Configure router on a stick

[Duncan Gilliland]

I have 5 x 2660 & 1 x 6108 switches. 1 x Linksys DSL Router. I have configured a number of VLANS with the 6108 in router mode. I have access between all VLANS which is what I want but I also want Internet access from all VLANS whcih I cannot seem to get out of the current config. The Linksys Router is on one VLAN and only that VLAN has access to the Internet although I have configured a default route on the 6108. Would a router on a stick config solve this and if so how do I configure this?

[OLARU Dan]

On your inter-VLAN router you should do 2 things, to avoid router-on-a-stick scenario:

1. enable IP routing
2. define the static route as follows:
ip route 0.0.0.0 0.0.0.0 a.b.c.d

where a.b.c.d is the IP of the Linksys facing your inter-VLAN router.

Do not use "ip default-gateway..." command.

Router-on-a-stick in your case would mean that the Linksys will perform the inter-VLAN routing, too - and I think the HP is better at LAN high-speed routing than the Linksys.

Also make sure you have the necessary static routes defined on both the inter-VLAN router and the Linksys.

[Matt Hobbs]

You also need to configure routes on the Linksys so that it knows about all the subnets on the 6108.

[Duncan Gilliland]

IP Routing is enabled on the 6108 only with a default route.
VLAN 1 - 192.168.27.0 VLAN IP 192.168.27.20
VLAN 2 - 192.168.26.0 VLAN IP 192.168.26.1
VLAN 3 - 192.168.25.0 VLAN IP 192.168.25.1
VLAN 4 - 192.168.20.0 VLAN IP 192.168.20.1
VLAN 5 - 192.168.28.0 VLAN IP 192.168.28.1

I have entered the default route as;
0.0.0.0 0.0.0.0 192.168.27.1 which is the address of the Linksys Router I have also configured static routes on the Linksys Router to point to the network address of each VLAN so I can ping the Linksys Router from all the VLANS and all the IP addrsses in the VLANs from the Linksys Router but just can't access the Internet from any VLAN except VLAN 1 with the 192.168.27.0 range.

[Mohieddin Kharnoub]

Hi

Its a NAT issue, these Home use routers can't NAT from more than one subnet.

You need an Enterprise routers to do this job.

Good Luck !!!

[OLARU Dan]

Or you could perform the NAT on the 6108, if its firmware allows this.

[Duncan Gilliland]

Thank you for your help so far, how would I configure NATing on the 6108.

[Matt Hobbs]

The 6108 does not support NAT

[Mohieddin Kharnoub]

Hi

I suggest you if you are looking from professional side to have an Enterprise Router like the ProCurve 7102 series.

Budget wise, nothing like the Juniper Netscreen 5GT ADSL router/firewall or the new SSG-5.

Good Luck !!!