch on which they are connected.
Before the local proxy ARP feature can be used, the IP proxy ARP feature must be enabled. The IP proxy ARP feature is enabled by default.
Internet Control Message Protocol (ICMP) redirects are disabled on interfaces where the local proxy ARP feature is enabled.
Конфиг Gi0/5 и Gi0/12:
interface GigabitEthernet0/12
description uplink_2801
switchport access vlan 10
duplex full
interface GigabitEthernet0/5
description dnlink to 2950
switchport trunk encapsulation dot1q
switchport mode trunk
speed 1000
duplex full