+ Post New Thread
Page 1 of 3 123 LastLast
Results 1 to 15 of 41
Wired Networks Thread, VLANs not seeing internet in Technical; I've been planning this for ages, and all is going well apart from this 'ickle issue. I'm taking our /22 ...
  1. #1

    Join Date
    Feb 2008
    Location
    Wiltshire
    Posts
    884
    Thank Post
    277
    Thanked 139 Times in 112 Posts
    Blog Entries
    27
    Rep Power
    42

    VLANs not seeing internet

    I've been planning this for ages, and all is going well apart from this 'ickle issue.

    I'm taking our /22 network from SWGfL and subnetting it into 4 x 24 Subnet; like a good little network admin as it was getting pretty big . I've setup the first of the VLANs on one of the /24 ranges, and after tweaking subnet masks of servers, adding subnets to sites, dhcp helper addresses, etc I'm logging on quite happily on this other /24 subnet. I've got routing switched on, along with multicast (to support the phone system here as well as other things). For the life of me now, I can't access the internet from this new subnet. I'm purposely using these subnets as they fall within my range given by SWGfL so I wouldn't need to worry about NAT just let our Core (HP 5406zl) do the routing.

    What am I missing? Help appreciated or am I just being a complete idiot!!!?

    Pete

  2. #2
    andyrite's Avatar
    Join Date
    Apr 2007
    Posts
    413
    Thank Post
    7
    Thanked 90 Times in 71 Posts
    Rep Power
    41
    Can you post your config of the core?

  3. #3

    Join Date
    Feb 2008
    Location
    Wiltshire
    Posts
    884
    Thank Post
    277
    Thanked 139 Times in 112 Posts
    Blog Entries
    27
    Rep Power
    42
    Quote Originally Posted by andyrite View Post
    Can you post your config of the core?
    Yeah, should done that first shouldn't I? :P

    Code:
    ; J8697A Configuration Editor; Created on release #K.15.10.0009
    ; Ver #03:03.1f.ef:f0
    hostname "Core"
    module 1 type j8702a
    module 2 type j8702a
    module 3 type j8702a
    module 4 type j8702a
    module 5 type j8706a
    module 6 type j8706a
    trunk F15-F16 trk1 trunk
    power-over-ethernet pre-std-detect
    qos type-of-service diff-services
    timesync sntp
    sntp unicast
    sntp server priority 1 10.43.48.4
    time daylight-time-rule western-europe
    ip default-gateway 10.43.48.1
    no ip ssh
    ip route 0.0.0.0 0.0.0.0 10.43.48.1
    ip routing
    ip multicast-routing
    snmp-server community "public" unrestricted
    snmp-server host 10.43.48.220 community "public"
    snmp-server host 10.43.50.107 community "public"
    snmp-server host 10.43.48.158 community "public"
    snmp-server contact "ICT Network Manager" location "Server Room"
    router rip
       enable
       exit
    router pim
       enable
       exit
    vlan 1
       name "DEFAULT_VLAN"
       no untagged C1-C12,C22,D12
       untagged A1-A24,B1-B12,B14-B24,C13,C15-C21,C23-C24,D1-D11,D13-D21,D24,E3,E5,E7,E13-E14,E16-E18,E20-E24,F2,F4-F6,F8,F10,F12,F14,F17-F18,F21-F22,Trk1
       tagged B13,C14,D22-D23,E1-E2,E4,E6,E8-E12,E15,E19,F1,F3,F7,F9,F11,F13,F19-F20,F23-F24
       ip address 10.43.48.95 255.255.255.0
       ip igmp
       ip rip 10.43.48.95
       ip rip 10.43.48.95 receive v1-only
       ip rip 10.43.48.95 send v1-only
       ip pim-dense
          ip-addr any
          exit
       exit
    vlan 2
       name "OUTSIDE"
       no ip address
       exit
    vlan 3
       name "INSIDE"
       tagged D16
       ip address 10.43.50.1 255.255.255.0
       ip helper-address 10.43.48.4
       ip helper-address 10.43.48.49
       ip helper-address 10.43.48.33
       ip igmp
       ip rip 10.43.50.1
       ip rip 10.43.50.1 receive v1-only
       ip rip 10.43.50.1 send v1-only
       ip pim-dense
          ip-addr any
          exit
       exit
    vlan 4
       name "ICT SUITES"
       no ip address
       exit
    vlan 50
       name "Phones"
       untagged C1-C12
       tagged B13,C14,D16,D22-D23,E1-E2,E4-E9,E11-E13,E15,E17,E19,E21,E23,F1,F3,F5,F7,F9,F11,F13,F17,F19-F24
       ip address 172.17.50.1 255.255.255.0
       ip igmp
       qos dscp 101110
       voice
       exit
    vlan 666
       name "Guest-WiFi"
       untagged C22,D12
       tagged C24,D15-D16,E5,E7,E13,E17,E21,E23,F5,F17,F21-F22,Trk1
       ip address 10.74.204.16 255.255.255.0
       ip helper-address 10.43.48.4
       exit
    vlan 667
       name "WiFi Prov"
       tagged C22,C24,D12,D15-D16,E5,E7,E13,E17,E21,E23,F5,F17,F21-F22,Trk1
       ip address 172.17.60.1 255.255.255.0
       ip helper-address 10.43.48.4
       exit
    spanning-tree Trk1 priority 4
    password manager
    password operator

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,971
    Thank Post
    886
    Thanked 1,715 Times in 1,481 Posts
    Blog Entries
    12
    Rep Power
    450
    Is that IP route the IP address your Smoothwall (or whatever you use)?

    Are the clients default gateway pointing to the VLAN IP?

  5. #5

    Join Date
    Feb 2008
    Location
    Wiltshire
    Posts
    884
    Thank Post
    277
    Thanked 139 Times in 112 Posts
    Blog Entries
    27
    Rep Power
    42
    The IP route is our 'gateway' address supplied by SWGfL.

    Device that is on the 'INSIDE' vlan, has a gateway address of 10.43.50.1

    Pete

  6. #6
    andyrite's Avatar
    Join Date
    Apr 2007
    Posts
    413
    Thank Post
    7
    Thanked 90 Times in 71 Posts
    Rep Power
    41
    Can you ping the gateway from one of the clients? They might have to make changes to the config on the gateway to account for the new subnet masks.

  7. #7

    Join Date
    Feb 2008
    Location
    Wiltshire
    Posts
    884
    Thank Post
    277
    Thanked 139 Times in 112 Posts
    Blog Entries
    27
    Rep Power
    42
    No, I can't ping 10.43.48.1 from a client in the 'INSIDE' vlan.

    Cr*p!

    Pete

  8. #8

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,694
    Thank Post
    516
    Thanked 2,455 Times in 1,899 Posts
    Blog Entries
    24
    Rep Power
    833
    You will need the edge router (the Swgfl one) to have it's net mask changed.

    It'll still be using the 252 one i'd guess?

  9. #9

    Join Date
    Feb 2008
    Location
    Wiltshire
    Posts
    884
    Thank Post
    277
    Thanked 139 Times in 112 Posts
    Blog Entries
    27
    Rep Power
    42
    Double Cr*p! Should done more homework!

    Internet access is still operational for 10.43.48.0/24 address, but beyond that its a no go. Hells bells. I'll go speak to the Grid.

    Pete

  10. #10

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,694
    Thank Post
    516
    Thanked 2,455 Times in 1,899 Posts
    Blog Entries
    24
    Rep Power
    833
    Quote Originally Posted by FragglePete View Post
    Double Cr*p! Should done more homework!

    Internet access is still operational for 10.43.48.0/24 address, but beyond that its a no go. Hells bells. I'll go speak to the Grid.

    Pete
    Had the same problem here when we made the change.

  11. #11
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,456
    Thank Post
    10
    Thanked 494 Times in 434 Posts
    Rep Power
    113
    Why even use their addresses? Only need one for the edge firewall/router.

  12. #12

    Join Date
    Feb 2008
    Location
    Wiltshire
    Posts
    884
    Thank Post
    277
    Thanked 139 Times in 112 Posts
    Blog Entries
    27
    Rep Power
    42
    Quote Originally Posted by localzuk View Post
    Had the same problem here when we made the change.
    How did you get it fixed? Were they happy to change the mask on the router for you? Are you on SWGfL ?

    Pete

  13. #13
    mrbios's Avatar
    Join Date
    Jun 2007
    Location
    Stroud, Gloucestershire
    Posts
    2,481
    Thank Post
    351
    Thanked 261 Times in 213 Posts
    Rep Power
    99
    Am i right in assuming you don't have a firewall between you and the SWGfL network then?

    because SWGfLs network isn't secured against access from other schools within the same grid, load up procurve manager plus and start sticking some random 10. ip ranges in to the discovery and you might find you can suddenly see the HP switches of other schools within the grid. Laughed our bottoms off when we found that out 6-7 years ago (i guess they might have sorted that since then, but we are talking about swgfl here mind)

    Using an internal range of 172.18.*.* here with /24 subnets with an ISA server between us and SWGfL on 10.7.*.* /22, didn't have to get swgfl to change anything that way.....albeit we'll be free of them and the ISA this month so yay

  14. #14

    Join Date
    Feb 2008
    Location
    Wiltshire
    Posts
    884
    Thank Post
    277
    Thanked 139 Times in 112 Posts
    Blog Entries
    27
    Rep Power
    42
    Quote Originally Posted by mrbios View Post
    Am i right in assuming you don't have a firewall between you and the SWGfL network then?
    That is correct. I like Keeping It Simple and not have another box to worry about. I fully appreciate what people are saying though but I was just hoping to break up our allocation of addresses into subnets and use them. Our provision with SWGfL is a bit different from normal as the bearer goes to the LEA and is distributed by their network to each of the schools in the borough. I'll have to try and talk to the local network team at the borough, it's just getting in contact with them as I have to be seen to go through the proper channels. Grrrr.

  15. #15

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,694
    Thank Post
    516
    Thanked 2,455 Times in 1,899 Posts
    Blog Entries
    24
    Rep Power
    833
    Quote Originally Posted by FragglePete View Post
    How did you get it fixed? Were they happy to change the mask on the router for you? Are you on SWGfL ?

    Pete
    We had to put a change request in to our LEA. Our router is managed by the LEA.

SHARE:
+ Post New Thread
Page 1 of 3 123 LastLast

Similar Threads

  1. laptop not getting internet at home
    By mant01 in forum Windows
    Replies: 12
    Last Post: 2nd October 2008, 10:32 AM
  2. AD user not seeing home dir
    By torledo in forum Windows
    Replies: 3
    Last Post: 28th April 2008, 11:20 AM
  3. VLAN for guest internet access
    By plexer in forum How do you do....it?
    Replies: 3
    Last Post: 17th December 2007, 12:50 PM
  4. Clients Not Seeing RIS
    By thegrassisgreener in forum Windows
    Replies: 7
    Last Post: 22nd November 2007, 03:16 PM
  5. Adding vLAN not working on HP Procurve
    By mrforgetful in forum Wireless Networks
    Replies: 21
    Last Post: 2nd March 2007, 11:53 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •