Cannot ping Draytek router from laptop on vlan 2, native vlan works fine

[toastedtcakes]

Hello All,

Hoping some one can help as I must have made a silly mistake somewhere, tearing my hair out trying to see what is wrong.

I have this simple setup:

Draytek router 192.168.1.1

Cisco 3850 24 port 192.168.1.2

Cisco 2960S stack of x 2 switches 192.168.1.3

There are two vlans setup on the 3850 as well as the dhcp pools for both vlans :

vlan 1 - 192.168.1.1\24

vlan 2 - 192.168.2.1\24

The Draytek is connected to cisco 3850 as access(not trunk) port on interface 1(vlan 1)

the 3850 is connected to the 2960 stack via etherchannels which allow both vlans 1 and 2.

If I connect a laptop to an interface on the 2960 stack on vlan 1 I can ping both vlan virtual gateways as well as the router on 192.168.1.1.

If I connect a laptop to an interface on the 2960 stack on vlan 2 I can ping everything except the router on 192.168.1.1

If i run a tracert from the laptop whilst it is on an interface for vlan 2 it stops at the vlan 2 virtual gateway 192.168.2.1. So it seems like it never gets out of the vlan but then pinging will ping everything but not the router??

So confused. Any ideas would be greatly appreciated.

Rgds

Dan

Cannot ping Draytek router from laptop on vlan 2, native vlan works fine

[Georg Pauwen]

Hello,

which Draytek model do you have ?

[toastedtcakes]

Hi,

Thanks for the reply :-)

I'using a Draytek Vigor 2830VN-plus

Rgds

Dan

[Georg Pauwen]

Hello,

I think your model is capable of multiple private LAN subnets, but you need to get into the Vigor to configure you second LAN (192.168.2.0/24).

Your 3850 cannot to NAT, so your only option is to adjust the config of the Draytek.

Here is the link to download the user guide:

https://www.draytek.co.uk/support/downloads/vigor-2830n-v2

[toastedtcakes]

Thanks for the reply.

So I can leave the main vlan setup on the 3850 but just add the 192.168.2.0\24 to the draytek to make it recognize the network then make that link a trunk opposed to access port?

I'll give it a go now :-)

[Georg Pauwen]

Hello,

page 119 of the user guide deals with Multi VLAN subnets...

[pieterh · Accepted solution]

you do not need vlan on the draytek
but you need to tell the draytek that it can reach 192.168.2.0 using the 3850

(it must know the way back to 192.168.2.0)
-> on draytek add static route for network 192.168.2.0/24 (or netmask 255.255.255.0) to 192.168.1.2

[toastedtcakes]

Thanks to both or you for your fast replies and your help.

I managed to get it working two different ways but will stick with the static route option as much quicker to implement.

Many Thanks :-) :-)