Static routing via the wan to lan ports on Cisco RV082

[justin-burley]

I have three cisco Rv082 switches connecting to load balancing draytek vigor 300b 

Problem is I have advanced routing (static routing) configured as, ip address range, gateway of Wan port of the destination cisco switch.

I have not added any static routing on the Load balancing Swtich draytek Vigor 300b as this can see all wan ports and you can ping the switches. 

I am not getting any data passing through the Lan to Wan port to the Wan / Lan from say my PC on one subnet to the printer on another via ping. 

I have remote management working via the wan port on both cicso rv081 switches. I am not sure where the problem is.

[Philip D'Ath]

I can't visualise your network.  Could you draw a diagram?

[justin-burley]

I have attached a basic diagram of the network

[Philip D'Ath]

Have you created a firewall rule on the RV082's to allow the traffic in from the LAN of the other RV082's ?  You also need to make sure it does not do NAT for this traffic.

[justin-burley]

I understand that would be for all data udp... I shall setup the firewall rule for that and see what happens tomorrow. Thanks for the input.

[Philip D'Ath]

You probably want it for all IP traffic if you want them to be able to all talk to each other.

[justin-burley]

Perfect thats what I thought many thanks

[justin-burley]

Hi Philip,

I am still having trouble setting up the static route.

I have attached a schema of the network and we have removed the firewall on the internal network cisco rv082 switches. You can not see with ping any of the other switches. I have set the static route i.e 192.168.6.0 255.255.255.0  gateway of the wan 1 port 192.168.1.107 

The wan port is connected to a 5ghz Link to a remote building with it's own ip address 192.168.1.?? and that is connected to a load balancing switch which connects to the internet. you will see on the attached schema that there is a cisco unmanaged switch before the Vigor.

I am sure there is an easy solution but i just can't see it.

[Philip D'Ath]

I can not see 192.168.6.0/24 or 192.168.1.107 on your diagram.

On the RV082 with the WAN IP address of 192.168.1.102, you need these routes:

192.168.3.0/24 via 192.168.1.103

192.168.4.0/24 via 192.168.1.104

On the RV082 with the WAN IP address of 192.168.1.103, you need these routes:

192.168.2.0/24 via 192.168.1.102

192.168.4.0/24 via 192.168.1.104

On the RV082 with the WAN IP address of 192.168.1.104, you need these routes:

192.168.2.0/24 via 192.168.1.102

192.168.3.0/24 via 192.168.1.103

You also need firewall rules allow all these subnets to talk to each other on each unit.

[justin-burley]

Hello Phil,

We have these set and have been for some time. These routes are not allowing data to reach the ip address chosen. It says that the route is filtered. I do not know why as the firewall is disabled. 

If the firewall is disabled all data should pass through the wan to the lan correct? but in the schema there is a vigor load balancing switch which is connected to the Cisco un-managed switch. I don't understand why the data can access the internet from the Lan but with the routes nothing gets through to the ipaddress range.

pics atatched

[Philip D'Ath]

I wonder if the RV082's are still NAT'ing the traffic.

It may be you might need to go to a traditional Cisco router, like a Cisco 890 series, to get the extra control needed.