3400cl Routing

[jbielot_1]

I'm trying to setup routing on a 3400cl-24 switch to replace an existing Cisco 2610. I've configured a second VLAN with the IP formerally used on the Cisco router. When I view the route table, it lists the network but no traffic is being routed; i.e. I can't ping out through the firewall (192.168.2.2).

Can someone tell me from the config shown below what I missed?

Thanks.

John

- - - - -

Startup configuration:
; J4905A Configuration Editor; Created on release #M.10.41
hostname "3400cl-1"
time timezone -300
time daylight-time-rule User-defined begin-date 3/9 end-date 11/2
interface 2
name "Internet"
speed-duplex 100-full
exit
ip default-gateway 192.168.200.2
ip routing
vlan 1
name "DEFAULT_VLAN"
ip address 172.17.1.254 255.255.0.0
exit
vlan 100
name "INTERNET"
ip address 192.168.200.1 255.255.255.0
tagged 2
exit
gvrp
ip route 0.0.0.0 0.0.0.0 192.168.200.2
no stack auto-join
spanning-tree


IP Route Entries
Destination Gateway VLAN Type Sub-Type Metric Dist.
------------------ --------------- ---- --------- ---------- ---------- -----
0.0.0.0/0 192.168.200.2 100 static 1 1
127.0.0.0/8 reject static 0 250
127.0.0.1/32 lo0 connected 0 0
172.17.0.0/16 DEFAULT_VLAN 1 connected 0 0
192.168.200.0/24 INTERNET 100 connected 0 0

[Jeff Carrell]

the basic config looks ok, but:

the only interface you show in vlan100 is tagged...is the firewall connected to interface 2 on the 3400 and is the firewall ethernet interface also set to tagged?

if the firewall's interface is not set for tagged, that is the problem...reconfigure interface 2 in vlan100 to 'untagged'...

hth...jeff

[jbielot_1]

Thanks, I'll try that. The firewall is hanging off port 2, and isn't configured to look for tagged packets. I seem to think that the switch wanted once vlan or the other to be tagged, but I'll try it shortly. I had to wait until 5pm (Eastern) to try and that's only a couple of minutes.

John

[Dmitry G. Spitsyn]

Hi, John !

IMHO your swouter now (when it works as a router) doesn't need a default gateway - it will use default route instead.
Before you enable:
ip routing
you should disable default gateway:
no ip default-gateway 192.168.200.2
Default gateway is only required when the device works as a switch (actually as a host from the IP point of view).

Good luck,
Dmitry