Help with Meraki up-linked to 3750 and routing config.

[keith.magyar1]

I have a site with a cisco 3750 stacked x6 with a meraki MX84. I really need to understand what options I have for inter-vlan routing so that vlan119 nodes can reach the internet. Currently they cannot unless I use a gateway of 10.140.92.1 which is my meraki appliance. Any help would be appreciated.

If I put a client on vlan119 with gateway of : 10.140.92.254, I get no internet access, tracert does not show it hitting the MX 10.140.92.1. I can hit nodes in vlan11 as well as its own vlan 119. 

If I put a client on vlan119 with gateway of : 10.140.92.1, I have Internet access and access to both vlans

If I put a client on VLAN11, with gateway of 10.140.1.254, I have internet access and access to both vlans

There are two vlans:

 On meraki: 11 and 119, (interface IPs shown)

10.140.1.0/24	Local VLAN	Name PT-OPO-SRV	MX IP 10.140.1.1 VLAN 11 In VPN yes

10.140.92.0/24

Local VLAN

Name PT-OPO-GEN

MX IP 10.140.92.1 VLAN 119 In VPN yes

 OnCisco 3750

 interface Vlan11

ip address 10.140.1.254 255.255.255.0

!

interface Vlan119

ip address 10.140.92.254 255.255.255.0

route on the 3750;

ip route 0.0.0.0 0.0.0.0 10.140.1.1

ip routing statement;

ip routing

So theres a gray area here for me. How can I troubleshoot this?

[Karsten Iwen · Accepted solution]

There are two ways to solve that depending on how you want to do your routing:

1. If VLAN11 is meant as a transfer-network between the MX84 and  3750 then:
1. On the MX: remove VLAN119
2. On the MX: configure a static route for 10.140.92/24 pointing to 10.140.1.254 and also add this route to the VPN
3. On the PCs: Use 10.140.92.254 as the default-gateway
2. If your traffic between Vlan11 and VLAN119 should also be controlled by the MX:
1. On the 3750: remove the interface vlan 119
2. On the PCs: Use 10.140.92.1 as the default-gateway.

[keith.magyar1]

I would like to have the routing at the core. Your answer makes sense. In order to make routing work as expected with a L3 switch, I will need to ditch the vlans on the Meraki MX appliance, and replace them with static routes pointing to the interface of each respective VLAN int IP.  

Is there any other way that I may want to look at this?

[Karsten Iwen]

There is not really another way. But it's not one or the other. You can mix the VLANs as you want. For example, all your internal User- and Voice-VLANs are terminated at the core while your Guest-WLAN is terminated at the MX.

[keith.magyar1]

Thank you for your help! I have made the changes and they work as described.