03-26-2019 02:12 PM - edited 03-26-2019 02:14 PM
Hello I am new with Cisco Configuration. we have 2 C2960XR-48FPS-I stack and we need to have Wifi, voip, server (DHCP) and internet and I need to have 8 different vlans for WAPS, Server, Access, Voice, etc, and all those vlans need to comunicate in between. I have a Firewall Sonicwall (10.23.200.1)<-----> C2960XR (Core/Access) <---------> (WAPs, Printers, Voip, POS, Server, Security(Cameras))
I did a configuration but I cannot ping or have connectivity between VLANS.
example: a device in vlan 99 cannot ping a device in Vlan 100 or a a device in vlan 100 cannot ping a device in Vlan 200
partial config:
!
switch 1 provision ws-c2960x-48fps-l
switch 2 provision ws-c2960x-48fps-l
ip routing
!
interface GigabitEthernet1/0/1
description *** Server DHCP - Ethernet connection ***
switchport access vlan 100
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/48
description ******Master Internet VLAN to Firewall X0 Main*****
switchport access vlan 200
switchport mode access
speed 1000
duplex full
!
interface GigabitEthernet2/0/1
description *** WAN SW Management PHWANSW1 GE 3 ***
switchport access vlan 99
switchport mode access
!
!
interface Vlan99
description ***Management***
ip address 10.23.99.1 255.255.255.0
!
interface Vlan100
description ***Server***
ip address 10.23.100.1 255.255.255.0
!
interface Vlan200
description *** Internet ***
ip address 10.23.200.2 255.255.255.0
!
ip default-gateway 10.23.200.1
!
ip route 0.0.0.0 0.0.0.0 10.23.200.1
please help!!!
!
Solved! Go to Solution.
03-27-2019 09:59 AM
03-27-2019 10:54 AM
Most of this discussion has focused on a particular issue with 2 vlans and 2 hosts on those vlans. You now ask a much more broad question. You have described your requirements in pretty general terms (need 8 vlans, need the vlans to communicate with each other). And in pretty general terms your 2960 switch stack should be able to satisfy the requirement for 8 vlans (so 8 subnets) and routing between those subnets. As you get further into details about what you need (do you need to restrict what wifi can access, etc) the 2960 may or may not be able to fulfill all of your requirements. One thing is clear: you mention Internet access for your devices. The 2960 should be able to provide the routing to get to the Internet. But Internet access will require address translation. And your 2960 does not support address translation. For that you will need your firewall.
HTH
Rick
03-27-2019 11:16 AM
03-27-2019 11:42 AM
Glad to know that you have done testing and verify that routing between vlans is working. Based on what you showed in the original post about assigning ports to vlan 200 (which would be the ports connecting to the firewall), and configuring interface vlan 200 with its IP address, and configuring the default route with the IP of the firewall as the next hop then I am confident that this will work for any vlan to route to the firewall and be able to access the Internet.
HTH
Rick
03-27-2019 11:46 AM
thank you so much for your help
03-27-2019 12:33 PM
You are welcome. I am glad that our suggestions have been helpful. It has been a team effort and that is one of the advantages of this community, that you may have multiple people each offering their individual insights and their expertise. Thank you for marking this discussion as solved. This will help other participants in the community to identify discussions which have helpful information. This community is an excellent place to ask questions and to learn about networking. I hope to see you continue to be active in the community.
HTH
Rick
03-27-2019 11:34 AM
Hello
Just like to ask-
Do you have full l2 connection thoughout your estate, are all the necessary vlans populated in the vtp database switch(s) and are these allowed to traverse any trunks they maybe.
Also Is your switch stack working as it should be, do you have full stack ring speed etc..
sh vlan brief
sh switch detail
sh switch stack-ring speed
03-27-2019 11:37 AM
Hello
Strike that just realized the foucs has moved on from inter-vlan routing - so apologies to all
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: