Switches, Hubs, and Modems
1751877 Members
5232 Online
108782 Solutions
New Discussion юеВ

Re: IP routing on switch 5304xl

 
cenk sasmaztin
Honored Contributor

Re: IP routing on switch 5304xl

fabio please send me both switches sh run print
cenk

IP routing on switch 53
Occasional Advisor

Re: IP routing on switch 5304xl

Hi, I posted my new configuration, I mean I need to configure my Lan as in the new schematic. You will find in the attached that I need to filter my remote LAN through a Proxy Server withw Kerio Winroute firewall.
You will find all running configuratino for both my switches.

Thank you Fabio.
cenk sasmaztin
Honored Contributor

Re: IP routing on switch 5304xl

hostname "Hangar_8" (switch A)
ip routing
vlan 1
name "DEFAULT_VLAN"------[for managemet]
untagged A1-A3
ip address 10.0.0.1 255.255.255.0
no untagged B1-B24,C1-C24
exit
vlan 10
name "VLAN10"------------[for local user]
untagged B1-B22,C1-C24connect ibm server B1 (domain controller-192.168.10.11/24 default gateway 192.168.10.4- all other network users must be same default gateway)
ip address 192.168.10.4 255.255.255.0
tagged A1
exit
vlan 200
name "VLAN200"-----------[for x ]
untagged B23
ip address 192.168.11.4 255.255.255.0
tagged A1
exit
vlan 140-----------------[for internet]
name "VLAN140"
untagged B24 connect firewall for internet firewall lan ip must be 192.168.12.1/24
ip addess 192.168.12.4 255.255.255.0
tagged A1
vlan 160-----------------[for other lan]
name "VLAN160"
untagged A4 connect firewall for other lan firewall lan ip must be 192.168.13.1/24
ip addess 192.168.13.4 255.255.255.0

ip route 0.0.0.0 0.0.0.0 192.168.12.1
ip route 10.24.13.0 255.255.224.0 192.168.13.1

exit

--------------------------------------------------------------
--------------------------------------------------------------
hostname "Com_14" (switch B)

exit


vlan 1
name "DEFAULT_VLAN"---------[for managemet]
untagged A1,A3-A4,B3-B4
ip address 10.0.0.2 255.255.255.0
no untagged A2,B1-B2,C1-C24,D1-D24
exit
vlan 10--------------------[for local user]
name "VLAN10"
untagged B1-B2,C1-C24,D1-D24 connect domain users [in network 192.168.10.0 and default gateway must be 192.168.10.4]
tagged A1
exit
vlan 200--------------------[for x ]
name "VLAN200"
tagged A1
exit
spanning-tree
password manager
password operator
-------------------------------------------------------------
-------------------------------------------------------------
Kerio winroute firewall config (for internet)
connect B24

lan interface ip address 192.168.12.1/24
ip route 192.168.10.0 255.255.255.0 192.168.10.4



Kerio winroute firewall config (for other lan)
connect A4

lan interface ip address 192.168.13.1/24
ip route 192.168.10.0 255.255.255.0 192.168.13.4

cenk

IP routing on switch 53
Occasional Advisor

Re: IP routing on switch 5304xl

Thank you for your help, but I still have a small problem.
I have set the configuration you sent to me but as soon as I set the second command ip route(10.24.13.0 255.255.224.0 192.168.13.1) I got the following error:
"inconsistent address and mask".
Do you have any suggestion for us?

Thank's a lot Fabio.
cenk sasmaztin
Honored Contributor

Re: IP routing on switch 5304xl

ok fabio

you write this routing command

ip route 10.24.13.0 255.0.0.0 192.168.13.1
cenk

IP routing on switch 53
Occasional Advisor

Re: IP routing on switch 5304xl

I got the same error,
"inconsistent address or mask"

Fabio
cenk sasmaztin
Honored Contributor

Re: IP routing on switch 5304xl

please re test

ProCurve Switch 2626(config)# ip route 10.24.13.0 255.255.255.0 192.168.11.3
ProCurve Switch 2626(config)#
cenk

cenk sasmaztin
Honored Contributor

Re: IP routing on switch 5304xl


sory
roCurve Switch 2626(config)# ip route 10.24.13.0 255.255.255.0 192.168.13.1
ProCurve Switch 2626(config)#
cenk

cenk sasmaztin
Honored Contributor

Re: IP routing on switch 5304xl

or you can use

ProCurve Switch 2626(config)# ip route 10.24.0.0 255.255.0.0 192.168.13.1
ProCurve Switch 2626(config)#
cenk

cenk sasmaztin
Honored Contributor

Re: IP routing on switch 5304xl

hi Fabio sory my office this day very busy
below onfig include new route entry


hostname "Hangar_8" (switch A)
ip routing
vlan 1
name "DEFAULT_VLAN"------[for managemet]
untagged A1-A3
ip address 10.0.0.1 255.255.255.0
no untagged B1-B24,C1-C24
exit
vlan 10
name "VLAN10"------------[for local user]
untagged B1-B22,C1-C24connect ibm server B1 (domain controller-192.168.10.11/24 default gateway 192.168.10.4- all other network users must be same default gateway)
ip address 192.168.10.4 255.255.255.0
tagged A1
exit
vlan 200
name "VLAN200"-----------[for x ]
untagged B23
ip address 192.168.11.4 255.255.255.0
tagged A1
exit
vlan 140-----------------[for internet]
name "VLAN140"
untagged B24 connect firewall for internet firewall lan ip must be 192.168.12.1/24
ip addess 192.168.12.4 255.255.255.0
tagged A1
vlan 160-----------------[for other lan]
name "VLAN160"
untagged A4 connect firewall for other lan firewall lan ip must be 192.168.13.1/24
ip addess 192.168.13.4 255.255.255.0

ip route 0.0.0.0 0.0.0.0 192.168.12.1
ip route 10.24.0.0 255.255.0.0 192.168.13.1

exit

--------------------------------------------------------------
--------------------------------------------------------------
hostname "Com_14" (switch B)

exit


vlan 1
name "DEFAULT_VLAN"---------[for managemet]
untagged A1,A3-A4,B3-B4
ip address 10.0.0.2 255.255.255.0
no untagged A2,B1-B2,C1-C24,D1-D24
exit
vlan 10--------------------[for local user]
name "VLAN10"
untagged B1-B2,C1-C24,D1-D24 connect domain users [in network 192.168.10.0 and default gateway must be 192.168.10.4]
tagged A1
exit
vlan 200--------------------[for x ]
name "VLAN200"
tagged A1
exit
spanning-tree
password manager
password operator
-------------------------------------------------------------
-------------------------------------------------------------
Kerio winroute firewall config (for internet)
connect B24

lan interface ip address 192.168.12.1/24
ip route 192.168.10.0 255.255.255.0 192.168.12.4



Kerio winroute firewall config (for other lan)
connect A4

lan interface ip address 192.168.13.1/24
ip route 192.168.10.0 255.255.255.0 192.168.13.4
cenk