4800G-24SFP Routing Issues

[Zoni01]

Hi everybody,

i'm having some problems with the setup of a 4800G-24SFP as a default gateway for 11 subnets.

At our location we have 11 subnets (we got them from our headquaters) and we're using a 4800G-24SFP as the default gateway.

There is a Cisco router from the headquaters, I can't access. I only know the ip address.

I set up a Vlan for every subnet (ip subnet based vlan) with an associated Vlan Interface,  set the ports to hybrid, allowed all the vlans and set a default route to the Cisco Router.

Now the issue:

My computer is connected to a switch that is connected to the 4800G-24SFP. Now, if I start Wireshark in promiscious mode on my computer I see thousands of packets, that aren't intended for my computer. For example, if a user at our location opens a website using the proxy at the headquarters, I see the answer packets from the proxy?! The have the source ip address of the proxy, but the source mac address of the Cisco Router. What do I have to configure, to allow the 4800G-24SFP to do IP Routing?

In the meantime I enabled proxy arp, because I also received the packets, if a user on subnet was accessing a file server in another subnet. I'm wondering if I have to enable local proxy arp, too? The subnets should be able to communicate with each other, there is no need for isolation etc.

In the past, the previous default gateway switches, had only one Vlan with the subnet addresses configured as additional ip addreses. But there is a limit of 9 ip addresses per Vlan Interface and therefor I set up the ip subnet based Vlans.

Is there any other way I could achieve, that the 4800G-24SFP is the default gateway for the subnets at our location?

Thanks in advance,

Zoni01

[Fredrik Lönnman]

Can you please show us the config? I dont think ip subnet based vlan is what you actually want.

[Zoni01]

Hi,

i'll post the config on monday.

[Zoni01]

Here's the basic configuration as far as I remember (ip-addresses exchanged):

vlan 1

vlan 2

...

vlan 11

ip-subnet-vlan 1 ip 192.168.1.0/25

ip-subnet-vlan 2 ip 192.168.1.128/25

ip-subnet-vlan 3 ip 192.168.2.0/25

ip-subnet-vlan 4 ip 192.168.2.128/25

ip-subnet-vlan 5 ip 192.168.3.0/25

ip-subnet-vlan 6 ip 192.168.3.128/25

ip-subnet-vlan 7 ip 192.168.4.0/24

ip-subnet-vlan 8 ip 192.168.5.0/25

ip-subnet-vlan 9 ip 192.168.5.128/25

ip-subnet-vlan 10 ip 192.168.6.0/25

ip-subnet-vlan 11 ip 11.11.0.0/23

interface Vlan-Interface 1

  ip address 192.168.1.2 255.255.255.128

  proxy arp enable

interface Vlan-Interface 2

  ip address 192.168.1.129 255.255.255.128

  proxy arp enable

...

interface Vlan-Interface 11

  ip address 11.11.0.1 255.255.248.0

  proxy arp enable

port GigabitEthernet 1/0/1

  port link-type hybrid

  port hybrid vlan 1 to 12 untagged

  port hybrid ip-subnet-vlan vlan 1

  port hybrid ip-subnet-vlan vlan 2

  port hybrid ip-subnet-vlan vlan 3

  port hybrid ip-subnet-vlan vlan 4

  port hybrid ip-subnet-vlan vlan 5

  port hybrid ip-subnet-vlan vlan 6

  port hybrid ip-subnet-vlan vlan 7

  port hybrid ip-subnet-vlan vlan 8

  port hybrid ip-subnet-vlan vlan 9

  port hybrid ip-subnet-vlan vlan 10

  port hybrid ip-subnet-vlan vlan 11

... and so on for the other ports

ip route static 0.0.0.0 0.0.0.0 192.168.1.1 (<- Cisco router)

The switch is our core switch and has (except the Cisco router)  only edge switches connected.

One of the main problems is, that the subnets are distributed all over our location, causing that there is not only one subnet on the uplinks to the edge switches.

I hope I didn't miss something on the configuration.