How to make VLAN use a certain Gateway

Hi

I have created myself a VLAN on a cisco 3750 switch called VLAN 26.

We use DHCP to distribute IP addresses and currently everyone gets a default gateway of 10.255.251.254.

I now need to ensure that anyone (ports, pc's etc) who are connected to VLAN 26 goes out through a certain default gateway. (eg. 10.255.251.218 and not .254) I dont want them to have access to the rest of our network, it is simply for internet access only.

Can I do this using an access list?

Thanks
kilbride98Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Aaron StreetTechnical Infrastructure Architecture and Global Network ManagerCommented:
hold on valns seperate out ipsubnets

clients on vlan 26 would not be able to see devices on the currente vlan, think of vlans as seperate physical switchs

what you need is to set up a second sub net

so you would have

vlan(current) = 10.255.251.0 255.255.255.0  DGFGW 10.255.251.254

VLAN26 = 10.10
.252.0 255.255.255.0 DFGW 10.10.252.254

you then set up stow SVI / vlan interfaces

#int vlan26
#ipddress 10.10.252.254  ........ this is the dfgw addess above

from your DHCP you then can hand out the two differet ranges based on what vlan a device is on.

now you have two seperate subnets, you can then control how each can talk out of the network, and indeed between the two vlans.

so you can set up ACLS and routes that will forward traffic from a vlan out of the gateways you want.

but your first step is to seperate the network in to two vlans and configure a new IP address sceam.

0
Aaron StreetTechnical Infrastructure Architecture and Global Network ManagerCommented:
if you have a digram it would be eaiser
0
kilbride98Author Commented:
Hi

Here is the diagram. Could I create a seperate DHCP pool that would be associated with the new vlan and in the pool set the gateway to be the one I want to use?
Visio-basic.pdf
0
Aaron StreetTechnical Infrastructure Architecture and Global Network ManagerCommented:
ok what are you using for you DHCP server?

you have two ways to do this, Either set the second fire wall / router to have a ipaddress in the same range as teh clietns in vlan 23

or you set it up as 4 seperate networks

the comman way to do this would be

#int valn 1
#ip address 10.255.251.254 255.255.255.0

#int vlan 23
#ip address 10.255.252.254 255.255.255.0
#ip helper-address <ip address of DHCP serve on vlan 1>

and set up the two scopes on the DHCP server in vlan1, the switch and the dhcp server will make sure devices in vlan23 get ipaddress from the correct range (the vlan23 interface intercepts DHCP requests, tags them so the DHCP server knows what address range they are from, and then passes them on to the dhcp server, its dhcp proxying)

you then woudl set up the fire walls to have two completly different IP addresses lets say

192.168.1.50
and 192.168.2.20

you now have 4 seperate layer 3 networks (the two vlans and the two firewalls)

you can now enter in routes that say basicaly

if traffic is commeing from vlan25 range use ipaddress 192.168.2.20 to get out

if traffic is comming from vlan 1 range use ip address 192.168.1.50

this is also ever expandable as becasue you ahve taken the gateways out side the vlans you could at a later date add say vlan 33 and then decided how its traffic flows.

so I would say give your self 4 vlans on the switch

vlan 1
vlan 23
and then vlan 2 and 3 which you will use for the fire walls (you could put them boh in the same vlan but not good for security)

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Switches / Hubs

From novice to tech pro — start learning today.