How to setup interVlan communication

[kenleung77]

I have purchased a 3com switch 4500( 3CR17761-91) 5 days ago.  I am worried over how to setup interVlan communication on it.  Could you please help me to solve the technical problem shown as below? Otherwise, i will highly probably get sack. Please help me!

I have build up 3 Vlans and details as following:

Vlan 1 : 192.168.1.254  255.255.255.0 ---------> connected with a group of desktop computer and a router (1) to internet

Vlan 2 : 192.168.2.254  255.255.255.0 ---------> connected with a computer (VPN client) and a route (2) to internet

Vlan3  : 192.168.3.254 255.255.255.0 ----------> connected with a network printer.

Routing table:

0.0.0.0     0.0.0.0     192.168.1.1   Vlan-inter1   ( Router 1)

192.168.1.0     255.255.255.0     192.168.1.254 Vlan-inter 1

127.0.0.0 .............   .............    Vlan-inter 1 

192.168.2.0     255.255.255.0     192.168.2.254 Vlan-inter 2           

127.0.0.0 ............  ...............    Vlan-inter 2

192.168.3.0     255.255.255.0     192.168.3.254 Vlan-inter 3

127.0.0.0 .............   .............    Vlan-inter 3

I would like the network printer share with Vlan 1 and Vlan 2, but between Vlan 1 and Vlan 2 must be isolate. I have use command "ping" a lot of time between Vlans, but failed. 

How can i setup a interVlan communication between them?

is the network infrastructure is wrong ?

[vangass]

Hello,

Did You enable ip routing on the switch? Or are you using router (192.168.1.1) to do intervlan routing?


If the second option is correct than you have to connect router to the trunk port and allow all necessary vlans (1,2,3) on it. If you want to isolate traffic beetwen vlans than it should be done on the rotuer.

Regards,


V.





PS. Best practise is not to use vlan1 for hosts/servers.

[kenleung77]

Thanks for your helping.

I would like to choose the first option to do the rounting in a switch. I have no any idea how to setup an interVlan communication in a switch. Although the entry of Routing table is correct, i could not ping them correctly. Am i miss something to do?  How to enable the ip routing? Do i need entry any command?

I eagerly looking forward to you reply.

[vangass]

Hello,

You have to set IP gateway on each desktop computers, printers etc to indicate vlan (1,2,3) IP address on the swtich.


e.g. for vlan1 ip gateway should be 192.168.1.254 etc. After these moves You should get routing between vlan's.


To isolte vlan1 and vlan2 You should probably use some kind of ACL's. I do know how to do this on linux router but I've never done this on the switch.

Good luck,


V.