Connecting two locations over metro ethernet

[Stacy Roberts]

I have a seperate subnet at each location. I'd like to keep the subnets addressed as they are now. The metro ethernet is presented to me as a cat5 connection. I can connect a laptop on each end of the connection, put them on the same subnet and ping each other. I was told by the provider they are set up in a hub and spoke type configuration.

My main location is 10.1.1.0/24 and has a 2910al. The two remote sites are 10.1.4.0/24 and 10.1.6.0/24 and they have 2610's installed.

My plan is to plug the cable I am presented with into port 1 of each switch and config them like such

Main Router:

ip routing
vlan 1
untagged 1-24
ip address 10.1.1.1/24
exit
vlan 6
name "location6"
tagged 1
ip address 10.10.6.1/24
exit
vlan 4
name "location 4"
tagged 1
ip address 10.10.4.1/24
exit
ip route 10.1.6.0/24 10.10.6.2

remote switches:

vlan 1
untagged 1-26
ip address 10.1.6.1/24
exit
vlan 6
name "location6"
tagged 1
ip address 10.10.6.2/24
exit
ip route 10.1.1.0/24 10.10.6.1

Am I on the right track here? I tried variations of the above configurations and couldn't get it to work. Do I need other static routes or something? Is the tagging right? I'm not real clear on that subject either. Any help is appreciated.

[Stacy Roberts]

Good help is hard to find on a weekend. I searched all over the net for answers and read the manuals I found for the 2910al and I finally got everything all set up. I thought I would put up my configs and mention some pitfalls for anyone who might be searching for a solution to a similar scenario.

I struggled for hours with different configurations before and after my first post before I figured out my service provider wasn't passing the VLAN tags my switches were creating. Having that set up right to being with would have saved me a lot of time, but I probably wouldn't have learned as much as I did.

My firewall at the main site is 10.1.1.1
My DHCP server is 10.1.1.6.
The trunks in the coreswitch are aggregate links to racktop swtiches.

Vlan 1 is unused all of the switches. There are no ports assigned to them. I gave them bogus IP addresses because I didn't want them grabbing on from my dhcp server, I guess. I doubt that's a best practice, but it works for me.

I welcome any criticism. I'm still learning. Thanks for looking.

----------
main switch config
----------

coreswitch# sh run

Running configuration:

; J9145A Configuration Editor; Created on release #W.14.03

hostname "coreswitch"
module 1 type J9145A
trunk 1-2 Trk1 LACP
trunk 3-4 Trk2 LACP
ip default-gateway 10.1.1.1
ip routing
vlan 1
name "DEFAULT_VLAN"
ip address 10.10.1.10 255.255.255.0
no untagged 5-24,Trk1-Trk2
exit
vlan 600
name "5thStreet"
ip address 10.1.6.2 255.255.255.0
tagged 16
exit
vlan 100
name "Summit"
untagged 5-15,17-24,Trk1-Trk2
ip address 10.1.1.10 255.255.255.0
tagged 16
exit
vlan 400
name "School"
ip address 10.1.4.2 255.255.255.0
tagged 16
exit
ip route 0.0.0.0 0.0.0.0 10.1.1.1
snmp-server community "public" Unrestricted
snmp-server contact "me"
spanning-tree
spanning-tree Trk1 priority 4
spanning-tree Trk2 priority 4
password manager

coreswitch#

-------
remote switch1 config
-------

School2610# sh run

Running configuration:

; J9087A Configuration Editor; Created on release #R.11.25

hostname "School2610"
snmp-server contact "me"
ip default-gateway 10.1.1.10
ip routing
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
ip address 10.10.1.40 255.255.255.0
no untagged 1-28
exit
vlan 400
name "School"
untagged 2-28
ip address 10.1.4.1 255.255.255.0
ip helper-address 10.1.1.6
tagged 1
exit
vlan 100
name "Summit"
ip address 10.1.1.3 255.255.255.0
tagged 1
exit
ip route 0.0.0.0 0.0.0.0 10.1.1.10
password manager

School2610(vlan-1)#

-----------
remote switch2 config
-----------
CSS2610# sh run

Running configuration:

; J9087A Configuration Editor; Created on release #R.11.25

hostname "CSS2610"
snmp-server contact "me"
ip default-gateway 10.1.1.1
ip routing
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
ip address 10.10.1.61 255.255.255.0
no untagged 1-28
exit
vlan 600
name "5thStreet"
untagged 1,3-28
ip address 10.1.6.1 255.255.255.0
tagged 2
exit
vlan 100
name "Summit"
ip address 10.1.1.2 255.255.255.0
tagged 2
exit
ip route 0.0.0.0 0.0.0.0 10.1.1.10
password manager

CSS2610#