Solved

Inter-VLAN routing on a 3Com 4200G Switch

Posted on 2009-04-08
6
1,671 Views
Last Modified: 2012-05-06
Pasted Below is the Current Configuration on the switches. It is two switches a 12port 4200G and  48 port 4200G. I have all the servers on one vlan and all host on a swperate vlan. I want to get both VLAN's to talk to each other.

Configuring login access control

sysname switch12fl1

system-view
 acl number 2000 match-order config
 rule 1 permit source 192.168.10.1 0
 rule 2 permit source 192.168.20.1 0
 rule 3 permit source 10.100.200.1 0
 rule 4 deny source any

 user-interface aux 0
  authentication-mode none
  user privilege level 2
  history-command max-size 20
  idle-timeout 6 0
  screen-length 30
  speed 19200
  protocol inbound telnet
 
 user-interface vty 0 4
  acl 2000 inbound

 ip http acl 2000

 acl number 3000
   rule 1 deny ip source 192.168.10.0 255.255.255.0 destination 10.100.200.0 255.255.255.0
   rule 2 deny ip source 192.168.20.0 255.255.255.0 destination 10.100.200.0 255.255.255.0
   rule 3 deny ip source 10.100.200.0 255.255.255.0 destination 192.168.10.0 255.255.255.0
   rule 3 deny ip source 10.100.200.0 255.255.255.0 destination 192.168.20.0 255.255.255.0

-------------------------------------

 vlan 10
 vlan 20


 interface Vlan-interface 10
   ip address 192.168.10.80 255.255.255.0

 interface Vlan-interface 20
   ip address 192.168.20.80 255.255.255.0
   ip route-static 10.100.200.0 255.255.255.0 192.168.20.81

 vlan 10
  port GigabitEthernet1/0/1

 vlan 20
  port GigabitEthernet1/0/2

 interface GigabitEthernet 1/0/1
  port access vlan 10

 Interface GigabitEthernet 1/0/2
  port link-type trunk
  port trunk permit vlan 10 20 30
   


---------------------------------------------------
sysname switch48fl1

system-view
 acl number 2000 match-order config
 rule 1 permit source 192.168.10.1 0
 rule 2 permit source 192.168.20.1 0
 rule 3 permit source 10.100.200.1 0
 rule 4 deny source any


   

 vlan 20
 vlan 30



 interface Vlan-interface 20
   ip address 192.168.20.81 255.255.255.0
   ip route-static 192.168.10.0 255.255.255.0 192.168.20.80

 interface Vlan-interface 30
   ip address 10.100.200.3 255.255.255.0


 vlan 20
    port GigabitEthernet1/0/33
 vlan 30
    port GigabitEthernet1/0/34


 interface GigabitEthernet 1/0/34
  port access vlan 30

 Interface GigabitEthernet 1/0/33
  port link-type trunk
  port trunk permit vlan 10 20 30
0
Comment
Question by:screwbash
  • 3
  • 3
6 Comments
 

Expert Comment

by:Anacondah
Comment Utility
Did you by any chance, use a crosscable between the switches ? When connecting two switches ít is required that you use a crosscable and not a normal cable. you can easily make these, it's just that if you have connectors 1 to 8 turned around at the other end of the cable.
0
 

Author Comment

by:screwbash
Comment Utility
Thats a very good question Anacondah. I am not sure a to they type of cable that is being used. By chance have you looked at the configuration to see if it is configured correctly. I am unable to test the inter-vlan routing by a simple test of ping.
0
 

Expert Comment

by:Anacondah
Comment Utility
Is it possible to put the "deny all"  on top? so that the router doesnt think: 'Hm, permit that one, check, permit this, check. Oh. now i need to disable any IP, so i'm going to override the IP's i already set.'
Rather set it to Deny all, and then the 3 permitted IP's on both configurations.

about identifying a crosscable:
Please look at this: http://en.wikipedia.org/wiki/Ethernet_crossover_cable
even a ping wont work if theres a normal cable between both switches.


For the rest i have little sense for the configurations Screwbash, im guessing you know more than I do :P
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 

Author Comment

by:screwbash
Comment Utility
The access list hasn't been applied to the configuration. I checked the makeup of the cables between the switches and it is a crosscable. There are 3 cables from the 12 port 4200G switch going into 3 ports of the 48 port 4200 G. The 12 port is on vlan 10 and the 48 port is on vlan 20. Attached is arawing as to the layout.
0
 

Accepted Solution

by:
screwbash earned 0 total points
Comment Utility
Anacondah thanks for your help. The issue i was having with the intervlan routing was a result of the ports not being placed into the correct or any vlans. I just simply assigned the port to the correct vlan and it worked. Thanks again.
0
 

Expert Comment

by:Anacondah
Comment Utility
Too bad i couldnt give any quick good answer. Anyhow, im glad to help. You gave yourself the points now tho :)
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Hello , This is a short article on how would you go about enabling traceoptions on a Juniper router . Traceoptions are similar to Cisco debug commands but these traceoptions are implemented in Juniper networks router . The following demonstr…
Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now