VLAN and smoothwall configuration

[josephathon]

Hi,

I wonder if someone could shed some light on an issue I am having?

I am planning on moving from a flat network to VLANs this summer. I have set up several vlans all connected to a 2920 switch which is acting as the core switch. All clients on each VLAN are able to ping each other using the switch as their default gateway so routing is working. I also want to put the smoothwall in its own vlan which I have tested this morning however I cannot ping the Internet from any of the VLANS. I have set a default route in the switch of 0.0.0.0/0 10.10.10.2 (the lan IP of the smoothwall) which I can ping however I cannot ping the Internet. The smoothwall is connected to the Internet as I can ping the Internet from the WAN port on the smoothwall. This is a brand new smoothwall out of the box. I can also ping and connect to the web interface on the Smoothwall from any of the VLANS as I have patched it to the latest release. The LAN NIC of the smoothwall is connected to an untagged port in the relevant vlan and has the VLAN IP address of the 2920 as it's default gateway.

Any ideas would be appreciated.

[FN-GM]

You need to setup the routes on the Smoothwall. You set them up on Network > Routing > Subnets. You put your network address and subnets of your internal LAN and then the DG address is the DG of the VLAN your smoothwall sits in (on the internal side). You can use a summary address, saves you entering every single subnet.

 

Mine is attached as an example

Edited July 11, 2016 by FN-GM

[josephathon]

Hi FN-GM,

Thanks for the info. I have added the routes you suggest into Smoothwall but I am still unable to ping the Internet. When I add the routes you suggest I am unable to ping the smoothwall LAN IP from any of the VLANS but ehen I disable these routes I can ping it again.

 

Any ideas?

Thanks

[FN-GM]

Can you post the following please?

 

1. Screenshot of Smoothwall routes

2. The IP address of the VLAN to Smoothwall sits in.

3. The IP of the machine your are trying to ping from.

 

 

Can you confirm the machine your pinging from can ping another machine in another vlan?

[josephathon]

Doh I am an idiot. First time round I had put the DG of each individual vlan in the smoothwall route, second time I had put the smoothwall LAN IP as the DG and now it's correct with the DG of the VLAN that the smoothwall is in as you said. Can now ping from all the vlans will have to wait until tomorrow before checking the Internet. Thanks for putting me on the right track.

[FN-GM]

Glad it's working, thanks for letting us know.