Page 1 of 1

Issue while connecting to Internet using multiple vlan

Posted: 06 Jul 2024 13:22
by prabha_classic
Hello,

I have below topology:

Core_switch -------SW6860 ----------Device1, Device2, Device3
VLAN478

The SW6860 is in my lab and I have 3 devices each configured with different VLAN's (40,50,60) and for different purpose.But the Internet can be reached by using VLAN 478. Since those 3 devices are connected in three different ports, I can tag VLAN478 as default VLAN and I can reach internet. But due to some reason, I need to place all 3 devices in three different VLAN.
I have below config:

The trunk port is tagged (802.1q) with VLAN478
Each switch port is tagged (802.1q) with 40,50 and 60 respectively.
Enabled IP interface on all 4 VLAN.

I am unsure if I have to make some other configuration to make the devices to reach Internet.

Below is my config:

vlan 478 ad enable
vlan 40 ad enable
vlan 50 ad enable
vlan 60 ad enable

ip interface vlan-40 address 171.40.1.1 vlan 40
ip interface vlan-50 address 171.50.1.1 vlan 50
ip interface vlan-60 address 171.60.1.1 vlan 60
ip interface vlan-478 address 171.78.1.1 vlan 478

ip static-route 0.0.0.0/0 gateway 171.78.1.2 metric 1

vlan 478 members port 1/1/1 tagged
vlan 40 members port 1/1/1 tagged
vlan 50 members port 1/1/1 tagged
vlan 60 members port 1/1/1 tagged
vlan 40 members port 1/1/10 tagged
vlan 50 members port 1/1/11 tagged
vlan 60 members port 1/1/12 tagged

all ports carry VLAN 1 as default/ untagged VLAN

Pls note that, the devices that I connect send tagged traffic towards upstream.

I am not expert in networking, but I am forced to perform this for some internal politics. Kindly advise

Re: Issue while connecting to Internet using multiple vlan

Posted: 06 Jul 2024 23:54
by Gleylancer
It probably doesn't work because whatever your internet router is, it doesn't know the route back to the internal networks.

Re: Issue while connecting to Internet using multiple vlan

Posted: 07 Jul 2024 06:03
by Cristek
A lot of information is missing here.
The problem likely lies in the core switch as it might not have a path back to your subnets (assuming your core is where internet comes into).