Diagram illustrating ping and traceroute for verifying inter-VLAN routing between Host1 (VLAN 100) and Host2 (VLAN 200) via a router with fa0/0 interface.

Verifying Inter-VLAN Routing Using Ping and Tracert Commands

Inter-VLAN routing enables communication between devices on different VLANs, a critical concept. Verifying host-to-host connectivity ensures proper configuration and operation of inter-VLAN routing. This article explores the ping and tracert utilities, essential tools for network engineers to test connectivity and troubleshoot issues. When configuring the Inter-VLAN routing, we must verify the host-to-host connectivity and data sending. Generally, we can check this using the ping and tracert commands.

We have briefly discussed the check utility in the article Interpreting Ping Results-Cisco IOs and Traceroute (Tracert) – Testing the Route. In this article, I am going to give you a short reminder of both ping and tracert utilities, and then we will discuss different issues of inter-VLAN routing.

Using Ping to Verify Inter-VLAN Routing

We send an ICMP echo request to the destination address using the ping command. When a destination host receives an ICMP echo request, it responds with an ICMP echo reply to confirm the ICMP echo request. It also calculates the time the echo request was sent and the time the echo reply was received. The time calculation is used to determine the latency of the connection.

If the source of the ping requires successfully receiving a reply from the destination, it confirms that there is a path between the sending device and the receiving device. The figure below illustrates the ping utility. Host 1 is pinging host 2, and the result shows at the end of the ping test.

Verifying Inter-VLAN Routing: Network diagram showing Host-1 on VLAN 100 successfully pinging Host-2 on VLAN 20 via a Cisco 2811 router and Switch0, with command line output indicating reply from 192.168.200.2 and 0% packet loss.
Verifying Inter-VLAN Routing Using Ping and Tracert Commands 4

Using Tracert to Verify Inter-VLAN Routing

Using the tracert utility, we can get the complete picture of the hops between the source and destination. The command has a few changes on UNIX systems, such as traceroute instead of tracert.

The tracert also uses ICMP to determine the path with specific time-to-live values defined in the frame. The time-to-live value specifies how many hops away the ICMP echo is allowed to reach.

The utility generates the first ICMP echo request with a time-to-live value set to expire at the first hop on the route to the destination device.  When the ICMP echo request times get time out on the first hop, an ICMP message is sent back from the first hop to the source device.

The source device records the response from the first hop and sends another ICMP echo request with a more excellent time-to-live value. This allows the ICMP echo request to pass through the first hop and reach the second device on the route. Then, the process repeats until the echo reaches the final destination device.

When the tracert gets the final destination, it finishes and displays a list of ingress router interfaces that the ICMP echo request reached on its path to the destination. The figure below illustrates the tracert utility. The host on VLAN 100 will trace host 2 on VLAN 200.

The trace is completed, and there are two hops to the destination; the first hop is the fa0/0, the default gateway of VLAN 100, and the other hop is the default gateway of VLAN 200. We can check more hops using this utility and get the result if any hop has a problem.

Network diagram showing Host-1 on VLAN-100 sending traceroute to Host-2 on VLAN-200 via Router0 and Switch0, with traceroute output indicating two successful hops at low latency.
Verifying Inter-VLAN Routing Using Ping and Tracert Commands 5

Avatar of Asad Ijaz

Asad Ijaz

NetworkUstad's lead networking architect with CCIE certification. Specializes in CCNA exam preparation and enterprise network design. Authored 2,800+ technical guides on Cisco systems, BGP routing, and network security protocols since 2018. Picture this: I'm not just someone who writes about tech; I'm a certified expert in the field. I proudly hold the titles of Cisco Certified Network Professional (CCNP) and Cisco Certified Network Associate (CCNA). So, when I talk about networking, I'm not just whistling in the dark; I know my stuff! My website is like a treasure trove of knowledge. You'll find a plethora of articles and tutorials covering a wide range of topics related to networking and cybersecurity. It's not just a website; it's a learning hub for anyone who's eager to dive into the world of bits, bytes, and secure connections. And here's a fun fact: I'm not a lone wolf in this journey. I'm a proud member and Editor of Team NetworkUstad. Together, we're on a mission to empower people with the knowledge they need to navigate the digital landscape safely and effectively. So, if you're ready to embark on a tech-savvy adventure, stick around with me, Asad Ijaz Khattak. We're going to unravel the mysteries of technology, one article at a time!"