Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 574
  • Last Modified:

VLAN problem

I have 2 main switches 172.16.1.2 and 172.16.1.3
172.16.1.2 has only 1 VLAN
172.16.1.3 has 2 working VLAN and i am adding the 3rd one to it
172.16.1.1/24 and 172.16.5.1 /24 and now i am trying to add 172.16.10.1/24 to it

The switches are also act as gateway 172.16.1.2 and 172.16.1.3 for the first VLAN and 172.16.5.1 for the secondary VLAN

On the second switch(172.16.1.3) which hook up to 172.16.1.2.
First VLAN VLAN
Name:  Default  
IP Address    172.16.1.3
Netmask   255.255.255.0
802.1Q Tag  : 1
Spanning Tree Domain  s0
QoS Profile  QP1

Second working VLAN
VLAN Name:  Worker  
IP Address    172.16.5.1
Netmask   255.255.255.0
802.1Q Tag   Untagged (Internal tag 4092)
Spanning Tree Domain  None
QoS Profile  QP1

New VLAN :not working yet.
VLAN Name:  New
IP Address    172.16.10.1
Netmask   255.255.255.0
802.1Q Tag  : Untagged (Internal tag 4091)
Spanning Tree Domain  None
QoS Profile  QP1
 
After i untagged a port i was able to ping 172.16.10.1 and 172.16.1.3 but cant not ping the first switch 172.16.1.2. I can also ping 172.16.5.1 but nothing else pass that. I got the Cisco pix to allow all the traffic

name 172.16.10.1 NEWGateway
name 172.16.10.0 NEW
pdm location NEWGateway 255.255.255.255 inside
pdm location NEW 255.255.255.0 inside
access-list inside_access_in permit ip NEW 255.255.255.0 any
 

 
0
moonzappa
Asked:
moonzappa
  • 2
1 Solution
 
MikeKaneCommented:
Can you provide more detail as to the setup.  

#1) Where is your trunk port.
#2) On the Firewall, are you tagging the VLANs?  
#3) Where are you routing the VLANS?  at the switch?    
0
 
moonzappaAuthor Commented:
1) i dont see any trunk port but it must be port 3 and 4 before these are shared port which connecting the 2 switches

2) i am not sure what you mean? i do have a vlan (subnet) defined on the firewall hosts

3) i am routing the vlan at the firewall though 172.16.1.3 (the secondary switch)
0
 
MikeKaneCommented:
Please post the switch code to continue - Thanks.
0

Featured Post

Free recovery tool for Microsoft Active Directory

Veeam Explorer for Microsoft Active Directory provides fast and reliable object-level recovery for Active Directory from a single-pass, agentless backup or storage snapshot — without the need to restore an entire virtual machine or use third-party tools.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now