Bridge LAN extension - Repeater not forwarding ICMP

[Martinni]

Hi everyone,

after solving issue with wrong VLAN configuration I have another one which I need help.

This is my topology for the bridge connection:

Issue:

1. Trying to ping Interface VLAN 840 from Core to 3560, no response.....

2. Then trying to ping DG 840 from 3560 to core, ping success.

3. After this successful ping I can do the ping in step 1. for about 30 seconds

4. Lose the connectivity from core to 3560 VLAN interface again.....

If I SSH to device when its ping-able It will just cut me after those ~30 seconds

Any ideas what might be an issue?

Before all steps I make sure:

1. I have IP+MAC in ARP table on Core

2. ALL MAC in mac tables(all match)

3. Repeater has ARP entry of the SVI 840 on 3560

Any guidance or help appreciated. 

[alemabrahao]

Do you have any ALCs configured that could be blocking ICMP?

Remember that the mesh is not 100% stable depending on the obstacles and distance between the APs, so I would evaluate the stability of this mesh as well. Analyze packet loss for example.

[alemabrahao]

It's also worth taking a look at the Wireless Spectrum tab and seeing what's listed in the list of interfering APs, particularly any APs shown as being one channel up or down (memory says you're on 6, so anything on 5 or 7) would cause a really noticeable hit

Also, the minimum allowable bitrate you defined as 802.1b is not so much legacy as it is historical.

A channel difference of one and 802.11b combined can create some really unpleasant Wi-Fi situations.

It's also worth taking a look at the spectrum view to see if anything in the area is obliterating the 2.4GHz frequencies and this is quite noticeable in the 'waterfall' graph.

It's just an exemple ok?

[Martinni]

Hi, If there would be such ACL it would block the ICMP all the time right? And ICMP works in specific situation. From 3560 all the time. And no I am not aware of such ACL.

[alemabrahao]

Okay, try to think outside the box a little and think about the other possibilities I raised. 😊

[Ryan_Miles]

The SSID tags VLAN 840, but the switch has 840 untagged?

[alemabrahao]

If it was a VLAN payment problem, this wouldn't even work, wouldn't you agree?

[PhilipDAth]

Can the MR86s ping the 3560 and the core reliably?

[Martinni]

Gateway MR86:

to Core 

to 3560 - no connectivity

Repeater MR86:

to Core

to 3560 - no connectivity

Both WAPs can reach core but none can reach 3560, after 3560 ping Gateway AP can ping but repeater no.

[PhilipDAth]

Could you double-check the subnet mask on the 3560 please.

[Martinni]

Hi subnet mask matches on core and also on 3560 . /24