Avatar of ata1915
 asked on

Firewall training lab with layer 3 switch

Hello all,

I would like to set a firewall training lab in my lab environment.
Materials i have ;
2 Fortinet 60C utm device
1 HP 2910al switch
2 PC with 2 Network Card

The Internet gateway will be

switch config
hostname "utm_lab"
module 1 type J9145A
ip routing   >>>>>>>> i have to run this command for inter vlan comm ?
vlan 1
   name "DEFAULT_VLAN"
   untagged 6-24
   no untagged 1-5
   no ip address
vlan 10
   name "VLAN10"
   untagged 1
   ip address
vlan 20
   name "VLAN20"
   untagged 2
   ip address
vlan 30
   name "VLAN30"
   untagged 3
   ip address
vlan 40
   name "VLAN40"
   untagged 4
   ip address
vlan 50
   name "VLAN50"
   untagged 5
   ip address
ip route  >>> any dest. if  dont know the route

wan1 :
wan2 :
int     : / 24

wan1 : /24
wan2 : /24
int     : /24

From ( windows2008r2 ) PC i can reach to all vlan (10-50) but can't reach to , what is wrong in this config ? any idea
How can i use my device to create a useful lab area in other way ?
Networking Hardware-OtherHardware FirewallsSwitches / Hubs

Avatar of undefined
Last Comment

8/22/2022 - Mon

Sandeep Gupta

can you please put your default route like:

ip route vlan 50

also do you see your gateway ip in arp table ?

I was testing this lab with HP 2620 and wrote <ip routing> command
but i didnt get any vlan interface ip add. on the  arp table with this switch.
Then changed it to HP2910al and again write the <ip routing> command and it works now.
I didnt figure out why this lab didnt worked with HP2620 switch.
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question

easy to deploy