Cisco Switching/Routing :: 2970 / Routing To Internet Through Different VLan?

Apr 2, 2012

We have 2 internet connections- one for production and one as a backup.  The backup connection will be used for allowing guest visitors on a wireless network that is on a seperate VLAN.
 
We have the following networks:
 
VLAN 1 production, 192.168.1.0
VLAN 10 backup internet connection, 192.168.100.0, Interface 100.2
VLAN 41 wireless guests, 192.168.41.0, interface 41.1
 
VLAN routing provided by Dell 6224 switch and other switching is Cisco 2970 (L2) switches.Backup Internet router is SMC (Comcast)
 
I would like to allow clients on VLAN 41 access the internet connection in VLAN 10 at 192.168.100.1.  Clients on VLAN 41 can PING and trace to the default gateway 100.1.  VLAN 41 clients are also able to get DHCP info from VLAN 1.  NSlookup fails when using the ISP DNS servers.  NSlookup is suscessful when using our internal DNS servers, but web pages are not returned.  It eventually fails.We've tried to set the DFGW on the clients to both 41.1 and 100.1 with no success.
 
100.2 know where to find 41.1 interface for the 41.0 network. The router/gateway can PING the clients on VLAN 41, 192.168.41.0 network and visa-vera.
 
It seems like the clients are not able to get through 100.1 to the internet or the gateway/router doesn't know how to get packets back to the clients.A static entry was made on the router that mapped back to the next hop at 100.2.  1 Someone alluded to a NAT issue, where the returning packets have information for the 100.0 network only and the internet router doesn't know to send the packets through to the 41.1 interface to the clients.

View 2 Replies


ADVERTISEMENT

Cisco Switching/Routing :: 2970 Port Based ACL Counters

Oct 16, 2012

This is a continuation of my last post in which I need to apply ACLs to the physical ports within Etherchannels. The switch is a Catalyst 2970 running IOS 12.2. These Etherchannels are configured as trunks with 2 VLANS allowed on each trunk.I have applied an inbound ACL on the physical ports that filters based on layer 3 and layer 4 traffic. The issue that I am seeing is that the counters for the ACL are not increasing even though the ACL is clearly doing its job. At the end of the ACL I have an entry of "permit ip any any". Removing this from the list causes connectivity problems to the server on this port. Adding it back and everything is back to normal. However the counters don't increase. At first I thought maybe this wasn't supported on this switch but then I noticed the counter had increased to "2 matches" later in the day. What is the normal behavior is for this switch and does it support logging on an ACL entry as well.

View 2 Replies View Related

Cisco Switching/Routing :: Catalyst 2970 Switch For 2 Vlans

Oct 14, 2012

I am using a catalyst 2970 switch for 2 vlans. Corporate data and a separate VLAN for backups. What I want to do is create an LACP etherchannel to the switch and also trunk these ports so the server is part of both VLANS.Due to fact that some of these servers are on totally separated networks, they really shouldn't be able to talk to the backup server. Creating the VLAN for backups works to achieve this. I plan to create inbound ACLs on each port to allow only the ports and IPs for the backup network and allow everything we need for corporate data.I read somewhere that you can't have ACLs on an etherchannel and I just want to get it all straightened out. I notice I can't add an access group to the port-channel itself but I can on the port- channel member ports. Is this all I need to do or does this not work?

View 1 Replies View Related

Cisco Switching/Routing :: 2970 VTP Changed From Client To Transparent

Feb 29, 2012

After changing the VTP mode to from client to transparent, I noticed the output of 'show run' now displays the vlans. I don't have any spare 2970s to check this with at the moment. Output of 'show run' looks like this now with vlans info, this was not shown before changing the VTP mode.
 
vlan 2
name 16.6.16.0/27
!

[Code]......

View 3 Replies View Related

Cisco Switching/Routing :: 2970 - Trunk To NetGear GSM7224?

Jan 16, 2012

I have a Cisco 2970 port 24 configured as a trunk port to handle all 11 vlans.  This switch is also plugged into a couple other Cisco switches all is good on that side.
 
Here comes the ODD ball of the bunch.  Since our wondeful execs wont let us buy anymore Cisco switches till our numbers get better they gave me this pos Netgear GSM7224.  I know this isnt a Cisco product but someone out these has been thru this before.

View 3 Replies View Related

Cisco Switching/Routing :: (no Shutdown) Command Is Not Working In 2970 Switch Port

Apr 9, 2013

a switch port is shutdown, but when i use NO SHUTDOWN command it is working and shows administratively down. like this command does not affect on it. i should enable this port? what can i do btw, port is not in errdisable and portfast is enabled.

View 3 Replies View Related

Cisco Switching/Routing :: VLAN Routing To Internet Through Firewall 3560G

Jul 24, 2012

Since two weeks I have a problem with the VLANs who I started to configure. I hope together we find the way.I have 5 VLANS configured in a CISCO 3560G switch. In my windows server 2003 I configured DHCP scope for each VLAN.One of the requirement to connect vlans each other is to put the IP of each vlan as gateway in the clients.So, how can I do to access to internet?. The ip of my Firewall are in one of the VLAN´s.When the configuration of the LAN only had one DHCP scope the gateway was the ip of my firewall. But now i don´t know how to configure the DHCP server, or the firewall, or the switch, or all of them To get access to internet.

View 2 Replies View Related

Cisco Switching/Routing :: 1841 Vlan 5 Cannot Access Internet

Oct 31, 2012

i have router 1841 have 2 interface.i make routing between vlan  by subinterface in router and in switch trunk but vlan 5 cannot access internet

View 3 Replies View Related

Cisco Switching/Routing :: SG-300 Vlan Unable To Access Internet

Apr 1, 2013

I am using a Cisco SG-300 28 port switch in layer 3 mode as my default gateway for all my devices. I have two vlans on the switch, vlan 1 and vlan 4. Both are pulling valid IP addresses in their scope from the DHCP server, and both have valid DNS settings. I set a static route to the Internet on the switch to our firewall (192.168.5.254). All devices connected to vlan 1 are able to access the Internet, however all devices connected to vlan 4 cannot get past the switch. A tracert from one of these devices shows it hits the switch as the gateway, but gets no further. [code]

View 4 Replies View Related

Cisco Switching/Routing :: 2960 No Internet Access From VLAN

Feb 6, 2012

I have a 2960-S running the lastest software for testing on my bench:

[code]
Switch Ports Model              SW Version            SW Image                
------ ----- -----              ----------            ----------              
*    1 24    WS-C2960-24-S      15.0(1)SE2            C2960-LANLITEK9-M  
[/code]

I have set up VLAN 2 on 192.168.2.0/24 with the switch as the DHCP server.  The switch is connected to an RV082 router which is at 192.168.1.65/27.  Once I figure out what I doing I'll eventually shift that to 192.168.1.0/24 or something similar.  So I have my switch acting as the DHCP server for VLAN 2 but I can't figure out how to get it to access the internet.
 
I found this example to set up the DHCP server:
[code]
###################################
this works to get vlan 2 to serve ips
conf t

[Code].....
 
The RV082 doesn't support trunks AFIK and I'm pretty much a newb at this stuff.  TIA.  I guess I should get a real router and I most likely will but I'd like to get this working if possible before taking the next plunge.

View 7 Replies View Related

Cisco Switching/Routing :: 5548 Prevent VLAN From Internet Access

May 9, 2012

At the core of my network I have two Nexus 5548's with the routing/L3 daughter installed. They have a default route that points to my ASA 5520 for Internet access. I have configured a VLAN that I do not want to have access to the Internet. What is the best way of preventing this access?  ACL on the Nexus or Firewall rules on the ASA?

View 1 Replies View Related

Cisco Switching/Routing :: 2960S / 2911 / ASA 5510 - VLAN Can't Get To Internet

Sep 24, 2012

Have multiple Catalyst 2960S switches, Cisco 2911 router and ASA 5510 firewall.
 
On the router have subinterfaces created for the VLAN's Int FA0.0/41 for wirless VLAN setup with IP 10.10.41.100 Int FA0.0/60 for new Voice VLAN setup with IP 10.10.60.100 Internal network is 10.10.10.0/24 and LAN IP of router is 10.10.10.100 Have default route setup to push traffic from the router to the firewall ip route 0.0.0.0 0.0.0.0 10.10.10.251
 
On the firewall have added the new VLAN 10 (10.10.60.0) to the network object-group Have configured route inside command route 10.10.60.0 255.255.255.0 10.10.10.100 1 Have also added the NAT command nat (inside) 1 10.10.60.0 255.255.255.0
 
On the 2960 I have my laptop connected to port 45 and I have it configured as follows switchport mode access switchport access vlan 10
 
I assign my computer a static IP address of 10.10.60.84/255.255.255.0/10.10.60.100 with 10.10.10.11 as DNS server.  When I do this, I can ping anything on the 10.10.60.0 network, I can ping anythign on the LAN 10.10.10.0 network.  I am able to connect MSN messenger, I am able to do NSLOOKUP and get outside IP addresses to resolve. I am unable to browse the Internet though.  I am not sure where the problem is at though.  It doesn't make sense to me, as it is setup the same way as VLAN 41 which is the wireless network, and when users connect to that, they get out to the Internet with no issues. 

View 15 Replies View Related

Cisco Switching/Routing :: How To Migrate From Fixed Router To Vlan Routing On 4507

Feb 16, 2012

Any "best practices" or recommendations on how to migrate from a fixed router (3745) to vlan routing on Catalyst 4507 switches in order to minimize the disruption to the network.

View 4 Replies View Related

Cisco Switching/Routing :: Multiple VLAN Routing Tables For 3750 Catalyst

Oct 24, 2012

I have a network with a Catalyst 3750 as the main switch and then some Catalyst 2960 switches that are plugged in to that. I have a server running windows server 2008 with a couple of virtual machines running in Hyper-V. I created 4 VLANS listed below and gave the 3750 the following IP Address.I would like the 3750 to only be configurable from VLAN 40 but currently every VLAN can connect to it, I noticed in the standard web page settings there was a setting for "Management VLAN" but it was set to 1 and would not let me change it, I kinda assumed that was for the management port in the back.-Now the tricky part, I was trying to set up routing between the VLANs and so far I have only been able to get a sort of "all or nothing" routing to work. I can turn IP routing on and add two or more VLANs to the routing and it works fine. But what I was hoping to do is create a couple of "junction vlans" that would only route to one or two other vlans. For instance, I wanted to create a VLAN 100 that routed to VLAN 20 and 30 but nothing else. I also want to route VLAN 1 just to VLAN 30, and so on. I am able to do each one of the cases but only one, it seems like the switch only supports one "routing table" am I missing something or is this just a limitation of the switch?

View 2 Replies View Related

Cisco Switching/Routing :: Catalyst 3750 Multi-cast VLAN Routing

Oct 28, 2012

I have a network with several catalyst 2960 switches and one catalyst 3750. I have created two VLAN and set up the proper routing and everything is working fine there. I have a client/server application that used multicast in the initial start up for the client to determine available servers, the issue is one of my clients is on a different VLAN then the server. I am able to route the multicast using MVR as long as both the server and the client are plugged into the 3750 by creating a static route, making the server a source port and the client a receive port. Unfortunately I need the client and the server plugged in to different 2960s. My question is how do I establish multicast routing between the two and perferably do it dynamically (always route multicast traffic from one VLAN to another).

View 2 Replies View Related

Cisco Switching/Routing :: Does Catalyst 3550 Support Inter Vlan Routing

Jul 24, 2007

Does Catalyst 3550 switch support inter vlan routing ?

View 12 Replies View Related

Cisco Switching/Routing :: Inter VLAN Routing On N5548P Without L3 Daughter Cards

Jun 1, 2013

I have a DC topology based on 2 layers, access and aggregation, based on 2 pairs of N5548Ps, both without L3 Daugher Cards. My intent is to use the aggregation N5K pair as L3 inter VLAN layer, so I configured all the VLAN default GWs there. The 2 layers are interconnected via vPC, in a double-sided vPC topology for some N2Ks and some vSwitches. The point is that, despite connecitivity is working fairly ok, for some applications, like file transfer via either FTP or HTTP, between hosts in different VLANs, the performance is too poor. The file transfer starts ok, but after a while it becomes lower and lower. ICMP is working, but I can see some strange random behaviour, like having some packets taking more that 20 ms (sometimes 40 or more), whilst average is 2 ms.

I read through some articles saying that until you don´t have the L3 license (the one coming with L3 Daughter Cards) you can expect some weird behaviour on L3 level. Is that true?. What can I do apart of purchasing L3 Daughter Cards?. Can I enable L3 Basic license at the moment (I don´t need dynamic routing for now).
 
Here some excerpts of what I´m saying:
 
PING results:
10000 packets transmitted, 10000 packets received, 0.00% packet loss
round-trip min/avg/max = 0.809/2.496/57.559 ms
 System version: 5.0(3)N2(1)
 
License and features on the N5Ks:
 
switch# sho license usage
Feature                      Ins  Lic   Status Expiry Date Comments
Count
--------------------------------------------------------------------------------
FCOE_NPV_PKG                  No    -   Unused             -
FM_SERVER_PKG                 No    -   Unused             -
ENTERPRISE_PKG                No    -   Unused             -

[code]....

View 3 Replies View Related

Cisco Switching/Routing :: Inter-VLan Routing On Catalyst 3750 Switch

Dec 17, 2011

I have been looking into this for a while and I can't seem to figure out why my 2nd vlan is not able to connect properly to the net.
 
My switch has 12 ports where my devices connects directly, they are all on Vlan 1 and they all work perfectly. on Port 12 I have a dlink router that is connected to a cable modem. the dlink router has an Ip address of 192.168.0.20
 
I created a second vlan (vlan2) and enabled dhcp relay on it. then I assigned port 9 on the switch to  (vlan2)my laptop which is connected to port 9 seems to get an ip address fine and able to ping only some devices on my network (vlan1) and is not able to go out to the internet.  I think it has to do with the routes. [code]

View 4 Replies View Related

Cisco Switching/Routing :: 5505 Inter-vlan Routing With Multiple Gateways

Feb 15, 2013

We have two Cisco 5505 firewalls connecting to two ISP's . The two internal LAN's on the firewalls are 192.168.184.0/24 & 192.168.186.0/24. We also have a Cisco C3560x layer3 switch with vlan interfaces 184.3 & 186.3. We have two DGS-3100 Dlink layer 2 switches connecting our users to the Layer 3. Ip routing is enabled for intervlan communication & I can reach the Switch interfaces & firewall gateways from machines on both on the vlans.We have pbr enabled on the 3560 & users only on the .186 network can get to the internet. The switch is running the ipservices license & the sdm template is "desktop routing" .

Users on the .184 cannot access the internet but we can ping the layer3 interface & the firewall gateway. [code]

View 20 Replies View Related

Cisco Switching/Routing :: Nexus 5010 Support For Inter VLan Routing

Jan 10, 2012

Can nexus 5010 supports inter v lan routing , as there is no core switch and router available in current network.

View 2 Replies View Related

Cisco Switching/Routing :: 3750 Inter Vlan Routing Configuration

Mar 24, 2013

In 3750 switch,I have configured intervlan routing.I have three vlans Vlan 10,vlan 20,Vlan 30 and I have assigned IP address for that Vlan.In vlan 10,I have connected one systen gigabitethernet 0/1 interface.From my system I am able to ping vlan 10 ip address but I can't able to ping other vlan ip address (vlan 20,vlan 30).Is it possible to up the protocol for all that time.

View 2 Replies View Related

Cisco Switching/Routing :: Inter-VLAN Routing Using 877 And SG300-10 Switch

Feb 5, 2012

I recently set up a small photography business and am trying to get a Cisco 877 and Cisco SG300-10 switch to talk to each other.
 
What I want is for the Cisco 877 to handle the internet and the SG300-10 to handle the local network,
 
I have set up 2 vlans in trunk mode on the switch and want vlan2 to manage local traffic and vlan3 to handle the internet.
 
I have got the 877 connecting to the internet what I dont have, traffic going to vlan2 on the switch from the 877
 
Look at the running configs for the switch and the router and tell me how to get the vlan on the router to pass traffic to the switch. In a nutshell I am inserting the internet into the switch but am not sure how to progress. I have the c870-advipservicesk9 image file on the router. 

Switch Config
 
interface  gi2
description connection-to-data-vlan
exit
interface  gi3
description connection-to-internet-vlan
exit
vlan database (code )

View 11 Replies View Related

Cisco Switching/Routing :: ASA 5520 / Preventing Inter VLAN Routing?

Mar 28, 2013

I am working for a large campus network. The network has more than 70 VLANS in a Layer 3 Switch(Catalyst 4503). Customer wants to stop intervlan routing between all vlans except 2 vlans. How will i do that? I have also a Firewall (ASA 5520) & a Router (2811) in up of the switch. Besides this, I have run HSRP in Layer 3 Switches for redundancy.how will i stop intervlan routing between VLANS except 2, with ACL or any other process has?

View 10 Replies View Related

Cisco Switching/Routing :: 3560 VLAN Routing Between Switch And Router

May 8, 2012

I have an environment of 3 X 3560G of which I have 1st switch-CORE(f0/10) connecting to the VPN router(CE) interface-f0/0. Remaining 2 Cisco 3560's(Access) are connected to Gi0/1 and Gi0/2 on the 1st switch-CORE via gi0/1 . On all three switches I have created multiple VLANs and assigned ports to these VLAN. The switch to switch connection is trunk allowing all VLANs created on all these 3 switches. Now the issue is how I am going to have all these VLANs routed through single interface on the routeri-e f0/0, as all these subnets will communicating to remote site over VPN. What should be default gateway on the 2 Access switches and the CORE switch, also what static route should be on router to reach all subnets(VLANs) created on these 3 switches.
 
I have read inter-VLAN routing i-e creating sub interfaces on router but dont want to proceed with that and looking for any other way to have my VLANs talk on all three switches and then are accessible to remote site ove VPN?

View 9 Replies View Related

Cisco Switching/Routing :: CAT 4006 VLan Routing Without Setting Interface IP?

Feb 26, 2013

We got a layer3 switched network, with one vlan for every switch, routed by a cat4006. [code] So can we put some ports on different switches in, let`s say vlan 50, with different ips? For example, Port 0/3 on Switch 1 and 0/8 on Switch 2, but keeping the ip of the "old" vlan? Or is it necessary to configure a specified vlan interface with ip-adress for every vlan if i want to route it?

View 4 Replies View Related

Cisco Switching/Routing :: 3560 - Unable To Perform VLAN Routing

Apr 28, 2012

We recently purchased Cisco 3560X Layer3 Switch. We need to perform simple Inter VLAN routing.  We have configured VLAN1 (name-server_vlan) and VLAN2 (name- user_vlan). We have also assigned the Ports and IP address to both the VLANs. After assiging this if we plug Laptop A into VLAN1 then it doesnt communicates with Laptop B (btw, Laptop A is able to Ping VLAN2 Gateway ) in VLAN2 but on the other hand Laptop B is able to communicate with Laptop A and ping everything i.e. Gateway of VLAN1.

View 17 Replies View Related

Cisco Switching/Routing :: 6500 / Restricting Inter-VLAN Routing?

May 9, 2013

I'm looking to restrict Inter-VLAN routing through L3 switch (cisco 6500) and wanted to know best possible way to do it. I used VACL and achieved success to some extent, but my config is making clients take up to 5-6 mins to authenticate IP address from the DNS (bootps).My VACL config was as follows:
 
Subnet to restrict is 10.100.15.0 (VLAN 15)
 STEP 1: Created extended ACL to allow bootpc/bootps through DNS
ip access-list extended EACL_DNS
permit udp any eq bootps any
permit udp any eq bootpc any
 
STEP 2: Created standard ACLs to allow only relevant subnet, server VLANs & some IPs from other subnets for printers/scanners etc.

ip access-list standard SACL_VLAN_15
permit 10.100.15.0 0.0.0.255 (the subnet I'm restricting)
permit 10.100.50.0 0.0.0.255 (server VLANs)
permit 10.100.25.45 0.0.0.0 (printer in another VLAN which has to have access in VLAN 15)
 
STEP 3: Created VLAN access list

vlan access-map VACL_15 10
match ip address EACL_DNS
action forward
 vlan access-map VACL_15 20
match ip address SACL_15
action forward
 
STEP 4: Applying VLAN Access list on VLAN 15 vlan filter VACL_15 vlan-list 15 Though the above works, below is noted:

1. I'm still able to PING 10.100.15.2 (the switch virtual interface) from outside the subnet, which I don't intend to do so. Howeve all cients in the subnet have no connectivity from outside the VLAN 15.
 
2. As mentioned its taking quiet some time to negotiate with the DNS server at system boot time.

View 3 Replies View Related

Cisco Switching/Routing :: Nexus 7010 - Inter-VLAN Routing On Multilayer VPC Environment

Feb 16, 2011

you find attached my network architecture with 2 Nexus 7010 on core layer and 2 Nexus 5020 on distribution layer, each one with 1 N2148T fabric extender switch. PC-A1 and PC-A2 are connected to one N2148T, PC-B1 is connected to the other N2148T. Nexus-7000-1 is HSRP Active for all VLANs, Nexus-7000-2 is HSRP standby. PC-A1 and PC-A2 are connected to VLAN A, PC-B1 is connected to VLAN B. PC-A1 and PC-A2 have the same default gateway correspondent to IP HSRP on VLAN A. It happens that PC-A1 is able to ping PC-B1 while PC-A2 is unable to ping PC-B1. If I issue a traceroute from PC-A2 I see Nexus-7000-2’s physical IP address as the first hop even if Nexus-7000-2 is HSRP standby. After the first hop the traceroute is lost. If I shutdown Port-channel 20 on Nexus-5000-2, PC-A2 starts to ping PC-B1.I can’t understand what’s wrong in this architecture.

View 6 Replies View Related

Cisco Switching/Routing :: Power Connect 6224 With Routing Enabled With Several VLAN Setup

Jan 19, 2013

I have a power conncet 6224 with routing enabled with several VLANs setup.VLAN Database: 6,8,10,90-254VLAN 6 is our management vlan10 is for our core network services (DNS, Domain, Exchange etc)90-254 are isolated vlans.What I need to accomplish is to prevent vlans 90-254 from communicating with each other and only allow communication to VLAN 10 and the internet. All internet firewall work will be handled by our Sonicwall. [code]

View 1 Replies View Related

Cisco Switching/Routing :: 3560 Possible To Create Vlan Inside Transport Vlan?

Jan 10, 2012

Between our hosting and a customer we have an extended vlan, traveling on a fiber, between two cisco 3560 switches.The thing is, that we want to create one or more vlans inside that extended vlan, in some way if possible?

View 3 Replies View Related

Cisco Switching/Routing :: 3750 - Extending VLAN To Remote Switch That Already Has VLAN ID In Use

Jan 10, 2013

I have two networks at two sites with a dot1q trunk between the two L3 switches at both sites (no routers involved)
 
SITE A - Cisco 3750 L3 - VLAN ID 50
10.10.50.0/24
 
SITE B - Cisco 3750 L3 - VLAN ID 50
10.20.50.0/24
 
I would like to extend the SITE A VLAN to SITE B so that I can move hosts from SITE A to SITE B without needing to change their IP address but the vlan ID is already in use. Obviously the easy solution is to change the VLAN ID for one or other of the sites but both sites contain hosts that run 24/7. Is there a way to join two VLANs with different IDs together.So for example I create a new VLAN 60 at SITE B and associate it with VLAN 50 at SITE A.

View 4 Replies View Related

Cisco Switching/Routing :: Route Data From Vlan 10 To Vlan 20 On 2960s?

Mar 31, 2013

i need to solves this little problem on 2960S lan BASE but i dont know if it is possible.
 
Uplink port config for gi 1/0/28 is:
 
switchport mode trunk
switchport trunk alloved vlan 10,11
  
but on interface gi 1/0/1 i want to have data from vlan 10 tagged as VLAN 20.
At this time i have solved this issue very primitively
 
I have set up gi 1/0/2 as int mode acces, acces vlan 20 and i have connected gi 1/0/2 with gi 1/0/3 with eth cable. int gi 1/0/3 is switchpor mode acces, switchport acces vlan 10

View 4 Replies View Related

Cisco Switching/Routing :: 3750 Private VLAN With Routing

Jan 1, 2012

I have a Cisco 3750 with private VLANS configured.. VLAN 2 is the "primary", VLAN 3 is "isolated" and VLAN 4 is "community".  This is all working correctly, however I now have the need to another VLAN called "production". I need the production VLAN to be able to reach all the private VLAN hosts (community and Isolated), and vice versa

View 2 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved