Solved

Inter-VLAN routing on a 3Com 4200G Switch

Posted on 2009-04-08
6
1,697 Views
Last Modified: 2012-05-06
Pasted Below is the Current Configuration on the switches. It is two switches a 12port 4200G and  48 port 4200G. I have all the servers on one vlan and all host on a swperate vlan. I want to get both VLAN's to talk to each other.

Configuring login access control

sysname switch12fl1

system-view
 acl number 2000 match-order config
 rule 1 permit source 192.168.10.1 0
 rule 2 permit source 192.168.20.1 0
 rule 3 permit source 10.100.200.1 0
 rule 4 deny source any

 user-interface aux 0
  authentication-mode none
  user privilege level 2
  history-command max-size 20
  idle-timeout 6 0
  screen-length 30
  speed 19200
  protocol inbound telnet
 
 user-interface vty 0 4
  acl 2000 inbound

 ip http acl 2000

 acl number 3000
   rule 1 deny ip source 192.168.10.0 255.255.255.0 destination 10.100.200.0 255.255.255.0
   rule 2 deny ip source 192.168.20.0 255.255.255.0 destination 10.100.200.0 255.255.255.0
   rule 3 deny ip source 10.100.200.0 255.255.255.0 destination 192.168.10.0 255.255.255.0
   rule 3 deny ip source 10.100.200.0 255.255.255.0 destination 192.168.20.0 255.255.255.0

-------------------------------------

 vlan 10
 vlan 20


 interface Vlan-interface 10
   ip address 192.168.10.80 255.255.255.0

 interface Vlan-interface 20
   ip address 192.168.20.80 255.255.255.0
   ip route-static 10.100.200.0 255.255.255.0 192.168.20.81

 vlan 10
  port GigabitEthernet1/0/1

 vlan 20
  port GigabitEthernet1/0/2

 interface GigabitEthernet 1/0/1
  port access vlan 10

 Interface GigabitEthernet 1/0/2
  port link-type trunk
  port trunk permit vlan 10 20 30
   


---------------------------------------------------
sysname switch48fl1

system-view
 acl number 2000 match-order config
 rule 1 permit source 192.168.10.1 0
 rule 2 permit source 192.168.20.1 0
 rule 3 permit source 10.100.200.1 0
 rule 4 deny source any


   

 vlan 20
 vlan 30



 interface Vlan-interface 20
   ip address 192.168.20.81 255.255.255.0
   ip route-static 192.168.10.0 255.255.255.0 192.168.20.80

 interface Vlan-interface 30
   ip address 10.100.200.3 255.255.255.0


 vlan 20
    port GigabitEthernet1/0/33
 vlan 30
    port GigabitEthernet1/0/34


 interface GigabitEthernet 1/0/34
  port access vlan 30

 Interface GigabitEthernet 1/0/33
  port link-type trunk
  port trunk permit vlan 10 20 30
0
Comment
Question by:screwbash
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 

Expert Comment

by:Anacondah
ID: 24097459
Did you by any chance, use a crosscable between the switches ? When connecting two switches ít is required that you use a crosscable and not a normal cable. you can easily make these, it's just that if you have connectors 1 to 8 turned around at the other end of the cable.
0
 

Author Comment

by:screwbash
ID: 24097496
Thats a very good question Anacondah. I am not sure a to they type of cable that is being used. By chance have you looked at the configuration to see if it is configured correctly. I am unable to test the inter-vlan routing by a simple test of ping.
0
 

Expert Comment

by:Anacondah
ID: 24098035
Is it possible to put the "deny all"  on top? so that the router doesnt think: 'Hm, permit that one, check, permit this, check. Oh. now i need to disable any IP, so i'm going to override the IP's i already set.'
Rather set it to Deny all, and then the 3 permitted IP's on both configurations.

about identifying a crosscable:
Please look at this: http://en.wikipedia.org/wiki/Ethernet_crossover_cable
even a ping wont work if theres a normal cable between both switches.


For the rest i have little sense for the configurations Screwbash, im guessing you know more than I do :P
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:screwbash
ID: 24098693
The access list hasn't been applied to the configuration. I checked the makeup of the cables between the switches and it is a crosscable. There are 3 cables from the 12 port 4200G switch going into 3 ports of the 48 port 4200 G. The 12 port is on vlan 10 and the 48 port is on vlan 20. Attached is arawing as to the layout.
0
 

Accepted Solution

by:
screwbash earned 0 total points
ID: 24100338
Anacondah thanks for your help. The issue i was having with the intervlan routing was a result of the ports not being placed into the correct or any vlans. I just simply assigned the port to the correct vlan and it worked. Thanks again.
0
 

Expert Comment

by:Anacondah
ID: 24128885
Too bad i couldnt give any quick good answer. Anyhow, im glad to help. You gave yourself the points now tho :)
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I eventually solved a perplexing problem setting up telnet for a new switch.  I installed a new Cisco WS-03560X-24P switch connected to an existing Cisco 4506 running a WS-X4013-10GE Sup II-Plus. After configuring vlans and trunking,  I could no…
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses
Course of the Month10 days, 20 hours left to enroll

628 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question