Unable to communicate with PCs in Default VLAN

[jasonttl]

Hi All

I've got one 5308(10.78.1.253 255.255.0.0 DG 10.78.250.254)& 4000m (10.78.1.254 255.255.0.0 DG 10.78.1.253)in my network. What my goal is to setup 4 Vlans.

The default vlan will contain my main servers (10.78.x.x 255.255.0.0) and firewall (10.78.250.254).

Vlan 2(10.78.20.x 255.255.255.0)& 3(10.78.30.x 255.255.255.0) are connected to 4000m which is then connected to the 5308 switch via a single link.

Vlan 4 (10.2.1.x 255.255.0.0) is connected directly to 5308 switch.

I want my users in VLAN 2, 3 & 4 to be able to talk to the servers in the default vlan as well as to access to internet.

The servers on the default vlan are able to access the internet through our firewall. The IP of the 5308 switch (10.78.1.253 255.255.0.0) are set as the default gateway of the servers in the default vlan.

The two vlans are given IP addresses on their respective subnets.

Vlan 2(10.78.20.x 255.255.255.0)
Vlan 3(10.78.30.x 255.255.255.0)
Vlan 4(10.2.1.x 255.255.0.0)

I've turned on IP routing and added static route 0.0.0.0 0.0.0.0 10.78.250.254 to the 5308 switch

Servers on default vlan are fine. They can talk to each other, access the internet, able to PING PCs in VLAN 4 but can't PING anything on Vlan 2 & 3.

PCs in Vlan2 are able to PING PCs in Vlan 3 & 4 but not the default vlan and can't access the internet.

PCs in Vlan 4 are able to PING the servers in default vlan and Vlan 3 & 4 but unable to access the internet.

Any help, or direction would be much much appreciated.

[psycho.chicken]

did you make the default vlan the "management vlan..."

it cannot communicate with the other vlans for security reasons...

[Alaa Saleh]

your configuration is wrong, because the IP rang of Vlan 2 and vlan 3 are part of Vlan 1 IP rang.
you should give Vlan 2 and Vlan 3 another IP rang like: 10.79.20.x/24, 10.79.30.x/24

[Dave Costello]

It seems to me that you can't route ip across the default vlan with using an external router.