How do I allow devices on a new vlan access to the internet?


We are having a new VOIP system installed. Our current VOIP installation is still in production while the new one is set up for testing and evaluation. I added a new VLAN to the switch ( a Cisco C3560 with IOS 12.2 ) for the new system and assigned a few ports to it. I've also added the new vlan to the trunk ports and added a static ip route for all subnets to be forwarded to the gateway. A route was created on the firewall/router for the new vlan.

The switch, and any device attached to it, can ping the other subnets, but only the switch can ping external addresses (i.e. The devices appear limited to the LAN.

Having modeled the new vlan on the one that we had been using for voip, it's clear that I'm missing something. The existing voip system has no need to contact the outside world ( other than a few remote ip phones that we lost contact with some time ago ), but the new subnet can make use of internet access for administration and for some other features.

Admittedly, my ios skill-set is pretty basic. Any insights concerning what I'm doing wrong here would be greatly appreciated.

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Don JohnstonInstructorCommented:
Probably the new VLAN (subnet) hasn't been added to the NAT configuration on the firewall.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
cordescAuthor Commented:
Thanks Don, that's what it was.
cordescAuthor Commented:
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
IP Telephony

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.