- Community Home
- >
- Networking
- >
- Legacy
- >
- Switches, Hubs, Modems
- >
- Gateway question on 5400zl?
Switches, Hubs, and Modems
1748151
Members
3682
Online
108758
Solutions
Forums
Categories
Company
Local Language
back
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Discussions
back
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Blogs
Information
Community
Resources
Community Language
Language
Forums
Blogs
Go to solution
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-05-2010 02:05 PM
11-05-2010 02:05 PM
Currently I have Procurve 4000m switches and the ip of my firewall is configured as my gateway to our MPLS network and the internet. Now I'm upgrading our network with 5400zl/3500yl switches and adding several VLAN's. I want to use one of my 5400zl switches instead of the firewall to do routing since it's faster but I'm trying to figure out how to setup the gateway to the firewall.
My thoughts are that I have to create another VLAN and subnet just for the firewall... then in the routing table create a static default route to the new ip address for the firewall (or should it go to the VLAN ip on the switch?). Then the gateway for hosts on each VLAN will be the VLAN ip address on the switch. Is this a good way to setup my default gateway or is there a better way to set it up?
Also one more question... I've setup my VLAN's and routing on my switch but I can't ping between PC's on different VLAN's. I thought someting was wrong with routing at first until I realized I could access shares between them... this tells me that icmp messages are being blocked but I do not have any ACL's applied yet. Is icmp blocked by default when ip routing is enabled? If it is how do you disable it?
My thoughts are that I have to create another VLAN and subnet just for the firewall... then in the routing table create a static default route to the new ip address for the firewall (or should it go to the VLAN ip on the switch?). Then the gateway for hosts on each VLAN will be the VLAN ip address on the switch. Is this a good way to setup my default gateway or is there a better way to set it up?
Also one more question... I've setup my VLAN's and routing on my switch but I can't ping between PC's on different VLAN's. I thought someting was wrong with routing at first until I realized I could access shares between them... this tells me that icmp messages are being blocked but I do not have any ACL's applied yet. Is icmp blocked by default when ip routing is enabled? If it is how do you disable it?
Solved! Go to Solution.
1 REPLY 1
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-05-2010 03:20 PM
11-05-2010 03:20 PM
Solution
Your plan is good. Make sure you tell the f/w where to find those other networks (or at least how to get back to the 5400) - each side of a dedicated link needs a static route pointing to the other.
I'd use a ip addr scheme that allows for good summarization: vlan 10 = 10.1.10.1/24, vlan 20 = 10.1.20.1/24, vlan 99 (to the f/w) 10.1.99.1/24 [f/w 10.1.99.2/24].
Then the f/w static route back can be 10.0.0.0/16 10.1.99.1...5400 static would be 0.0.0.0/0 10.1.99.2
There are no acl's applied until you create them. ICMP will go through as normal. What are the def g/w's of the clients? And of course, make sure there are no local f/w blocks on the clients (like windows f/w will block icmp by default).
hth...Jeff
I'd use a ip addr scheme that allows for good summarization: vlan 10 = 10.1.10.1/24, vlan 20 = 10.1.20.1/24, vlan 99 (to the f/w) 10.1.99.1/24 [f/w 10.1.99.2/24].
Then the f/w static route back can be 10.0.0.0/16 10.1.99.1...5400 static would be 0.0.0.0/0 10.1.99.2
There are no acl's applied until you create them. ICMP will go through as normal. What are the def g/w's of the clients? And of course, make sure there are no local f/w blocks on the clients (like windows f/w will block icmp by default).
hth...Jeff
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.
News and Events
Support
© Copyright 2024 Hewlett Packard Enterprise Development LP