VLAN routes

[stevec_]

We currently have a flat network and want to implement VLANs for various services (CCTV, Voip, wifi).

I want to start with setting up a VLAN for BYOD/pupil wifi - which we already have but using Meraki NAT isolation.

We are in Hampshire on HPSN2 network and assigned an IP range/VLAN on their network (10.198.136.0/21) and all of our devices are currently in that range.

 

Our network topology looks something like the following:

 

Gateway - 10.198.136.1 (this is on school premises but maintained by council)

Core L3 switch/router - 10.198.136.105

Various netgear/Ubiquiti switches.

 

I've created the following VLAN on our switches - VLAN110: 10.100.110.0/23

I've enabled routing on our core switch and created an interface for 10.100.110.1 and enabled routing for that as well.

I've setup a client with a static IP address on VLAN110 range and set the gateway to 10.100.110.1 and can ping that gateway.

 

I can't seem to be able to ping our primary gateway (10.198.136.1), I've tried setting up a default route (0.0.0.0/0.0.0.0 -> 10.198.136.1) on our router but still no luck.

Is it possible to have inter-vlan routing between VLANs and the Default VLAN?

 

I setup a test environment with a few of our switches, using HP/Ubiquiti/Netgear switches and managed to get inter-vlan routing working on there but cannot setup a route to our main network.

 

Any help would be great.

[colly72]

Can you ping a PC on the same subnet as your default gateway? Sometimes gateways/firewalls are configured not to respond to pings.

[IrritableTech]

I'd have a conversation with your council support services first. Their router does not have any idea about where 10.100.110.0/23 is or how to reply to it.

[sultan966]

What is the subnet mask of primary gateway 10.198.136.1?

What is the switchport ip address and subnet maks that is connected to primary gateway?

[colly72]

I agree. On our Sophos UTM, we have static routes for each VLAN, that have the core switch as the gateway.

[stevec_]

Thanks for your replies.

 

I've spoken to our council IT services and they confirm what you say and I believe what I have setup should work in terms of the routes. I believe it is an issue with the topology where our Layer 3 switch is not currently our outward facing device.