Quantcast
Channel: PowerConnect Forum - Recent Threads
Viewing all articles
Browse latest Browse all 908

Unable to see world from VLANs - N3024

$
0
0

I recently made a similar post, but had to change the config to include VRRP and now I'm back to where I was before.

Vlan 309 serves to connect between this switch and our firewall (asa 5525-x). If I put a machine on Vlan 309 it can reach the world without any problems, but it cannot talk to any of the other vlans (cannot ping hosts as well as interfaces or vrrp interfaces on the switch)

The other Vlans (300-307) can all ping between themselves, capable of reaching other hosts, as well as switch interfaces and vrrp interfaces, including the switch interface and vrrp interface of Vlan 309, but they fail to reach the gateway. I assume the default route (0.0.0.0 0.0.0.0 10.10.241) should be all I need, I did try to add additional routes in for individual vlans but didn't see any change and I have removed them.

I've included the config here, as well as my show ip route output below that.

Thanks

==EDIT==

I should also point out that the only VLAN on the ASA is 309, even though I have all of the vlans on the trunk port that goes to the ASA, I think the problem is related to the fact that the ASA only has an IP address from the VLAN 309 subnet (the 10.10.1.241 address that we see set as the defualt gateway) 

!Current Configuration:
!System Description "Dell Networking N3024, 6.2.6.6, Linux 3.6.5-50bbccb7"
!System Software Version 6.2.6.6
!
configure
vlan 300-307,309-311
exit
vlan 300
name "Site Management"
exit
vlan 301
name "Application Management"
exit
vlan 302
name "CFS Fabric"
exit
vlan 303
name "Application Fabric"
exit
vlan 304
name "UMG Fabric"
exit
vlan 305
name "SBC Core Fabric"
exit
vlan 306
name "Trusted HA"
exit
vlan 307
name "Untrusted HA"
exit
vlan 309
name "Firewall/Switch Span"
exit
vlan 310
name "Firewall Access"
exit
vlan 311
name "SBC General Access"
exit
slot 1/0 1 ! Dell Networking N3024
stack
member 1 1 ! N3024
exit
interface out-of-band
ip address 192.168.1.15 255.255.240.0 192.168.0.1
exit
ip routing
interface vlan 1
bandwidth 10000
exit
interface vlan 300
ip address 10.10.0.2 255.255.255.128
bandwidth 10000
exit
interface vlan 301
ip address 10.10.0.130 255.255.255.192
bandwidth 10000
exit
interface vlan 302
ip address 10.10.0.194 255.255.255.224
bandwidth 10000
exit
interface vlan 303
ip address 10.10.0.226 255.255.255.224
bandwidth 10000
exit
interface vlan 304
ip address 10.10.1.2 255.255.255.224
bandwidth 10000
exit
interface vlan 305
ip address 10.10.1.34 255.255.255.224
bandwidth 10000
exit
interface vlan 306
bandwidth 10000
exit
interface vlan 307
bandwidth 10000
exit
interface vlan 309
ip address 10.10.1.245 255.255.255.240
bandwidth 10000
exit
interface vlan 310
bandwidth 10000
exit
interface vlan 311
bandwidth 10000
exit
ip route 0.0.0.0 0.0.0.0 10.10.1.241

ip vrrp
!
interface Gi1/0/1
description "UMG ShMan A"
exit
!
interface Gi1/0/2
description "UMG-1a Fabric 1/2"
exit
!
interface Gi1/0/3
description "UMG-1a Fabric 2/2"
exit
!
interface Gi1/0/4
description "Meta1 Core Uplink - A"
switchport mode trunk
switchport trunk allowed vlan 300-303,305-307,309
exit
!
interface Gi1/0/5
description "Meta2 Core Uplink - A"
switchport mode trunk
switchport trunk allowed vlan 300-303,305-307,309
exit
!
interface Gi1/0/6
description "Meta3 Core Uplink - A"
switchport mode trunk
switchport trunk allowed vlan 300-303,305-307,309
exit
!
interface Gi1/0/7
description "Meta1 Access Uplink A"
switchport mode general
switchport general allowed vlan add 311
exit
!
interface Gi1/0/8
description "Meta2 Access Uplink A"
switchport mode general
switchport general allowed vlan add 311
exit
!
interface Gi1/0/9
description "Meta3 Access Uplink A"
switchport mode general
switchport general allowed vlan add 311
exit
!
interface Gi1/0/10
description "Metaswitch ASA Uplink"
switchport mode trunk
switchport trunk allowed vlan 1,301-311
exit
!
interface Gi1/0/23
description "XConnect"
switchport mode trunk
switchport trunk allowed vlan 1,301-311
exit
interface vlan 300 2
vrrp 30
vrrp 30 mode
vrrp 30 ip 10.10.0.1
vrrp 30 priority 10
vrrp 30 accept-mode
vrrp 30 preempt delay 60
exit
interface vlan 301 3
vrrp 31
vrrp 31 mode
vrrp 31 ip 10.10.0.129
vrrp 31 priority 10
vrrp 31 accept-mode
exit
interface vlan 302 4
vrrp 32
vrrp 32 mode
vrrp 32 ip 10.10.0.193
vrrp 32 priority 10
vrrp 32 accept-mode
exit
interface vlan 303 5
vrrp 33
vrrp 33 mode
vrrp 33 ip 10.10.0.225
vrrp 33 priority 10
vrrp 33 accept-mode
exit
interface vlan 304 6
vrrp 34
vrrp 34 mode
vrrp 34 ip 10.10.1.1
vrrp 34 priority 10
vrrp 34 accept-mode
exit
interface vlan 305 7
vrrp 35
vrrp 35 mode
vrrp 35 ip 10.10.1.33
vrrp 35 priority 10
vrrp 35 accept-mode
exit
interface vlan 309 10
vrrp 39
vrrp 39 mode
vrrp 39 ip 10.10.1.244
vrrp 39 priority 10
vrrp 39 accept-mode
exit
snmp-server engineid local 800002a203f48e383643e8
exit

 

console(config)#show ip route

Route Codes: R - RIP Derived, O - OSPF Derived, C - Connected, S - Static
B - BGP Derived, E - Externally Derived, IA - OSPF Inter Area
E1 - OSPF External Type 1, E2 - OSPF External Type 2
N1 - OSPF NSSA External Type 1, N2 - OSPF NSSA External Type 2
S U - Unnumbered Peer, L - Leaked Route

* Indicates the best (lowest metric) route for the subnet.

Default Gateway is 10.10.1.241
S *0.0.0.0/0 [1/0] via 10.10.1.241, Vl309
C *10.10.0.0/25 [0/1] directly connected, Vl300
C *10.10.0.128/26 [0/1] directly connected, Vl301
C *10.10.0.192/27 [0/1] directly connected, Vl302
C *10.10.0.224/27 [0/1] directly connected, Vl303
C *10.10.1.0/27 [0/1] directly connected, Vl304
C *10.10.1.32/27 [0/1] directly connected, Vl305
C *10.10.1.240/28 [0/1] directly connected, Vl309

 


Viewing all articles
Browse latest Browse all 908

Trending Articles