snagrat Posted March 17, 2016 Posted March 17, 2016 Just setting up VLAN on my Dlink DGS-3620 switch. Currently have a few VLAN setup which are working but can't get the routing working correctly. I am currently able to ping all the interface of the VLAN but unable to ping a device. Here is my config, can anyone see what might be wrong? DGS-3620-28TC:admin#show ipif Command: show ipif IP Interface : Net2 VLAN Name : Cameras Interface Admin State : Enabled IPv4 Address : 10.133.155.62/26 (Manual) Primary Proxy ARP : Disabled (Local : Disabled) IP Directed Broadcast : Disabled IPv4 State : Enabled IPv6 SLAAC state : Disabled (Default Router: Disabled) DHCPv6 Client State : Disabled (Rapid commit : Disabled) DHCPv6 Client PD State : Disabled (Rapid commit : Disabled) IPv6 State : Enabled IP MTU : 1500 IP Interface : test1 VLAN Name : VLAN101 Interface Admin State : Enabled IPv4 Address : 192.168.10.254/24 (Manual) Primary Proxy ARP : Disabled (Local : Disabled) IP Directed Broadcast : Disabled IPv4 State : Enabled IPv6 SLAAC state : Disabled (Default Router: Disabled) DHCPv6 Client State : Disabled (Rapid commit : Disabled) DHCPv6 Client PD State : Disabled (Rapid commit : Disabled) IPv6 State : Enabled IP MTU : 1500 IP Interface : System VLAN Name : default Interface Admin State : Enabled IPv4 Address : 10.130.240.120/22 (Manual) Primary Proxy ARP : Disabled (Local : Disabled) IP Directed Broadcast : Disabled IPv4 State : Enabled IPv6 SLAAC state : Disabled (Default Router: Disabled) DHCPv6 Client State : Disabled (Rapid commit : Disabled) DHCPv6 Client PD State : Disabled (Rapid commit : Disabled) IPv6 State : Enabled IP MTU : 1500 DHCP Option12 State : Disabled DHCP Option12 Host Name : IP Interface : VID500 VLAN Name : CafeWifi Interface Admin State : Enabled IPv4 Address : 10.133.154.254/24 (Manual) Primary Proxy ARP : Disabled (Local : Disabled) IP Directed Broadcast : Disabled IPv4 State : Enabled IPv6 SLAAC state : Disabled (Default Router: Disabled) DHCPv6 Client State : Disabled (Rapid commit : Disabled) DHCPv6 Client PD State : Disabled (Rapid commit : Disabled) IPv6 State : Enabled IP MTU : 1500 IP Interface : cafewifi VLAN Name : VLAN0100 Interface Admin State : Enabled IPv4 Address : 10.55.211.253/23 (Manual) Primary Proxy ARP : Disabled (Local : Disabled) IP Directed Broadcast : Disabled IPv4 State : Enabled IPv6 SLAAC state : Disabled (Default Router: Disabled) DHCPv6 Client State : Disabled (Rapid commit : Disabled) DHCPv6 Client PD State : Disabled (Rapid commit : Disabled) IPv6 State : Enabled IP MTU : 1500 IP Interface : mgmt_ipif Status : Enabled IP Address : 192.168.0.1 Subnet Mask : 255.255.255.0 Gateway : 0.0.0.0 Link Status : Link Down Total Entries: 6 DGS-3620-28TC:admin#show ipif Command: show ipif IP Interface : Net2 VLAN Name : Cameras Interface Admin State : Enabled IPv4 Address : 10.133.155.62/26 (Manual) Primary Proxy ARP : Disabled (Local : Disabled) IP Directed Broadcast : Disabled IPv4 State : Enabled IPv6 SLAAC state : Disabled (Default Router: Disabled) DHCPv6 Client State : Disabled (Rapid commit : Disabled) DHCPv6 Client PD State : Disabled (Rapid commit : Disabled) IPv6 State : Enabled IP MTU : 1500 IP Interface : test1 VLAN Name : VLAN101 Interface Admin State : Enabled IPv4 Address : 192.168.10.254/24 (Manual) Primary Proxy ARP : Disabled (Local : Disabled) IP Directed Broadcast : Disabled IPv4 State : Enabled IPv6 SLAAC state : Disabled (Default Router: Disabled) DHCPv6 Client State : Disabled (Rapid commit : Disabled) DHCPv6 Client PD State : Disabled (Rapid commit : Disabled) IPv6 State : Enabled IP MTU : 1500 IP Interface : System VLAN Name : default Interface Admin State : Enabled IPv4 Address : 10.130.240.120/22 (Manual) Primary Proxy ARP : Disabled (Local : Disabled) IP Directed Broadcast : Disabled IPv4 State : Enabled IPv6 SLAAC state : Disabled (Default Router: Disabled) DHCPv6 Client State : Disabled (Rapid commit : Disabled) DHCPv6 Client PD State : Disabled (Rapid commit : Disabled) IPv6 State : Enabled IP MTU : 1500 DHCP Option12 State : Disabled DHCP Option12 Host Name : IP Interface : VID500 VLAN Name : CafeWifi Interface Admin State : Enabled IPv4 Address : 10.133.154.254/24 (Manual) Primary Proxy ARP : Disabled (Local : Disabled) IP Directed Broadcast : Disabled IPv4 State : Enabled IPv6 SLAAC state : Disabled (Default Router: Disabled) DHCPv6 Client State : Disabled (Rapid commit : Disabled) DHCPv6 Client PD State : Disabled (Rapid commit : Disabled) IPv6 State : Enabled IP MTU : 1500 IP Interface : cafewifi VLAN Name : VLAN0100 Interface Admin State : Enabled IPv4 Address : 10.55.211.253/23 (Manual) Primary Proxy ARP : Disabled (Local : Disabled) IP Directed Broadcast : Disabled IPv4 State : Enabled IPv6 SLAAC state : Disabled (Default Router: Disabled) DHCPv6 Client State : Disabled (Rapid commit : Disabled) DHCPv6 Client PD State : Disabled (Rapid commit : Disabled) IPv6 State : Enabled IP MTU : 1500 IP Interface : mgmt_ipif Status : Enabled IP Address : 192.168.0.1 Subnet Mask : 255.255.255.0 Gateway : 0.0.0.0 Link Status : Link Down Total Entries: 6 DGS-3620-28TC:admin#clear Command: clear DGS-3620-28TC:admin#show iproute Command: show iproute Routing Table IP Address/Netmask Gateway Interface Cost Protocol ------------------ --------------- ------------ -------- -------- 0.0.0.0/0 10.130.243.254 System 1 Default 10.55.210.0/23 0.0.0.0 cafewifi 1 Local 10.130.240.0/22 0.0.0.0 System 1 Local 10.133.154.0/24 0.0.0.0 VID500 1 Local 10.133.155.0/26 0.0.0.0 Net2 1 Local 192.168.10.0/24 0.0.0.0 test1 1 Local Total Entries: 6 Basically I have a device on 10.55.210.1 and can ping 192.168.10.254 but cannot ping 192.168.10.1 TIA
twin--turbo Posted March 17, 2016 Posted March 17, 2016 I would suspect the default gateway on "192.168.10.1" is not correct. TT
snagrat Posted March 17, 2016 Author Posted March 17, 2016 Firewall is turned off. Gateway on 192.168.10.1 device should be 192.168.10.254 yes?
twin--turbo Posted March 17, 2016 Posted March 17, 2016 yes. is 192.168.10.1 on an untagged port for that vlan101
snagrat Posted March 17, 2016 Author Posted March 17, 2016 Yes it plugged into port 1 on the switch. Untagged vlan101
twin--turbo Posted March 17, 2016 Posted March 17, 2016 can 192.168.10.1 ping alll the vlan gateways adresses?
snagrat Posted March 18, 2016 Author Posted March 18, 2016 The devices go through another switch, Layer 2. Both have the VLANs on and the Trunk ports set. Is there anything else I need to do on the other switch that may be stopping this?
snagrat Posted March 18, 2016 Author Posted March 18, 2016 The device I'm pinging from is connected as a Access port on VLAN 100. The uplinks are TRUNKS on both switches. I can get the CLI export on Monday
snagrat Posted March 21, 2016 Author Posted March 21, 2016 I'm so thick! It was the firewall, I swear I turned them both not but apparently not. Pinging across VLAN now working. Thanks
snagrat Posted March 21, 2016 Author Posted March 21, 2016 So all working except I cannot ping router from a different network. I can ping other devices but just not the router and therefore cannot get on the Internet. My router is on 10.55.211.254/23 and my two VLANs are 10.55.210.0/24 and 10.55.211.0/24 If on 10.55.211.0 network all is OK, but when on 10.55.210.0 I cannot connect. Any idea?
Blue_Cookeh Posted March 21, 2016 Posted March 21, 2016 Does your router know how to get back to the 10.55.210.0 network? Routing is a two way street
snagrat Posted March 21, 2016 Author Posted March 21, 2016 Well possible not, but I was hoping that because this was a SWGfL router that they had set it. Maybe I need to speak to them.
twin--turbo Posted March 23, 2016 Posted March 23, 2016 lol or the classic gotcha "windows firewall"[/qoute] and the GFL router will only know about your original network, so yes routing outside wont work.. Personally I think thats a good thing and all clients should be NATTED behind your own filter/firewall/utm TT
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now