Solved

Firewall training lab with layer 3 switch

Posted on 2012-12-26
5
467 Views
Last Modified: 2013-08-16
Hello all,

I would like to set a firewall training lab in my lab environment.
Materials i have ;
2 Fortinet 60C utm device
1 HP 2910al switch
2 PC with 2 Network Card

The Internet gateway will be 172.16.20.1

switch config
============
hostname "utm_lab"
module 1 type J9145A
ip routing   >>>>>>>> i have to run this command for inter vlan comm ?
vlan 1
   name "DEFAULT_VLAN"
   untagged 6-24
   no untagged 1-5
   no ip address
   exit
vlan 10
   name "VLAN10"
   untagged 1
   ip address 10.0.10.254 255.255.255.0
   exit
vlan 20
   name "VLAN20"
   untagged 2
   ip address 10.0.20.254 255.255.255.0
   exit
vlan 30
   name "VLAN30"
   untagged 3
   ip address 10.0.30.254 255.255.255.0
   exit
vlan 40
   name "VLAN40"
   untagged 4
   ip address 10.0.40.254 255.255.255.0
   exit
vlan 50
   name "VLAN50"
   untagged 5
   ip address 172.16.20.254 255.255.255.0
   exit
ip route 0.0.0.0 0.0.0.0 172.16.20.1  >>> any dest. if  dont know the route


UTM 1
======
wan1 : 10.0.10.1/24
wan2 : 10.0.20.1/24
int     : 10.0.100.1 / 24

UTM 2
=====
wan1 : 10.0.30.1 /24
wan2 : 10.0.40.1 /24
int     : 10.0.200.1 /24

From 10.0.100.254 ( windows2008r2 ) PC i can reach to all vlan (10-50) but can't reach to 172.16.20.1 , what is wrong in this config ? any idea
How can i use my device to create a useful lab area in other way ?
Thanks
0
Comment
Question by:ata1915
  • 4
5 Comments
 
LVL 1

Author Comment

by:ata1915
ID: 38720841
0
 
LVL 9

Expert Comment

by:Sandeep Gupta
ID: 38721065
can you please put your default route like:

ip route 0.0.0.0 0.0.0.0 vlan 50 172.16.20.1

also do you see your gateway ip 172.16.20.1 in arp table ?
0
 
LVL 1

Author Comment

by:ata1915
ID: 38729987
I was testing this lab with HP 2620 and wrote <ip routing> command
but i didnt get any vlan interface ip add. on the  arp table with this switch.
Then changed it to HP2910al and again write the <ip routing> command and it works now.
I didnt figure out why this lab didnt worked with HP2620 switch.
0
 
LVL 1

Accepted Solution

by:
ata1915 earned 0 total points
ID: 39401119
i have achievement this task with  opensource switch :)
http://openvswitch.org/
0
 
LVL 1

Author Closing Comment

by:ata1915
ID: 39413899
easy to deploy
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

I eventually solved a perplexing problem setting up telnet for a new switch.  I installed a new Cisco WS-03560X-24P switch connected to an existing Cisco 4506 running a WS-X4013-10GE Sup II-Plus. After configuring vlans and trunking,  I could no…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now