Intervlan Routing Problems

[rafael]

hey guys,

need your help. i would like to expand my network. at the moment we have one flat network. all switches are connect directly to the 10.39.0.2 switch.

i expanded the network with the switch 10.39.0.6. on this switch the vlan 1 and the vlan 2 are connected --> ip interface "Labor" address 172.16.0.1 mask 255.255.252.0 vlan 2 ifindex 2 and ip interface "management" address 10.39.0.6 mask 255.255.248.0 vlan 1 ifindex 3.
vlan 1 should go out the internet throught 10.39.0.2 and vlan 2 should go out throught 172.16.0.1 on 10.39.0.6.

from vlan 2 i can see the vlan 1....but vlan 1 can't see vlan 2!

configuration;

switch 10.39.0.6

Code: Select all

vlan 1 enable name "Produktion"
vlan 2 enable name "Labor"

ip static-route 0.0.0.0/0 gateway 172.16.0.1 metric 1

ip interface dhcp-client vlan 1 ifindex 2
ip interface "Labor" address 172.16.0.1 mask 255.255.252.0 vlan 2 ifindex 2
ip interface "management" address 10.39.0.6 mask 255.255.248.0 vlan 1 ifindex 3

vlan 2 port default 1/26
vlan 2 802.1q 1/1 "TAG PORT 1/1 VLAN 2"
vlan 2 802.1q 1/2 "TAG PORT 1/2 VLAN 2"

switch 10.39.0.2

Code: Select all

vlan 1 enable name "Produktion"
vlan 92 enable name "Erdgas"
vlan 93 enable name "Ueber"
vlan 93 port default 5/24
vlan 101 enable name "Wlan Managment"
vlan 101 port default 1/1
vlan 2 enable name "Labor"

ip interface dhcp-client vlan 1 ifindex 1
ip interface "next-gateway" address 10.39.0.2 mask 255.255.248.0 vlan 1 ifindex 2
ip interface "gas" ifindex 3
ip interface "management" ifindex 4
ip interface "Ueber" address 192.168.93.1 mask 255.255.255.0 vlan 9 ifindex 6
ip interface "Erdgas" address 10.39.8.5 mask 255.255.255.252 vlan 92 ifindex 7

ip static-route 0.0.0.0/0 gateway 10.39.0.2 metric 1

vlan 101 802.1q 1/6 "TAG PORT 1/6 VLAN 101"
vlan 101 802.1q 1/9 "TAG PORT 1/9 VLAN 101"
vlan 101 802.1q 1/10 "TAG PORT 1/10 VLAN 101"
vlan 101 802.1q 1/14 "TAG PORT 1/14 VLAN 101"
vlan 2 802.1q 1/16 "TAG PORT 1/16 VLAN 2"
vlan 101 802.1q 1/21 "TAG PORT 1/21 VLAN 101"
vlan 2 802.1q 1/21 "TAG PORT 1/21 VLAN 2"
vlan 101 802.1q 1/22 "TAG PORT 1/22 VLAN 101"
vlan 101 802.1q 1/23 "TAG PORT 1/23 VLAN 101"
vlan 101 802.1q 1/24 "TAG PORT 1/24 VLAN 101"
vlan 101 802.1q 2/1 "TAG PORT 2/1 VLAN 101"
vlan 101 802.1q 2/3 "TAG PORT 2/3 VLAN 101"
vlan 101 802.1q 2/4 "TAG PORT 2/4 VLAN 101"
vlan 101 802.1q 2/5 "TAG PORT 2/5 VLAN 101"
vlan 92 802.1q 2/6 "TAG PORT 2/6 VLAN 92"
vlan 93 802.1q 2/12 "TAG PORT 2/12 VLAN 93"
vlan 101 802.1q 3/1 "TAG PORT 3/1 VLAN 101"
vlan 101 802.1q 4/1 "TAG PORT 4/1 VLAN 101"
vlan 101 802.1q 5/1 "TAG PORT 5/1 VLAN 101"

can someone help me out? btw; the network diagram is attached...

thanks in advance

rafael

[devnull]

Hi Rafael.

ip static-route 0.0.0.0/0 gateway 172.16.0.1 metric 1
ip interface "Labor" address 172.16.0.1 mask 255.255.252.0 vlan 2 ifindex 2

-> you are pointing the default route towards the own interface. That does not make sense.

What are your ISP router IPs?

You have two seperate ISPs that you want to use for Labor and Production?
Do you need Production VLAN in Labor ?

You may think about something like:

10.39.0.6:
ip interface "Labor" address 172.16.0.1 mask 255.255.252.0 vlan 2 ifindex 2
ip static-route 0.0.0.0/0 gateway ISP-IP Address

On 10.39.0.2 (same here default route to own interface.. no!)
ip static-route 0.0.0.0/0 gateway ISP-Production-IP
ip static-route 172.16.0.0/22 gateway 10.39.0.6

Often you have only one routing instance, e.g. having a management (not a production) IP for each switch and all Vlan Interfaces on a central routing switch. That makes configuration easy. In your case with two ISPs each for a different vlan you would need Policy based routing - i would no use that and think about something else.

[rafael]

thanks for the reply,

-> you are pointing the default route towards the own interface. That does not make sense.

because the i use a dhcp server in the vlan 2, and the default gateway is 172.16.0.1...but i see i made a misstake there...

What are your ISP router IPs?
the isp router ip for vlan 2 is 172.16.0.1

i thought that the intervlan interface address should be the gateway address, but in my case is not true..

i will try following idea..

10.39.0.6:
ip interface "Labor" address 172.16.0.3 mask 255.255.252.0 vlan 2 ifindex 2
ip static-route 0.0.0.0/0 gateway 172.16.0.1 metric 1

On 10.39.0.2
ip static-route 0.0.0.0/0 gateway 10.39.0.76
ip static-route 172.16.0.0/22 gateway 10.39.0.6

thanks in advance

rafael