Setting up intervlan routing and default route to internet on Catalyst 3750
Evening all.
I have set up a stack of 3750 G's to act as a vlan router. I am able to successfully ping within the vlans from all switches. I can also ping the next hop (a firewall interface) from the 3750 stack but not from the other switches or connected devices within the local network.
When reviewing the documentation on Cisco's site for this I found a missing point (to input the ip routing command) which resolved my initial issue of not being able to route at all between the vlans themselves. I'm here at the house tonight and thinking about this issue and wonder if any of you can answer the following -
I have default gateways set up on each of the extended 3750's but not on the routing 3750.
- Do I need to set up a DG on the routing 3750?
- If so, could this be the core problem with not be able to route from internal devices out the default route?
- If not or other, could anyone share with me what I may be missing/need to add?
I have run the following shows where appropriate on the network with expected returns -
show vlan - all vlans show up on each device
show vtp stat - device status displaying correctly and correct dB versions showing
show ip route (routing 3750) - all vlans showing as (C)onnected and default route 0.0.0.0 0.0.0.0 x.x.x.x (S)tatic
No routing protocol is in use and only static route is the default pointing to the inside interface of the firewall.
Thanks for your insight folks!
I have set up a stack of 3750 G's to act as a vlan router. I am able to successfully ping within the vlans from all switches. I can also ping the next hop (a firewall interface) from the 3750 stack but not from the other switches or connected devices within the local network.
When reviewing the documentation on Cisco's site for this I found a missing point (to input the ip routing command) which resolved my initial issue of not being able to route at all between the vlans themselves. I'm here at the house tonight and thinking about this issue and wonder if any of you can answer the following -
I have default gateways set up on each of the extended 3750's but not on the routing 3750.
- Do I need to set up a DG on the routing 3750?
- If so, could this be the core problem with not be able to route from internal devices out the default route?
- If not or other, could anyone share with me what I may be missing/need to add?
I have run the following shows where appropriate on the network with expected returns -
show vlan - all vlans show up on each device
show vtp stat - device status displaying correctly and correct dB versions showing
show ip route (routing 3750) - all vlans showing as (C)onnected and default route 0.0.0.0 0.0.0.0 x.x.x.x (S)tatic
No routing protocol is in use and only static route is the default pointing to the inside interface of the firewall.
Thanks for your insight folks!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks for the input donj. I went back and checked and had indeed missed the DG. Its all about the details...
Thanks again
Thanks again
it is possible that your routing-3750 sends the icmp to the firewall, if there is no route at firewall back to the VLAN network, the firewall might drop it or send it to where the default route is pointing to.
Another reason could be your firewall is blocking/dropping ICMP which is a default rule on most firewall. You might want to check your firewall rule and add a temporary rule to allow your firewall interfaces to be ping for testing purpose.