Solved

vlan issue

Posted on 2008-10-21
3
243 Views
Last Modified: 2011-09-20
i have done vlan using cisco router and a cisco switch
encapsulation dot1.q used
vlan1, 192.168.1.1
vlan2, 192.168.2.1


i have linux firewall
eth1, 192.168.1.2

i added virtual ip to eth1.1 interface, 192.168.2.2

users can ping to 192.168.1.2, but cannot ping to 192.168.2.2

what might be the problem

i want to give access to vlan ip ranges using my linux box

i blv the issue is encapsulation issue
any ideas how to fix this?



0
Comment
Question by:ammadeyy2020
3 Comments
 
LVL 16

Accepted Solution

by:
btassure earned 250 total points
ID: 22765604
You need to configure the interface as a trunk and/or configure the subinterfaces into the vlans they represent.
See this article for more info:
http://www.linuxjournal.com/article/7268
0
 
LVL 5

Assisted Solution

by:sharedit
sharedit earned 250 total points
ID: 22778529
Can I ask why you are not using the router to route between the two vlans?

I lack experience with this Linux Firewall Software, but typically Firewalls forward traffic through itself, they do not route back out the same interface packets come in on.

The Router is where i would be setting up traffic between the two Vlans. The firewall Isn't really going to do any routing for you, it is probably just going to be the default route for unknown traffic on your network.

I may be unclear as to how your network is setup.

On the switch port connected to router
config t
int f0/x
switchport mode trunk
switchport trunk encapsulation dot1q
switchport trunk native vlan 1
switchport trunk allowed vlan add 1,2
switchport nonegotiate

on the router port connected to the switch
config t
int e0/x.2  <------ i usually make the .x the number of the VALN. ie vlan2=.2 vlan20=.20 vlan34=.34 makes it less confusing
encapsulation dot1q 2
ip add x.x.x.x x.x.x.x (this should be the default route for Vlan 2)

where is dhcp coming from?

with that, if you put a port on the switch to access vlan2 an appropriately ip configured pc, in that port should be able to ping vlan 1

0
 

Author Closing Comment

by:ammadeyy2020
ID: 31508187
i added static route to firewall, and default route to router, it works fine
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
stacking Catalyst 3650 20 52
route 2 traffic streams on single NIC 6 58
Unifi AP 4 85
Etherchannel balancing 10 34
Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
I see many questions here on Experts Exchange regarding switch port configurations and trunks. This article is meant for beginners in the subject to help to get basic knowledge about Virtual Local Area Network (VLAN (http://en.wikipedia.org/wiki/Vir…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question