cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1537
Views
5
Helpful
5
Replies

sg350 inter vlan ,with all vlan able to access isp router to access internet

I am new to networking.

I need to create 2 vlan ,with all vlans able to access internet using ISP router( The ISP router cannot create trunk port/vlan only direction connection.)

 

DEFAULT VLAN 1-192.168.3.1/24--->G1

VLAN 10-192.168.10.1/24--------->G2

VLAN 20-192.168.20.1/24--------->G3

ISP ROUTER IP-192.168.1.1/24----->G4

 

any ways??

2 Accepted Solutions

Accepted Solutions

Seb Rupik
VIP Alumni
VIP Alumni

Hi there,

Your ISP router will need to do two functions.

Firstly, add a static route directing traffic to the subnets routed on the SG350, (192.168.3.0/24, 192.168.10.0/24, 192.168.20.0/24) to the SG350 IP address on the directly connected subnet, which (if I read you info correctly) is 192.168.1.1 .

 

Secondly, the ISP router must be configured to NAT the subnets which are being routed by the SG350.

 

cheers,

Seb.

View solution in original post

A stock ISP router will generally only NAT for directly connected subnets. If you are lucky you may be able add additional subnets for SNAT, but most ISP routers are so featureless it may not have the option.

View solution in original post

5 Replies 5

Seb Rupik
VIP Alumni
VIP Alumni

Hi there,

Your ISP router will need to do two functions.

Firstly, add a static route directing traffic to the subnets routed on the SG350, (192.168.3.0/24, 192.168.10.0/24, 192.168.20.0/24) to the SG350 IP address on the directly connected subnet, which (if I read you info correctly) is 192.168.1.1 .

 

Secondly, the ISP router must be configured to NAT the subnets which are being routed by the SG350.

 

cheers,

Seb.

is this way
ipv4 routing on sg350
192.168.10.0->192.168.1.1
192.168.20.0->192.168.1.1
and also why for ip routing-destination ip prefix start with zeros(192.168.10.'0')

It may be easier if you share the running config of the SG350.

 

To answer your second question a routing prefix should list the subnet ID netmask. 99% of the time a subnet ID starts at zero to keep things simple, the other 1% when dealing constrained IP space or point-to-point links the sunnet ID will be something non-zero, but on a subnet boundary.

 

cheers,

Seb.

In switch, already routing all vlans to isp routers ip address.
Then why need to add NAT in routers

A stock ISP router will generally only NAT for directly connected subnets. If you are lucky you may be able add additional subnets for SNAT, but most ISP routers are so featureless it may not have the option.