07-25-2011 09:17 PM - edited 03-07-2019 01:24 AM
I've posted a couple of times but really haven't heard back.
I have an SG300-20 in layer 3 mode. I have a generic, non vlan-aware gateway.
I'm trying to setup a few vlans. if possible, i don't want to use VLAN1 because that's adminstrative.
I've created VLAN2 and i want it to be used as the VLAN in which all the other VLANS access the internet by, thus relinquishing the gateways only duties to firewalling.
if there's any inter-VLAN communication going on, it would be done via VLAN2.
I just can't to save my life, figure out how to make it work.
the ips are as follows:
gateway: 192.168.1.1
SG300
VLAN1 192.168.1.2
VLAN2 192.168.2.1
VLAN3 192.168.3.1
VLAN4 192.168.4.1
when i want to get to the gui of the sg300, i use 192.168.1.2..
the default vlan is set to vlan1, which i guess it should stay that way? like i said, it's for administrative purposes only.
all means of getting out to the internet for all pcs (assuming they're allowed out on the web) would be through VLAN2, no one would have access (other than me) to VLAN1.
help!
-Jeff
07-26-2011 06:04 AM
Hi Jeff,
Like ar router, the SG300 in layer 3 mode behaves like a Layer 3 switch, so you have to tell it where to send packets. The switch is not as sophisticated in terms of software features when compared to traditional TAC supported switches, so it doesn't include any routing protocols. But it is priced accordingly, very cost effective.
Static route in SG300
So I do hope that you have added a default route to the SG300
ip=0.0.0.0 mask=0.0.0.0 nexthop=192.168.1.1
Static route in WAN router
Also you must tell the WAN router where these new networks are.
In the WAN router some static routes pointing back to the SG300 are needed
ip=192.168.2.0 mask=255.255.255.0 nexthop=192.168.1.2
ip=192.168.3.0 mask=255.255.255.0 nexthop=192.168.1.2
ip=192.168.4.0 mask=255.255.255.0 nexthop=192.168.1.2
or If the SG300 contains all your 192.168.X.X networks, one summarized static route would do;
ip=192.168.0.0 mask=255.255.0.0 nexthop=192.168.1.2
try that, and remember to save your configuration.
regards Dave
07-26-2011 10:52 AM
Hey Dave!
Thanks so much for getting back to me. I'll have to try what you suggested when i get home.
What i'm trying to do is, as you put it, to have all off my 192.168.x.x networks contained in the switch itself.
all VLANS communicate through the switch, and only when someone wants to get out onto the web does the gateway come into play.
on the switch, VLAN2 will be the internet VLAN, not VLAN1. is this possible, or do i have to go in and set VLAN2 as the default VLAN?
Also, do i change the lan-side ip address of the gateway to 192.168.2.x or leave it as X.X.1.1?
Thanks a lot!
-Jeff
07-26-2011 04:13 PM
Hey Dave,
I tried as you said but it didn't work, any other suggestions?
Thanks
-Jeff
07-26-2011 04:25 PM
Hi jeff,
Fredrick Barnard coined the phrase "a picture is worth a thousand word."
Would you be so kind as to;
1. draw a picture of the hypothetical network
Save a copy of the existing configuration and attach it in your next posting..
We'll get this nailed down.
regards Dave
07-28-2011 11:51 PM
here's that diagram i was talking about;
SO, i'm not using my WAN router for anything other than a gateway.. i will create static routes on the switch.
I believe it was you who told me to use 192.168.0.0 255.255.0.0 as the routing statement, but i must be doing something wrong because i tried that and it still didn't work.
So i guess we can try taking it from here.
What should my next step be or do you need any more info?
Thanks for all your help!
-Jeff
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide