routing with vlans (switch 5304xl)

[Hugo Tigre]

I have 3 vlans in a 5304xl switch:

vlan 1: 172.16.0.0
vlan 2: 172.30.0.0
vlan 3: 172.31.0.0

i have routing enable (rip v2) and is working between the vlans. The hosts in each vlan can comunicate with the other vlans.

to access the internet, my gateway is 172.16.0.1 so i created a static route (0.0.0.0/0 172.16.0.1)

this works fine for vlan 1 witch has access to the internet

but my problem is that vlan 2 and 3 can't get internet access.

what i'm i missing? will i be forced to use NAT in some way???

thanks in advance for your help

regards, Hugo Tigre

[Mohammed Safadi]

Can you attach the show tech all, or the running configuration log file

[Hugo Tigre]

here's the running config:
. and has a side note, in the switch, i only have module "A", so i'm not shure why there is "B1-B4" or "C1-C24,D1-D24"!!!!

[Hugo Tigre]

One more thing i forggot to mention,

port A4 is the the one that is connected to 172.16.0.1 (gateway to the internet).

[MIBA NSD]

what is the ip of the 5304?
what are the masks of the vlans?

i think the 5304 needs an ip in every vlan because the 5304 should be the default gw for the 3 vlans, because he has to route vlan 2 and 3 to vlan 1 where the internet gateway is.



best regards
peter

[Hugo Tigre]

the ip of the router if of the primary vlan, witch is vlan1 172.16.15.60, but can actualy be any of the ip's attributed to the vlans, in my case:

vlan1:172.16.15.60
vlan2:172.30.15.60
vlan3:172.31.15.60

the mask is equal to every vlan 255.255.0.0

and since i configure the switch with a route of "0.0.0.0/0 gw: 172.16.0.1" the switch doesn't use the default gw it has configured, or better yet, this route tels the switch the default gw is 172.16.0.1

note: this information is on the running-config file i attached in one of my previous messages.

i really need to get this problem fixed, i think i'm missing something in terms of routing parameters by i don't no what!!!!

regards, Hugo Tigre

[MIBA NSD]

ok!

i think u will reach the 5304 from every vlan with a ping to the 5304s vlan address.
but can u ping the 5304 address from another vlan?

example:
clients in vlan 2 should configure 172.30.15.60 as gw.
and than the should reach 172.31.15.60.

what is the output of the "sh ip route" command on the switch.
should be
0.0.0.0/0 172.16.1.2 1 static
172.16.0.0/16 VLAN1 1 connected
172.30.0.0/16 VLAN2 10 connected
172.31.0.0/16 VLAN3 20 connected
i think so.

[Hugo Tigre]

Yes you're correct about the gateway and your correct about the routing, except you miss printed my GW (172.16.0.1 not 172.16.1.2)

But unfortunatly that isn't my problem, like i said the routing between the vlans is working and i can ping any ip that belongs to any vlan or host, ie, from any vlan to any vlan.

And has you can see from your exemple of "sh ip route" the static route belongs to vlan1 because it's in the same segment, and i think here is my real problem, the switch router trafic that belongs to any of the vlans, but internet trafic is only retorned to vlan1.

[Olaf Borowski · Accepted solution]

Hugo,

someone is doing NAT for you already. The address space you are using (172.16.x.x) doesn't get routed in the Internet. There is another box Internet facing that does the NAT for you. The box probably doesn't know about the 172.30.x.x and 172.31.x.x network. Add those two routes on that box and everything should work.

[Hugo Tigre]

Olaf Borowski, that makes perfect sense, i will check that right now.

i'll reply as soon as know more.

One more thing, even if i had 3 gateways, one of each vlan (subnet), and i had each vlan conected to that gateway, it would still create a problem, because the static route "ip route 0.0.0.0/0 172.16.0.1" is added to the switch and not individualy to a vlan, and therefore i couldn't had another static root like "ip route 0.0.0.0/0 172.30.0.1"

exemple:
port A1 (vlan1) connected to 172.16.0.1
port A2 (vlan2) connected to 172.30.0.1
port A3 (vlan3) connected to 172.31.0.1

in this case, i would had the static route "0.0.0.0/0 172.16.0.1", but this would only work for vlan1, how would i soulve the problem for the other vlans?