New vlan, communication help!

[VLAD21]

Hello guys,
I am trying to create a new vlan only on one switch and i want that vlan to communicate with some servers on the Default VLAN.
The Diagram is as attached as follows.
I have a Procurve 2650 which is a light later 3 switch, so i think we can go for the static routing on it.

As shown in the diagram,
I have created a new vlan , vlan 21 (10.21.21.0/24) and i have assigned port 2 (untagged) to that vlan.

Now i want the users from that "vlan21" to access the DEFAULT VLAN (10.10.30.0/24) or some of the servers on default vlan.

I want this vlan to be only on switch with ip addess 10.10.30.8 .
The default gateway is set for this switch and it is 10.10.30.1

i can think of the config as follows :

ip route 0.0.0.0 0.0.0.0 10.10.30.1


(for vlan21) ip helper-address 10.10.30.6

But how this is not working.
how will the traffic from default vlan communicate with vlan21 ?
I am confused.
Please help me.

[EckerA]

Hi,
do you have a route from 10.10.30.1 back to the new vlan on the router(10.10.30.1)?
something like
ip route 10.21.21.0 255.255.255.0 10.10.30.8

How should the Servers know where 10.21.21.0 is?

Hope this helps

Ben

[cenk sasmaztin]

ip routing enable on switch
and you can create new vlan 21

config)#vlan 21
vlan 21 config)#ip address 10.21.21.1/24
vlan 21 config)#untagged 2

you can connect int 2 on pc and assing ip address for pc

ip 10.21.21.2
subnet mask 255.255.255.0
default gateway 10.21.21.1

and all server or pc in vlan 1 default gateway address must be vlan 1 ip address


you can now write ip route internet connection for vlan 1 and vlan 21 user's

0.0.0.0 0.0.0.0 10.10.30.1

cenk

[VLAD21]

Thank you guys,
@EckerA,
I have an idea about that, but i think it is to be added in my firewall as it is the main source of routing.

@cenk,
I will configure it as you have told, but at that time do i need to disable the default gateway?

[serpel]

Hi,
where do you wan't to delete the default gateway?
At the switch 10.10.30.8 : if you enable ip routing the default gateway is still in the sh run but has no effect. you need a static route for the switch to route everthing to the firewall.
ip route 0.0.0.0 0.0.0.0 10.10.30.1
clients in 10.10.30.0: just leave the default gateway as it is.-->can't reach vlan 21
server in 10.10.30.0: default gateway 10.10.30.8 --> can be reached from vlan 21
systems in vlan 21: 10.21.21.x with x the ip from switch 10.10.30.8 in vlan 21 --> can reach the servers and the firewall, but not the clients in 10.10.30.0
hope i got it all
cheers
abe

[VLAD21]

Thank you very much guys,
So finally this is what i came up to:

ip routing
ip default-gateway 10.10.30.1
vlan 1
name "DEFAULT_VLAN"
untagged 1,3-50
ip address 10.10.30.8 255.255.255.0
no untagged 2
exit
vlan 21
name "XXXXX"
untagged 2
ip address 10.21.21.1 255.255.255.0
exit
ip route 0.0.0.0 0.0.0.0 10.10.30.1


please check it and give it a go. I have already passed my deadline.

Plus i know that i have to add a reverse route to the new vlan from my firewall.
Thank you!

[EckerA]

Looks fine.