VLAN on 4204 with Sonicwall Pro 3060

[Jonathan de Beere]

Hi Guys,

I have a Procurve 4204vl and 2610-24 on which I have setup a VLAN with ID 2 which will be used for VOIP.

For testing purposes I can ping PC's plugged into VLAN 2 on both switches, but I cannot access the internet from VLAN 2. The default gateway of 192.192.10.11 is a Sonicwall Pro 3060.
A PC connected to VLAN 2 cannot ping the default gateway or anything beyond it.

The default gateway of my PC's on VLAN 2 is the IP of VLAN 2 192.192.14.1

I don't know how to get internet browsing work.
Any help would be much appreciated.

Thank you

Jonathan

[Shadow13]

Hi,

What are is the subnet that you are using VLAN 2?
and what configuration you did on the link between the switches and the link between sonicwall pro ?

Did you enable NAT ?

if you can please post the configuration from both switches and show which link connected to Sonicwall.

P.S: the uplink between the switches must be tagged in every vlan that going to use this link, about the Sonicwall i think you have 2 options, either to untag the port that connects the sonic wall in VLAN 2, in this case the link will be a member of VLAN 2 only.
or you can tag it in VLAN 2 and any other VLAN that is going thorugh that link and untag VLAN 1 only.


Regards,

[Jonathan de Beere]

Hi,

I did attach the config to my inital post but it's not there. I've attached it to this post. If it doesn't work I'll simply paste it into another reply.

I can confirm that the Sonicwall is connected to 4204vl port A12. Port A12 is tagged for VLAN 2.

As an update, I have made a change to the config of the 4204vl this morning. I set the ip route to 0.0.0.0 0.0.0.0 192.192.14.11, which allowed me to browse the internet from PC's which were members of VLAN 2. I left the default gateway of the PC's as 192.192.14.1.
I'm not sure if this is the correct configuration though.

Thank you

Jonathan

[Shadow13]

where is this 192.192.14.11 assigned ?

maybe that's why it was not working because by enabling ip routing the device will route to the default gatways for every vlan and that address was not in it's routing table.

another thing, why in the 2610 you assigned ip address under vlan 2 ? i don't think you need that since that 4204 switch is handling the routing and already has an ip address under that vlan and it's the gateway for this vlan.

anyway, good job getting it work ;)

Regards

[Jonathan de Beere]

Hi,

The IP route on the 4204 was originally 0.0.0.0 0.0.0.0 192.192.10.11 because that is the default gateway for all devices on my LAN. The Sonicwall has a LAN interface of 192.192.10.11. With this configuration I could not ping the Sonicwall LAN interface from a PC on VLAN2.

I created a LAN SUB interface on the Sonicwall of 192.192.14.11 and adjusted my IP route on the 4204 to 0.0.0.0 0.0.0.0 192.192.11.14. I can now ping the Sonicwall LAN and Sub Lan interfaces from a PC on VLAN 2. I can ping all devices on VLAN 2 and on the 192.192.10.x subnet. I can also browse the web.

Even though this is now working, I am not sure the configuration is correct. Please can you confirm this for me.

I will remove the VLAN 2 IP address from the 2610.

Thank you

Jonathan

[Shadow13]

it worked because the port connecting to the sonicwall is tagged on this vlan so you had to give the sonicwall device an ip address from the same subnet of the VLAN 2.

I'm not sure if the sonicewalld device supports routing, but if it supports routing then you can just remove the routing from the 4204 switch(including the ip route states)and let the sonicwall handle all the routing.

Summarized, the sonicwall interface will have sub interfaces for each vlan with ip address from the vlan(as you did with vlan 2), and will be the gateway for the vlans "router on a stick", and disable routing on the switch and only leave the ip address under vlan 1 which will be used for management only.

Regards.