how to route from cisco L3 switch to Huawei B593s-22 for internet access ?

[jordan-jj]

I have cisco 3560switch in my network and all our LAN hosts including servers are connected to switch.  

 Inside LAN, We have Three vlan  20 30 40 with network192.168.10.0/24 , 192.168.20/0  and all are able to route each other.. 

 Now we have  wireless router (Huawei B593s-22 ) for our internet and now i need to route any packets from clients to huwei  .. In My router there is DHCP configured from 192.168.2.0/24  .

 How to do it .. 

[Mark Malone]

Hi

Can you not just use a default route on the Cisco side and point all traffic to go to the Huawei to be processed that should work

ip route 0.0.0.0 0.0.0.0 (Huawei ip address)

[jordan-jj]

If i opened default route what will happen if  host tries to comminicate inside LAN, ie from host A to host B  of same Subnet. Even in that case do u think  .the traffic goes directly to the router .

[Mark Malone]

hosts that speak to each other on same vlan will use arp and not go to the Huawei router , hosts that cross vlans will be processed by the router as its intervlan routing and will need to be done by a layer 3 device

Other option make 3560 L3 and run IGP between it and Huawei

[jordan-jj]

SO we have two options one ip routing and other with IGP .. 

How to accomplish IGP.  Is it a routing protocol or a confguration to be accomplished. where can i have a material that can help me here with IGP ..  

[Mark Malone]

The first thing you need to check is does the Huawei device even support IGP protocols like rip, ospf etc it wont support eigrp because its not cisco  if you are going to go that route , most home routers would not support an IGP

as well you need a minimum license for IGP protocols on the Cisco side , ipbase can support stub routing for eigrp and ospf stripped down versions

theres no real requirement for an IGP its just another option running a default route will do the same thing and be easier to maintain

[jordan-jj]

I have checked the router and it doesnt have IGP  . 

Now i connected my huwei router to interface 20 and enabled ip routing 0.0.0.0 0.0.0.0 192.168.2.1 . now i cannot ping from my other vlans to that router.. .. 

[Mark Malone]

Im not familiar with Huawei routers you may need to turn on intervlan routing somewhere you would need to check whats required for it to do routing you need routes back as well   , there shouldn't be anything else required from Cisco side as your telling it to route all traffic to the Huawei from the switch which is the break out point for traffic

can you ping the Huawei address 192.168.2.1 from the cisco switch when the route is in place  ?

Huawei<--> 3560 Switch

You would do something like this:

On the 3750

interface Vlan1
ip address 192.168.2.1 255.255.255.0

interface Vlan2
ip address 192.168.1.1 255.255.255.0

interface Vlan3
ip address 192.168.3.1 255.255.255.0

interface fa0/1
switchport access vlan 1
switchport mode access

interface fa0/2
switchport access vlan 2
switchport mode access

interface fa0/3
switchport access vlan 2
switchport mode access

ip routing

ip route 0.0.0.0 0.0.0.0 192.168.2.1

You may also need routes back from the Huawei router if you have multiple vlans

.....................................

Other option is go full layer 2 instead of routing between the devices

Instead of routing you could also layer 2 trunk everything up to the Huawei router and leave cisco switch as pure layer 2 (no vlan interfaces) , and allow all vlans and just set the switch as ip default-gateway 192.168.2.1 but you would need to shut down the vlan interfaces on the switch side and create the vlans on the router instead

[jordan-jj]

I can try above configuration. 

But now my routers ip is 192.168.2.1 and if i create SVI with the same IP inside switch , does it create any conflict anywhere in my network. 

[Mark Malone]

yes that's just an example you can use any ip from the subnet range

[jordan-jj]

two more clarification.. 

1 ) If i use vlan 1 =192.168.2. 2/24 and my routers ip is 192.168.2.1. do i need to trunk the port between switch and router.. ? 

2 )  also then  enabling  ip route 0.0.0.0 0.0.0.0 192.168.2.1 . 

....

 Does that enough for my clients to reach interenet. 

[Mark Malone]

you should only require trunk if its layer 2 connection passing vlans as your routing it should not be needed

[jordan-jj]

I got your point but still  o cannot make it work here and this is my new dilemea

we have 50 host on vlan 1 and gateway is configured on 1.1 for internet .. 

Now i added one more vlan named vlan 20 but those host cant ping vlan 1 hosts