Routing 2 Subnets into a network

Hello all,
   I have a strange problem with ip routing and hope you can help.

We have range1 on a 87.*.*.* on subnet 255.255.255.192
we have range2 on 77.*.*.* on subnet 255.255.255.125

Now we have a layer 3 switch that is setup to accept both subnets in vlans. and infront of that 2 routers that pass the range into the layer 3 switch.
Each machine in the network has a ip on both ranges ( windows ) with 1 gateway..... on the primary range. BUT we can not seem to get to "ports" on the 2nd range but can on the primary range.

Help please!!
FooSoupAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

R TCommented:
Is 255.255.255.125 a valid subnet?
0
FooSoupAuthor Commented:
oops its 128 sorry about that :/
0
myin68Commented:
Your setup won't work because the PC will use the 1 gateway, so the 2nd IP won't be able to communicate with the network.  To do what you want, you'd have to install a 2nd NIC in each PC.
0
Powerful Yet Easy-to-Use Network Monitoring

Identify excessive bandwidth utilization or unexpected application traffic with SolarWinds Bandwidth Analyzer Pack.

R TCommented:
Can you tell  us the switch types (Cisco PIX, 3600, etc.), the routing protocols used, how they are interconnected, as well as a more detailed description of the VLANs?
0
FooSoupAuthor Commented:
OK bit more detail

Switch is a HP procurve 2600
We are just using untagged and tagged vlans so they can talk to each other. each machine has 2 NIC's i 1 has range 1 on, (2 has range 2 on but with no gateway). Now what i was thinking due to windows being rubbish is if i would have to put a static route locally on each machine for the second subnet ?
0
myin68Commented:
What are you trying to accomplish by giving a PC two different IPs?  There might be a different way to reach your goal.
0
myin68Commented:
Yes, the 2nd NIC also needs a gateway in its subnet.
0
myin68Commented:
If you use a DHCP server with 2 NICs, IP options can be assigned automatically for each NIC.
0
FooSoupAuthor Commented:
We have websites and email on machines but the main thing is we do ssl sites so we need ips for each website hence the second range as we ran out of ips on the primary range
0
Robert Sutton JrSenior Network ManagerCommented:
Is the Procurve providing Ip routing? You have 2 subnets pointing to 1 gateway?

If you want to add the routes...

addroute 87.xxx.xxx.xxx 77.xxx.xxx.xxx
0
FooSoupAuthor Commented:
Yes the procurve is doing the routing we can ping the 2nd range from outside the network but can not connect to anything on ports e.g. 80 , 25, 443 but can on the first range
0
myin68Commented:
You don't need a separate IP for each website.  SSL certificates are specific to the FQDN of the website.  The SSL certificate isn't tied to the server, or IP; it's tied to the FQDN.
0
myin68Commented:
I stand corrected... I've looked it up, and even though the certificate isn't tied to the IP you do need an individual IP for each SSL site.
0
myin68Commented:
Do you have trunking properly configured between the ProCurve and the router?  Are the ACLs properly configured in the router/firewall to access those ports on the 2nd subnet?
0
FooSoupAuthor Commented:
Now that i am not sure.. im going to look into configuartion gateways for specific vlans to see if i can do vlan specific gateways but im not sure if the procurve can do that.. if not maybe port specific gateways :/   and the trunking is auto configured on the procurve as far as i am aware  i just what port is in what vlan...
0
myin68Commented:
Each VLAN should have it's own gateway.  Each NIC should point to the gateway for its VLAN.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
FooSoupAuthor Commented:
I think thats the problem i cant see a way to set a gateway for each vlan
0
FooSoupAuthor Commented:
ok here is what we have (see attached) each pc has 2 nics in
the first nic has a ip and the gateway ( ip for vlan 1 ) the second nic has a ip but no gateway (windows machine) both ip ranges are on diff subnets btw.  The 0.0.0.0 route on the switch is rt1

Now we can ping the ips on both ranges from another site but we can only connect to ports on the first range not the second

any ideas?
 



network-map.jpg
0
FooSoupAuthor Commented:
I figured it out finally. i had to set static routes on each machine to get it to work correctly and also to allow the connection to each subnet.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.