How do I allow devices on a new vlan access to the internet?
Posted on 2014-07-25
We are having a new VOIP system installed. Our current VOIP installation is still in production while the new one is set up for testing and evaluation. I added a new VLAN to the switch ( a Cisco C3560 with IOS 12.2 ) for the new system and assigned a few ports to it. I've also added the new vlan to the trunk ports and added a static ip route for all subnets to be forwarded to the gateway. A route was created on the firewall/router for the new vlan.
The switch, and any device attached to it, can ping the other subnets, but only the switch can ping external addresses (i.e. 220.127.116.11). The devices appear limited to the LAN.
Having modeled the new vlan on the one that we had been using for voip, it's clear that I'm missing something. The existing voip system has no need to contact the outside world ( other than a few remote ip phones that we lost contact with some time ago ), but the new subnet can make use of internet access for administration and for some other features.
Admittedly, my ios skill-set is pretty basic. Any insights concerning what I'm doing wrong here would be greatly appreciated.