Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 421
  • Last Modified:

Inter-VLAN routing

I've been having lots of fun with a little project -until now.. it's in production, and not working quite right.

We just implemented VLANs.  We did it using 2 Cisco Catalyst 3560 core switches, and 5 Catalyst 2960 edge switches.

The core switches use HSRP to present a single router (as they are layer 3 switches with ip routing enabled).

I have a number of VLANs, the default (1) resides on the 192.168.10.0/24 subnet.  It contains my firewall, switching, and routers.  All other VLANs reside on 10.<vlan>.0.0/16 subnets.

The default VLAN works, however none of the other VLANs are able to reach outside of the network (through the firewall).  All VLANs are routing across switches (ie 2 computers on different edge switches can talk), and all VLANs can talk to the servers, after the servers have been given static routes (ie route add 10.17.0.0 255.255.0.0 192.168.10.254 1)

Attached are the config files for one of the cores, and one of the edge switches.
sw-core-1-confg.txt
sw-b-confg.txt
0
lunanat
Asked:
lunanat
  • 3
  • 2
1 Solution
 
JFrederick29Commented:
The Firewall has routes to all the 10.x subnets via 192.168.10.254, right?
0
 
JFrederick29Commented:
On the servers, why not simply set the default gateway to 192.168.10.254? instead of adding static routes to all the 10.x subnets.
0
 
lunanatAuthor Commented:
Hi JFredrick, I'm back again hahahah.

I had tried that and it didn't seem to work... will try again.

And you are bang on... I was missing a route from the firewall back to the VLANs..........

doh?

Thank you once again.
0
 
lunanatAuthor Commented:
Silly question, but I'm glad you had the answer!
0
 
JFrederick29Commented:
No problem, glad to help!
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now