+ Post New Thread
Page 1 of 6 12345 ... LastLast
Results 1 to 15 of 90
Wired Networks Thread, Using Smoothwall Express With a Cisco Layer 3 Switch? in Technical; Hello, This is more of a Networking question so i put it in here. Please look at the attached diagram. ...
  1. #1

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,773
    Thank Post
    865
    Thanked 1,663 Times in 1,448 Posts
    Blog Entries
    11
    Rep Power
    442

    Using Smoothwall Express With a Cisco Layer 3 Switch?

    Hello,

    This is more of a Networking question so i put it in here.

    Please look at the attached diagram. This is what i am wanting to achieve in a test environment. I have setup the 3560 with 2 Vlans and they can communicate between each other no problem. I want to fit the Smoothwall express in the system like i the diagram.

    How do i configure the Cisco switch so it has a route out to the Smoothwall box so we can get a net connection please?

    Eventually i am looking to move something like this in production possibly using a big Smoothwall box.

    Thanks
    Attached Images Attached Images

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,773
    Thank Post
    865
    Thanked 1,663 Times in 1,448 Posts
    Blog Entries
    11
    Rep Power
    442
    Please can we move this to the networks forum. I put this here by mistake :-)

  3. #3

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,773
    Thank Post
    865
    Thanked 1,663 Times in 1,448 Posts
    Blog Entries
    11
    Rep Power
    442
    Anyone please?

  4. #4

    twin--turbo's Avatar
    Join Date
    Jun 2012
    Location
    Carlisle
    Posts
    2,334
    Thank Post
    1
    Thanked 381 Times in 340 Posts
    Rep Power
    150
    en
    conf t
    ip route 0.0.0.0 0.0.0.0 ipofsmoothwall
    exit
    copy run start





    You will need the smoothie to be on one of the vlans or create a new vlan and make sure IVR works.
    you will also need routes on the smoothy back to the cisco.

  5. Thanks to twin--turbo from:

    FN-GM (13th November 2012)

  6. #5

    twin--turbo's Avatar
    Join Date
    Jun 2012
    Location
    Carlisle
    Posts
    2,334
    Thank Post
    1
    Thanked 381 Times in 340 Posts
    Rep Power
    150
    alternativly you can use

    ip default-gateway ipofsmoothwall

  7. #6

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,773
    Thank Post
    865
    Thanked 1,663 Times in 1,448 Posts
    Blog Entries
    11
    Rep Power
    442
    Ok what if i have a 3rd VLAN that i dont want it to go via Smoothwall. Maybe to have no gateway or to go out via another gateway?

    Thanks

  8. #7

    Join Date
    Nov 2012
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Just create a route telling it which interface you want that subnet to go out on. The default route is only used if nothing else in the list matches.

    Example:
    ip route 172.16.188.252 255.255.255.252 FastEthernet 0/0

    Edit: Sorry, misread your post. The above may not do what you're asking. You will need to use per vlan spanning tree to accomplish what you want. And you will need more switches.

    Last edited by rwwest7; 13th November 2012 at 11:39 AM.

  9. #8

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,773
    Thank Post
    865
    Thanked 1,663 Times in 1,448 Posts
    Blog Entries
    11
    Rep Power
    442
    Quote Originally Posted by rwwest7 View Post
    Just create a route telling it which interface you want that subnet to go out on. The default route is only used if nothing else in the list matches.

    Example:
    ip route 172.16.188.252 255.255.255.252 FastEthernet 0/0

    Edit: Sorry, misread your post. The above may not do what you're asking. You will need to use per vlan spanning tree to accomplish what you want. And you will need more switches.

    @rwwest7 What does the IP route do please?

  10. #9

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,773
    Thank Post
    865
    Thanked 1,663 Times in 1,448 Posts
    Blog Entries
    11
    Rep Power
    442
    To route a specifc VLAN for example VLAN 502 to Smoothwall could i do this

    ip route 172.20.2.0 255.255.255.0 ipofsmoothwall

    Thanks

  11. #10

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,773
    Thank Post
    865
    Thanked 1,663 Times in 1,448 Posts
    Blog Entries
    11
    Rep Power
    442
    It turns out that Smoothwall express doesnt support multiple local subnets does anyone know of any alternatives please?

  12. #11

    twin--turbo's Avatar
    Join Date
    Jun 2012
    Location
    Carlisle
    Posts
    2,334
    Thank Post
    1
    Thanked 381 Times in 340 Posts
    Rep Power
    150
    Not sure about the smoothie.. what do you actually want it to do?

    but to have a different DG, don't put an IP on the vlan interface and it won't route. Plug the other router into the vlan and have it issue DHCP to that vlan.

    Rob

  13. #12

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,773
    Thank Post
    865
    Thanked 1,663 Times in 1,448 Posts
    Blog Entries
    11
    Rep Power
    442
    Well i want the VLANs to route.

    Im just after a basic firewall to test some stuff

  14. #13
    cpjitservices's Avatar
    Join Date
    Jul 2010
    Location
    Hessle
    Posts
    2,419
    Thank Post
    507
    Thanked 282 Times in 258 Posts
    Rep Power
    81
    ok best thing I can advise is this.

    I dont know how smoothwall works but, if you want a basic firewall i'd do it in pfsense, and yes it supports multiple local subnets by grouping the Inteface IP's or adding IP's in as Aliasses, id go into the switches and add another vlan, add the vlan(s) on pfsense also and put DHCP on pfsense to serve on the vlans, if you have your internet connection plugged into the pfsense box it'll route to it anyway and aslong as you set your rules and gateways up properly, if traffic on VLAN 501 is destined for the internet Pfsense will forward it out of the gateway you specify (ie the internet) so you can get internet access but also that VLAN will access other parts of the network if you wish it to.#

    Pfsense will route the vlans, give you internet access on the vlans if you wish, and you'll have either a simple or advanced firewall if you want.

  15. #14

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,773
    Thank Post
    865
    Thanked 1,663 Times in 1,448 Posts
    Blog Entries
    11
    Rep Power
    442
    Well i dont want it to route between the VLANS i want the L3 switch to do that.

    Would i set a static route on the Switch so it knows for that vlan to go to pfsense? The DG of my clients will be the VLAN interface IP.

    Something like

    ip route 172.20.2.0 255.255.255.0 <ip of pfsense>

    Basically i want it to act as a firewall and to get an internet connection to my test setup.

    Thanks
    Last edited by FN-GM; 13th November 2012 at 10:38 PM.

  16. #15
    cpjitservices's Avatar
    Join Date
    Jul 2010
    Location
    Hessle
    Posts
    2,419
    Thank Post
    507
    Thanked 282 Times in 258 Posts
    Rep Power
    81
    Just set pfsense as your default gateway.

SHARE:
+ Post New Thread
Page 1 of 6 12345 ... LastLast

Similar Threads

  1. Smoothwall Express Error
    By netadmin in forum *nix
    Replies: 8
    Last Post: 9th October 2007, 07:44 AM
  2. Replies: 3
    Last Post: 19th January 2007, 11:06 AM
  3. Anyone recommend Smoothwall Express?
    By OverWorked in forum *nix
    Replies: 15
    Last Post: 26th January 2006, 11:37 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •