Switches, Hubs, and Modems
cancel
Showing results for 
Search instead for 
Did you mean: 

New vlan, communication help!

VLAD21
Occasional Advisor

New vlan, communication help!

Hello guys,
I am trying to create a new vlan only on one switch and i want that vlan to communicate with some servers on the Default VLAN.
The Diagram is as attached as follows.
I have a Procurve 2650 which is a light later 3 switch, so i think we can go for the static routing on it.

As shown in the diagram,
I have created a new vlan , vlan 21 (10.21.21.0/24) and i have assigned port 2 (untagged) to that vlan.

Now i want the users from that "vlan21" to access the DEFAULT VLAN (10.10.30.0/24) or some of the servers on default vlan.

I want this vlan to be only on switch with ip addess 10.10.30.8 .
The default gateway is set for this switch and it is 10.10.30.1

i can think of the config as follows :

ip route 0.0.0.0 0.0.0.0 10.10.30.1


(for vlan21) ip helper-address 10.10.30.6

But how this is not working.
how will the traffic from default vlan communicate with vlan21 ?
I am confused.
Please help me.

6 REPLIES
EckerA
Respected Contributor

Re: New vlan, communication help!

Hi,
do you have a route from 10.10.30.1 back to the new vlan on the router(10.10.30.1)?
something like
ip route 10.21.21.0 255.255.255.0 10.10.30.8

How should the Servers know where 10.21.21.0 is?

Hope this helps

Ben
cenk sasmaztin
Honored Contributor

Re: New vlan, communication help!

ip routing enable on switch
and you can create new vlan 21

config)#vlan 21
vlan 21 config)#ip address 10.21.21.1/24
vlan 21 config)#untagged 2

you can connect int 2 on pc and assing ip address for pc

ip 10.21.21.2
subnet mask 255.255.255.0
default gateway 10.21.21.1

and all server or pc in vlan 1 default gateway address must be vlan 1 ip address


you can now write ip route internet connection for vlan 1 and vlan 21 user's

0.0.0.0 0.0.0.0 10.10.30.1

cenk



cenk

VLAD21
Occasional Advisor

Re: New vlan, communication help!

Thank you guys,
@EckerA,
I have an idea about that, but i think it is to be added in my firewall as it is the main source of routing.

@cenk,
I will configure it as you have told, but at that time do i need to disable the default gateway?
serpel
Trusted Contributor

Re: New vlan, communication help!

Hi,
where do you wan't to delete the default gateway?
At the switch 10.10.30.8 : if you enable ip routing the default gateway is still in the sh run but has no effect. you need a static route for the switch to route everthing to the firewall.
ip route 0.0.0.0 0.0.0.0 10.10.30.1
clients in 10.10.30.0: just leave the default gateway as it is.-->can't reach vlan 21
server in 10.10.30.0: default gateway 10.10.30.8 --> can be reached from vlan 21
systems in vlan 21: 10.21.21.x with x the ip from switch 10.10.30.8 in vlan 21 --> can reach the servers and the firewall, but not the clients in 10.10.30.0
hope i got it all
cheers
abe
VLAD21
Occasional Advisor

Re: New vlan, communication help!

Thank you very much guys,
So finally this is what i came up to:

ip routing
ip default-gateway 10.10.30.1
vlan 1
name "DEFAULT_VLAN"
untagged 1,3-50
ip address 10.10.30.8 255.255.255.0
no untagged 2
exit
vlan 21
name "XXXXX"
untagged 2
ip address 10.21.21.1 255.255.255.0
exit
ip route 0.0.0.0 0.0.0.0 10.10.30.1


please check it and give it a go. I have already passed my deadline.

Plus i know that i have to add a reverse route to the new vlan from my firewall.
Thank you!
EckerA
Respected Contributor

Re: New vlan, communication help!

Looks fine.