Its not working cause I think I don't have ip classles enable on the switch acting a l3
Main Topics
Browse All TopicsEverything works in my environment ( Vlan routin, failover , etc) and now I want to make sure that my core switches default Gtwy has 2 ip route statements one gtwy for my dmz vlans on 172.27.0.0 (172.27.0.254 Netscreen int) and one for my 10.170.0.0 (10.170.0.254 Trust Netscreen) . When I do a tracert from one device (pc) on 172.27.22.1 it goes out to the internet thru the trusted interface on the FW 10.170.0254.
Sample output.
interface Vlan11
description Trust VLAN
ip address 10.170.0.2 255.255.128.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 11 ip 10.170.0.1
standby 11 priority 255
standby 11 preempt
standby 11 authentication xxxxxxxx
standby 11 track Vlan11
!
interface Vlan12
description 'heartbeat' network
ip address 10.170.128.2 255.255.224.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 12 ip 10.170.128.1
standby 12 priority 255
standby 12 preempt
standby 12 authentication 3ll1m@3
standby 12 track Vlan12
!
interface Vlan13
description vmkernel network
ip address 10.170.160.2 255.255.224.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 13 ip 10.170.160.1
standby 13 priority 255
standby 13 preempt
standby 13 authentication xxxxxxxxx
standby 13 track Vlan13
!
interface Vlan14
description OOB mgmt/admin network
ip address 10.170.192.2 255.255.192.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 14 ip 10.170.192.1
standby 14 priority 255
standby 14 preempt
standby 14 authentication xxxxxxxx
standby 14 track Vlan14
!
interface Vlan15
description DMZ LAN
ip address 172.27.0.2 255.255.128.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 15 ip 172.27.0.1
standby 15 priority 255
standby 15 preempt
standby 15 authentication 3ll1m@3
standby 15 track Vlan15
!
interface Vlan16
description future use
ip address 172.27.128.2 255.255.224.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 16 ip 172.27.128.1
standby 16 priority 255
standby 16 preempt
standby 16 authentication xxxxx
standby 16 track Vlan16
!
interface Vlan17
description future use
ip address 172.27.160.2 255.255.224.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 17 ip 172.27.160.1
standby 17 priority 255
standby 17 preempt
standby 17 authentication 3ll1m@3
standby 17 track Vlan17
!
interface Vlan18
description future use
ip address 172.27.192.2 255.255.224.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 18 ip 172.27.192.1
standby 18 priority 255
standby 18 preempt
standby 18 authentication xxxxx
standby 18 track Vlan18
!
interface Vlan19
description load balanced IP's
ip address 172.27.224.2 255.255.224.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 19 ip 172.27.224.1
standby 19 priority 255
standby 19 preempt
standby 19 authentication xxxxx
standby 19 track Vlan19
!
ip route 0.0.0.0 0.0.0.0 10.170.0.254
ip route 172.27.0.0 255.255.0.0 172.27.0.254
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Business Accounts
Answer for Membership
by: rynoxPosted on 2008-05-14 at 20:58:26ID: 21570580
ip route 127.27.0.0 255.255.0.0 172.27.0.254 sends all data FOR 172.27.0.0/16 TO 172.27.0.254
all other traffic that is not a directly connecte nterface (your VLANs) will go out the default gateway.
You can look at this and all your routes by throwing the 'show ip route' command at the router/switch.