4208VL VLAN help

[miwh]

Here is current VLAN, it is not working. I trace route from VLAN 2 to VLAN 1 and it does not go past VLAN 2 default gateway address, need assistance..

COnfig:

ip default-gateway 192.168.1.10
ip routing
snmp-server community "public" Unrestricted
snmp-server host 192.168.1.1 "public"
vlan 1
name "DEFAULT_VLAN"
untagged A1-A24,B1,B3-B24,C1-C24
ip address 192.168.1.15 255.255.255.0
no untagged B2
exit
vlan 2
name "Repair Dept"
untagged B2
ip address 192.168.2.1 255.255.255.0
ip helper-address 192.168.1.1
tagged A1
exit
fault-finder bad-driver sensitivity high
fault-finder bad-transceiver sensitivity high
fault-finder bad-cable sensitivity high
fault-finder too-long-cable sensitivity high
fault-finder over-bandwidth sensitivity high
fault-finder broadcast-storm sensitivity high
fault-finder loss-of-link sensitivity high
fault-finder duplex-mismatch-HDx sensitivity high
fault-finder duplex-mismatch-FDx sensitivity high
ip route 0.0.0.0 0.0.0.0 192.168.1.10
ip route 192.168.2.0 255.255.255.0 192.168.1.10
password manager
password operator

[Pieter 't Hart]

>>>
vlan 2
ip address 192.168.2.1 255.255.255.0
exit
ip route 192.168.2.0 255.255.255.0 192.168.1.10
ip routing
<<<

Inspect your environment carefully.
you setup your switch as router between the two subnet.
But at the same time setup a static route
for the same subnet.
=> you better remove the line
"ip route 192.168.2.0 255.255.255.0 192.168.1.10"

furthermore check :
- devices on the 192.168.2.0 subnet have the switch (192.168.2.1) configured as gateway
- devices on the 192.168.1.0 subnet have the switch (192.168.1.15) configured as gateway


I assume the 192.168.1.10 routes to the internet?
this router must know the 192.168.2.0 subnet is reachable through the switch
"ip route 192.168.2.0 255.255.255.0 192.168.1.15"

[miwh]

switch
\/
barracuda im firewall
\/
barracuda web filter
\/
firewall


I have static route set from im fw to web filter, and web filter to firewall.


So remove the route in the switch?

[miwh]

Here is new config

ip default-gateway 192.168.1.10
snmp-server community "public" Unrestricted
snmp-server host 192.168.1.1 "public"
vlan 1
name "DEFAULT_VLAN"
untagged A1-A24,B1,B3-B24,C1-C24
ip address 192.168.1.15 255.255.255.0
no untagged B2
exit
vlan 2
name "Repair Dept"
untagged B2
ip address 192.168.2.1 255.255.255.240
ip helper-address 192.168.1.1
exit
fault-finder bad-driver sensitivity high
fault-finder bad-transceiver sensitivity high
fault-finder bad-cable sensitivity high
fault-finder too-long-cable sensitivity high
fault-finder over-bandwidth sensitivity high
fault-finder broadcast-storm sensitivity high
fault-finder loss-of-link sensitivity high
fault-finder duplex-mismatch-HDx sensitivity high
fault-finder duplex-mismatch-FDx sensitivity high
ip route 192.168.2.0 255.255.255.240 192.168.1.152


I want VLAN2 to grab an IP from DHCP server in vlan 1, and otherwise the netwprks be seperate.

I have a static route in switch to barracuda im firewall, static route in IM firewall to web filter, and static route from web filter to firewall.. I have also set a static route in firewall 192.168.2.0 255.255.255.240 to the firewall LAN IP

Prior to removing ip routing in switch I could tracert and reach the switch vlan address, now with ip routing disables I cannot reach anything with a trace route.

[miwh]

Any further assistance on this issue? I am still having trouble with this.

[PCurver]

1. The client(PC) should be on port B2
2. Your DHCP server must have a scope for the 192.168.2.* network.
3. If 192.168.2.* is on this switch, you don't need a route to it. (ip route 192.168.2.0 255.255.255.0 192.168.1.10
). Get rid of that route.