Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Firewall training lab with layer 3 switch

Posted on 2012-12-26
5
501 Views
Last Modified: 2013-08-16
Hello all,

I would like to set a firewall training lab in my lab environment.
Materials i have ;
2 Fortinet 60C utm device
1 HP 2910al switch
2 PC with 2 Network Card

The Internet gateway will be 172.16.20.1

switch config
============
hostname "utm_lab"
module 1 type J9145A
ip routing   >>>>>>>> i have to run this command for inter vlan comm ?
vlan 1
   name "DEFAULT_VLAN"
   untagged 6-24
   no untagged 1-5
   no ip address
   exit
vlan 10
   name "VLAN10"
   untagged 1
   ip address 10.0.10.254 255.255.255.0
   exit
vlan 20
   name "VLAN20"
   untagged 2
   ip address 10.0.20.254 255.255.255.0
   exit
vlan 30
   name "VLAN30"
   untagged 3
   ip address 10.0.30.254 255.255.255.0
   exit
vlan 40
   name "VLAN40"
   untagged 4
   ip address 10.0.40.254 255.255.255.0
   exit
vlan 50
   name "VLAN50"
   untagged 5
   ip address 172.16.20.254 255.255.255.0
   exit
ip route 0.0.0.0 0.0.0.0 172.16.20.1  >>> any dest. if  dont know the route


UTM 1
======
wan1 : 10.0.10.1/24
wan2 : 10.0.20.1/24
int     : 10.0.100.1 / 24

UTM 2
=====
wan1 : 10.0.30.1 /24
wan2 : 10.0.40.1 /24
int     : 10.0.200.1 /24

From 10.0.100.254 ( windows2008r2 ) PC i can reach to all vlan (10-50) but can't reach to 172.16.20.1 , what is wrong in this config ? any idea
How can i use my device to create a useful lab area in other way ?
Thanks
0
Comment
Question by:ata1915
  • 4
5 Comments
 
LVL 1

Author Comment

by:ata1915
ID: 38720841
0
 
LVL 9

Expert Comment

by:Sandeep Gupta
ID: 38721065
can you please put your default route like:

ip route 0.0.0.0 0.0.0.0 vlan 50 172.16.20.1

also do you see your gateway ip 172.16.20.1 in arp table ?
0
 
LVL 1

Author Comment

by:ata1915
ID: 38729987
I was testing this lab with HP 2620 and wrote <ip routing> command
but i didnt get any vlan interface ip add. on the  arp table with this switch.
Then changed it to HP2910al and again write the <ip routing> command and it works now.
I didnt figure out why this lab didnt worked with HP2620 switch.
0
 
LVL 1

Accepted Solution

by:
ata1915 earned 0 total points
ID: 39401119
i have achievement this task with  opensource switch :)
http://openvswitch.org/
0
 
LVL 1

Author Closing Comment

by:ata1915
ID: 39413899
easy to deploy
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I eventually solved a perplexing problem setting up telnet for a new switch.  I installed a new Cisco WS-03560X-24P switch connected to an existing Cisco 4506 running a WS-X4013-10GE Sup II-Plus. After configuring vlans and trunking,  I could no…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question