LAN Routing
cancel
Showing results for 
Search instead for 
Did you mean: 

8206zl & Management Network

 
AoAIT
Occasional Contributor

8206zl & Management Network

All,

 

I'm stuck and I know it's something simple but it's escaping me.  Any help would be appreciated.

 

We have an 8206zl that is the core switch for 8 different 'wings' within our building.  Each location connects via fiber to the core switch.

 

Each wing has three VLAN's:

10.1.x.0 /24 - Data (x is wing dependant)

10.2.x.0 /24 - Voice (x is wing dependant)

10.3.1.0 /24 - VLAN3 - Management.

 

The core VLAN's are:

10.1.1.0 /24 - Data

10.2.1.0 /24 - Voice

10.3.1.0 /24 - Management.

 

The problem is that, on the Management VLAN (VLAN 3), I cannot communicate past the core switch from the 'VLAN 133 - IT' or 'VLAN100' VLAN's'.  I can ping the core VLAN IP (10.3.1.1) but not beyond that.  I think I haven't 'tagged' a port properly.

 

Any ideas?

 

Here's my config:

Running configuration:

; J9477A Configuration Editor; Created on release #K.15.02.0005

hostname "Core8206"
time timezone -5
ip access-list extended "ACLData"
   exit
ip access-list extended "ACLVoice"
   exit
module 1 type J8702A
module 2 type J8702A
module 3 type J8702A
module 4 type J8702A
module 5 type J8706A
module 6 type J8706A
interface C13
   speed-duplex 10-half
exit
ip routing
vlan 1
   name "DEFAULT_VLAN"
   untagged A1-A24,E1-E24,F1-F24
   ip address dhcp-bootp
   no untagged B1-B24,C1-C24,D1-D24
   exit
vlan 131
   name "VLAN131"
   ip helper-address 10.1.1.200
   ip address 10.1.31.1 255.255.255.0
   tagged F11-F12
   ip access-group "ACLData" in
   exit
vlan 133
   name "VLAN133-IT"
   ip helper-address 10.1.1.200
   ip address 10.1.33.1 255.255.255.0
   tagged F13-F14
   ip access-group "ACLData" in
   exit
vlan 231
   name "VLAN231"
   ip helper-address 10.1.1.200
   ip address 10.2.31.1 255.255.255.0
   tagged E8
   ip access-group "ACLVoice" in
   exit
vlan 132
   name "VLAN132"
   ip helper-address 10.1.1.200
   ip address 10.1.32.1 255.255.255.0
   tagged F9-F10
   ip access-group "ACLData" in
   exit
vlan 232
   name "VLAN232"
   ip helper-address 10.1.1.200
   ip address 10.2.32.1 255.255.255.0
   tagged E7
   ip access-group "ACLVoice" in
   exit
vlan 121
   name "VLAN121"
   ip helper-address 10.1.1.200
   ip address 10.1.21.1 255.255.255.0
   tagged F7-F8
   exit
vlan 221
   name "VLAN221"
   ip helper-address 10.1.1.200
   ip address 10.2.21.1 255.255.255.0
   tagged E6
   ip access-group "ACLVoice" in
   exit
vlan 122
   name "VLAN122"
   ip helper-address 10.1.1.200
   ip address 10.1.22.1 255.255.255.0
   tagged F5-F6
   ip access-group "ACLData" in
   exit
vlan 222
   name "VLAN222"
   ip helper-address 10.1.1.200
   ip address 10.2.22.1 255.255.255.0
   tagged E5
   ip access-group "ACLVoice" in
   exit
vlan 111
   name "VLAN111"
   ip helper-address 10.1.1.200
   ip address 10.1.11.1 255.255.255.0
   tagged F3-F4
   exit
vlan 211
   name "VLAN211"
   ip helper-address 10.1.1.200
   ip address 10.2.11.1 255.255.255.0
   tagged E4
   ip access-group "ACLVoice" in
   exit
vlan 112
   name "VLAN112"
   ip helper-address 10.1.1.200
   ip address 10.1.12.1 255.255.255.0
   tagged F1-F2
   ip access-group "ACLData" in
   exit
vlan 212
   name "VLAN212"
   ip helper-address 10.1.1.200
   ip address 10.2.12.1 255.255.255.0
   tagged E3
   ip access-group "ACLVoice" in
   exit
vlan 110
   name "VLAN110"
   ip helper-address 10.1.1.200
   ip address 10.1.10.1 255.255.255.0
   tagged E2
   ip access-group "ACLData" in
   exit
vlan 210
   name "VLAN210"
   ip helper-address 10.1.1.200
   ip address 10.2.10.1 255.255.255.0
   tagged E24
   ip access-group "ACLVoice" in
   exit
vlan 150
   name "VLAN150"
   untagged D24
   ip address 192.168.150.1 255.255.255.0
   tagged F1,F3,F5,F7,F9,F11,F13,F24
   exit
vlan 100
   name "VLAN100"
   untagged B1-B24,D1-D23
   ip helper-address 10.1.1.200
   ip address 10.1.1.1 255.255.255.0
   exit
vlan 200
   name "VLAN200"
   untagged C1-C24
   ip helper-address 10.1.1.200
   ip address 10.2.1.1 255.255.255.0
   exit
vlan 3
   name "VLAN3"
   ip address 10.3.1.1 255.255.255.0
   tagged F1-F24
   exit
vlan 233
   name "VLAN233"
   ip helper-address 10.1.1.200
   ip address 10.2.33.1 255.255.255.0
   tagged E9
   ip access-group "ACLVoice" in
   exit
vlan 1000
   name "VLAN1000"
   no ip address
   exit
vlan 400
   name "VLAN400-VPN"
   ip helper-address 10.1.1.200
   ip address 10.4.1.1 255.255.255.0
   exit
qos type-of-service ip-precedence
qos device-priority 10.2.0.0/16 priority 5
ip route 0.0.0.0 0.0.0.0 10.1.1.3
snmp-server community "public" unrestricted
snmp-server contact "AoA IT Department" location "Terrace Level MDF"
no autorun
no dhcp config-file-update
no dhcp image-file-update
password manager

1 REPLY
AoAIT
Occasional Contributor

Re: 8206zl & Management Network

Nothing?  No ideas??