Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Inter Vlan routing

Posted on 2008-10-20
5
Medium Priority
?
302 Views
Last Modified: 2008-10-21
ok..heres my prob.
i have a block of public IP's from the ISP(naturally)  i was wondering if there was a way i could possibly block like 15 ports off and put them in a vlan specifically for these IP's and then allow access to that Vlan from other vlans?  How would i go about that..thanks again in advance
0
Comment
Question by:jasonmichel
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 10

Expert Comment

by:kyleb84
ID: 22763699
Um, my crystal ball is out of batteries :P

What brand/model switch/router have you got?
0
 
LVL 1

Author Comment

by:jasonmichel
ID: 22763745
dell 6200 switches stacked with 10g kit and cisco router with 12.4 ios..
0
 
LVL 10

Accepted Solution

by:
kyleb84 earned 2000 total points
ID: 22763928
Say you've already got 2 VLANs VLAN 1 (Data) and VLAN 2 (Voice), and you want grab 15 ports and chuck em in a new VLAN (Lets call it 3, Public).

VLAN 1 - 10.1.0.0/24
VLAN 2 - 10.2.0.0/24
VLAN 3 - 210.200.30.X/27 (For example)

Dell 6200 - Example config:
- Ports 1 - 15 are VLAN 3 only
- Ports 16-23 are in VLAN 1 only
- Port 24 is the uplink to the Cisco
- Just apply the port 24 setting to the 10g uplinks for inter-switch connectivity.

vlan database
 vlan 1,2,3
exit
interface ethernet 1/g24
 switchport mode general
 switchport general allowed vlan add 2,3 tagged
 switchport general pvid 1
 exit
interface range Ethernet 1/g1-1/g15
 switchport access vlan 3
 exit
interface range Ethernet 1/g16-1/g23
 switchport access vlan 1
 exit

Cisco uplink to the switch:
interface XXX
 switchport mode trunk
 switchport trunk encapsulation dot1q
 switchport trunk native 1
!
interface Vlan1
 ip address 10.1.0.1/24
interface Vlan2
 ip address 10.2.0.1/24
interface Vlan3
 ip address 210.200.30.x/27
!
ip routing
!

The default gateway for VLAN1 is 10.1.0.1
The default gateway for VLAN2 is 10.2.0.1
The default gateway for VLAN3 is (The Cisco Router's VLAN 3 interface)

----------------------------

You could make the Dell's do the routing instead if you wish, but that's as far as I go with Dell, the rest I'm is basically Web config, and cannot be shown easily with words.

Try here: http://support.dell.com/support/edocs/network/pc62xx/en/UG/HTML/configue.htm#wp1185290

0
 
LVL 1

Author Comment

by:jasonmichel
ID: 22764037
would there have to be some type of default route statement so that the other 2 vlans know that vlan 3 is the exit destination for 0.0.0.0 (or in this case inet?)
0
 
LVL 10

Expert Comment

by:kyleb84
ID: 22764080
If your Cisco was doing the routing, it would have a:

 ip route 0.0.0.0 0.0.0.0 [ISP's GW IP]

As long as each device on each VLAN had a default gateway of the Cisco, they all would have internet access, and they (each VLAN) all could talk to each other.

0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question