Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Inter-VLAN routing on a 3Com 4200G Switch

Posted on 2009-04-08
6
Medium Priority
?
1,735 Views
Last Modified: 2012-05-06
Pasted Below is the Current Configuration on the switches. It is two switches a 12port 4200G and  48 port 4200G. I have all the servers on one vlan and all host on a swperate vlan. I want to get both VLAN's to talk to each other.

Configuring login access control

sysname switch12fl1

system-view
 acl number 2000 match-order config
 rule 1 permit source 192.168.10.1 0
 rule 2 permit source 192.168.20.1 0
 rule 3 permit source 10.100.200.1 0
 rule 4 deny source any

 user-interface aux 0
  authentication-mode none
  user privilege level 2
  history-command max-size 20
  idle-timeout 6 0
  screen-length 30
  speed 19200
  protocol inbound telnet
 
 user-interface vty 0 4
  acl 2000 inbound

 ip http acl 2000

 acl number 3000
   rule 1 deny ip source 192.168.10.0 255.255.255.0 destination 10.100.200.0 255.255.255.0
   rule 2 deny ip source 192.168.20.0 255.255.255.0 destination 10.100.200.0 255.255.255.0
   rule 3 deny ip source 10.100.200.0 255.255.255.0 destination 192.168.10.0 255.255.255.0
   rule 3 deny ip source 10.100.200.0 255.255.255.0 destination 192.168.20.0 255.255.255.0

-------------------------------------

 vlan 10
 vlan 20


 interface Vlan-interface 10
   ip address 192.168.10.80 255.255.255.0

 interface Vlan-interface 20
   ip address 192.168.20.80 255.255.255.0
   ip route-static 10.100.200.0 255.255.255.0 192.168.20.81

 vlan 10
  port GigabitEthernet1/0/1

 vlan 20
  port GigabitEthernet1/0/2

 interface GigabitEthernet 1/0/1
  port access vlan 10

 Interface GigabitEthernet 1/0/2
  port link-type trunk
  port trunk permit vlan 10 20 30
   


---------------------------------------------------
sysname switch48fl1

system-view
 acl number 2000 match-order config
 rule 1 permit source 192.168.10.1 0
 rule 2 permit source 192.168.20.1 0
 rule 3 permit source 10.100.200.1 0
 rule 4 deny source any


   

 vlan 20
 vlan 30



 interface Vlan-interface 20
   ip address 192.168.20.81 255.255.255.0
   ip route-static 192.168.10.0 255.255.255.0 192.168.20.80

 interface Vlan-interface 30
   ip address 10.100.200.3 255.255.255.0


 vlan 20
    port GigabitEthernet1/0/33
 vlan 30
    port GigabitEthernet1/0/34


 interface GigabitEthernet 1/0/34
  port access vlan 30

 Interface GigabitEthernet 1/0/33
  port link-type trunk
  port trunk permit vlan 10 20 30
0
Comment
Question by:screwbash
  • 3
  • 3
6 Comments
 

Expert Comment

by:Anacondah
ID: 24097459
Did you by any chance, use a crosscable between the switches ? When connecting two switches ít is required that you use a crosscable and not a normal cable. you can easily make these, it's just that if you have connectors 1 to 8 turned around at the other end of the cable.
0
 

Author Comment

by:screwbash
ID: 24097496
Thats a very good question Anacondah. I am not sure a to they type of cable that is being used. By chance have you looked at the configuration to see if it is configured correctly. I am unable to test the inter-vlan routing by a simple test of ping.
0
 

Expert Comment

by:Anacondah
ID: 24098035
Is it possible to put the "deny all"  on top? so that the router doesnt think: 'Hm, permit that one, check, permit this, check. Oh. now i need to disable any IP, so i'm going to override the IP's i already set.'
Rather set it to Deny all, and then the 3 permitted IP's on both configurations.

about identifying a crosscable:
Please look at this: http://en.wikipedia.org/wiki/Ethernet_crossover_cable
even a ping wont work if theres a normal cable between both switches.


For the rest i have little sense for the configurations Screwbash, im guessing you know more than I do :P
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:screwbash
ID: 24098693
The access list hasn't been applied to the configuration. I checked the makeup of the cables between the switches and it is a crosscable. There are 3 cables from the 12 port 4200G switch going into 3 ports of the 48 port 4200 G. The 12 port is on vlan 10 and the 48 port is on vlan 20. Attached is arawing as to the layout.
0
 

Accepted Solution

by:
screwbash earned 0 total points
ID: 24100338
Anacondah thanks for your help. The issue i was having with the intervlan routing was a result of the ports not being placed into the correct or any vlans. I just simply assigned the port to the correct vlan and it worked. Thanks again.
0
 

Expert Comment

by:Anacondah
ID: 24128885
Too bad i couldnt give any quick good answer. Anyhow, im glad to help. You gave yourself the points now tho :)
0

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question