VSR1001 not routing between vlan interfaces

[Sameer Zeidat]

Hello,

I can't get the VSR1001 to route between vlan interfaces? Not sure if this is by design or I'm not configuring it properly.

I have the network setup below:

I need subnet 172.16.0.0 devices to reach subnet 192.168.1.0.

The following configuration doesn't work:

ip route 0.0.0.0 0 10.1.2.1
int g1/0
    port link-mode bridge
int g2/0
    port link-mode bridge
    port link-type trunk
    port bridge vlan permit all
int vlan 1
    ip address 10.1.2.2 24
int vlan 331
    ip address 172.16.1.1 16

But the following configuration works:

ip route 0.0.0.0 0 10.1.2.1
int g1/0
    port link-mode route
    ip address 10.1.2.2 24
int g2/0
    port link-mode bridge
    port link-type trunk
    port bridge vlan permit all
int vlan 331
    ip address 172.16.1.1 16

The problem with the second config is that it won't allow subnet 172.16.0.0 to reach 10.1.2.0, which is another requirement that I have. I'm guessing it's because g1/0 won't bridge traffic to 10.1.2.0 since it's a routing interface. And I can't add a third bridge interface to the VSR1000 on 10.1.2.0, because the max is two interfaces!

Appreciating any suggestions.

Thanks,

Sameer

[Mike79]

Hello,

I'm just curious, if you have added vlan 331 in your VSR router?

I think if you have coorect vlan setup, first part of the config should work.

Br,

Michal

[Sameer Zeidat]

Hi,

Vlan 331 was defined. The problem was fixed by removing vlan 1 from g2/0. Not sure why, but having it tagged on g2/0 and untagged on g1/0 would stop VSR routing properly.

int g2/0
   undo port trunk permit vlan 1

As for reaching subnet 10.1.2.0, that was a firewall issue in the main router. Nothing to do with the VSR. Once fixed, both configurations worked. So I was wrong about a routing interface not being able to bridge.

Cheers,

Sameer