Cisco CB350 VLAN DNS Problem

[spatuz]

Hi. i'm new for the network cisco device so i bought a CB350 and start doing some test. I' ve configured a network with VLAN as show in the attached picture but i'm finding some problem to give connectivity to the device PC1 under VLAN10 if i use the gateway of the sonicwall firewall 192.168.0.1 there is no problem to reach internet, the pc have 8.8.8.8 as DNS, if i use the gateway of the VLAN10 192.168.0.2 in the cisco SB350 i can't reach internet but i can reach other deivce in other VLAN. Attached the configuration of the Cisco Layer 3. The result i would like to reach is pass all the Routing between VLAN to the Cisco CB350 and later go in internet with a dedicated VLAN between the switch and the firewall. Other option are accepted.

switcha03d93#show running-config
config-file-header
switcha03d93
v3.3.0.16 / RCBS3.3_950_377_202
CLI v1.0
file SSD indicator encrypted
@
ssd-control-start
ssd config
ssd file passphrase control unrestricted
no ssd file integrity control
ssd-control-end cb0a3fdb1f3a1af4e4430033719968c0
!
!
unit-type-control-start
unit-type unit 1 network gi uplink none
unit-type-control-end
!
vlan database
vlan 10,20,30
exit
voice vlan oui-table add 0001e3 Siemens_AG_phone
voice vlan oui-table add 00036b Cisco_phone
voice vlan oui-table add 00096e Avaya
voice vlan oui-table add 000fe2 H3C_Aolynk
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone
voice vlan oui-table add 00e075 Polycom/Veritel_phone
voice vlan oui-table add 00e0bb 3Com_phone
bonjour interface range vlan 1
hostname switcha03d93
username Simone password encrypted $15$ZEyKIu5BQNTjRMWk$0QRSEi5z350Q8jc89snnPIAlnJM41h9kmroeb+FFpgSwKsnvcNUrqoA68Pf6UxaYVnu0lkc0CQcEY5M3GL4XpA== privilege 15
ip name-server 8.8.8.8
!
interface vlan 1
no ip address dhcp
!
interface vlan 10
ip address 192.168.0.2 255.255.255.0
!
interface vlan 20
ip address 192.168.1.1 255.255.255.0
!
interface GigabitEthernet1
switchport access vlan 10
!
interface GigabitEthernet2
switchport access vlan 20
!
interface GigabitEthernet5
switchport access vlan 10
!
interface GigabitEthernet9
switchport access vlan 10
!
interface GigabitEthernet10
switchport access vlan 10
!
exit

[M02@rt37 · Accepted solution]

Hello @spatuz,

CBS350 is a Layer3 Switch (Thanks ;)) Add route static to route traffic towards Sonicwall

[spatuz]

CB350 is a layer 3 provide dynamic Layer 3 routing.

https://community.cisco.com/t5/switches-small-business/cbs-350-switch-functionality/td-p/4618176#:~:text=For%20example%2C%20the%20switches%20provide,VLANs%20without%20degrading%20application%20performance.

[MHM Cisco World]

FW have defualt route SW dont have 

Add defualt route and check again.

[balaji.bandi]

Agreed Switch do not have Default route or ip route command  - so as suggested add that necessary config and test it.

Note, if your VLAN 20 need to work as expected, since 1 is gateway on the switch, i suggest to have ip route command

[spatuz]

Okay thank you guys. I have add this static route

ip name-server 8.8.8.8
!
interface vlan 1
no ip address dhcp
!
interface vlan 10
ip address 192.168.0.2 255.255.255.0
!
interface vlan 20
ip address 192.168.1.1 255.255.255.0
!
interface vlan 30
shutdown
!
interface GigabitEthernet1
switchport access vlan 10
!
interface GigabitEthernet2
switchport access vlan 20
!
interface GigabitEthernet5
switchport access vlan 10
!
interface GigabitEthernet9
switchport access vlan 10
!
interface GigabitEthernet10
switchport access vlan 10
!
exit
ip route 192.168.0.0 /24 192.168.0.1 metric 2


Leave in the PC the gateway 192.168.0.2 but is not working. I have add a rules to the firewall to enable any to any connection.

[balaji.bandi]

You need to make right decision, is the Sonic FW need to be Gateway for devices or Switch. (what is your intention here)

I suggest to use Switch as Layer 2, Sonicwall FW as Gateway.  (192.168.0.1)

[MHM Cisco World]

Add defualt route to SW 

And enable ip routing 

[spatuz]

i want to have the device connected to the switch the gateway of the VLAN assigned, 192.168.0.1 in caso of the VLAN 10, and go in internet with the device in the VLAN 10. Actually i have configure the switch as show here:
file SSD indicator encrypted
@
ssd-control-start
ssd config
ssd file passphrase control unrestricted
no ssd file integrity control
ssd-control-end cb0a3fdb1f3a1af4e4430033719968c0
!
!
unit-type-control-start
unit-type unit 1 network gi uplink none
unit-type-control-end
!
vlan database
vlan 10,20,30
exit
voice vlan oui-table add 0001e3 Siemens_AG_phone
voice vlan oui-table add 00036b Cisco_phone
voice vlan oui-table add 00096e Avaya
voice vlan oui-table add 000fe2 H3C_Aolynk
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone
voice vlan oui-table add 00e075 Polycom/Veritel_phone
voice vlan oui-table add 00e0bb 3Com_phone
bonjour interface range vlan 1
hostname switcha03d93
username Simone password encrypted $15$ZEyKIu5BQNTjRMWk$0QRSEi5z350Q8jc89snnPIAlnJM41h9kmroeb+FFpgSwKsnvcNUrqoA68Pf6UxaYVnu0lkc0CQcEY5M3GL4XpA== privilege 15
ip name-server 8.8.8.8
!
interface vlan 1
no ip address dhcp
!
interface vlan 10
ip address 192.168.0.2 255.255.255.0
!
interface vlan 20
ip address 192.168.1.1 255.255.255.0
!
interface vlan 30
shutdown
!
interface GigabitEthernet1
switchport access vlan 10
!
interface GigabitEthernet2
switchport access vlan 20
!
interface GigabitEthernet5
switchport access vlan 10
!
interface GigabitEthernet9
switchport access vlan 10
!
interface GigabitEthernet10
switchport access vlan 10
!
exit
ip route 0.0.0.0 /0 192.168.0.1 metric 2

and is not working i receive a DNS error in the web page, i can ping the sonicwall and the other device connected to the switch
ip routing is enable and static route is add

[spatuz]

ops ... i forgot to unflag something in the sonicwall.
it was just necessary add the static route. Thank you all !!!