No communication on a new VLAN and VLAN by default

[abtt-39]

Hello,

I would like some help because I have a problem.
I have a remote site, where I replaced the switches with 9200s.
This site is linked to the central site by an operator VPN link. I don't have control over the operator routers.

On this remote site, previously, there was no vlan, the port of the switches were on the default vlan, vlan 1.
They were L2 switches, the default gateway was the IP of the LAN port of the operator router
ip default gateway 10.60.133.254

The subnet of the site is 10.60.133.0

Routing between the central site and the remote site is done on the operator routers (for 10.60.133.0)

The link between switchs and routers are in trunk

And it worked.

I was asked to create several local vlans on the remote site. To no longer use vlan 1 for data but vlan 10.

I installed a 9200 switch to replace the 2960 switch.
I have enabled inter vlan routing.
#ip routing
I put a route pointing to the LAN Ip of the operator router.
#ip route 0.0.0.0 0.0.0.0 10.60.133.254
I created 2 VLANs 10 and 20.
VLAN 10
ip address 10.60.133.253 255.255.255.0
VLAN 20
ip address 10.61.133.253 255.255.255.0

On the switch 9200, I connected a PC, I configured its port in access

#switchport mode access
#switchport access vlan 10

On the PC, I configured a static ip
10.60.133.100/24
Gateway : 10.60.133.253 (IP SVi VLAN 10).

But it doesn't work, I don't have network connectivity.

From the switch, i can't ping 10.60.133.254

I then plugged this PC into a switch port without conf (so still on vlan 1 by default), and replace GW : 10.60.133.253 by 10.60.133.254, And it worked.

I can ping 10.60.133.254, ping server on site A etc...

I have attached a drawing with the network before / after

[mlund]

Hi

Yes you are correct.

For the confusing part with the new vlan, the isp router B is aware of the network 10.60.133.0 becuse it is directly connected. So the isp B router is advertising this network upstream in the cloud. However if you add a new vlan in your 9200, the isp B router is not aware of that new route. So isp has to add a static route in the isp B router to be aware of the new lan, this static route will be advertised to isp router A so that router also know of this new route. This advertisment will be configured by isp. The next hop for this new lan will be 10.60.133.253, because this is the address on the 9200 that will be the next hop for the isp B router.

Don't forget the default route that you have to configure in the 9200, pointing to the isp B router 10.60.133.254

/Mikael 

[MHM Cisco World]

List all VLAN subnet in both Site, even those in feature you will add it 
I will send you last config with note 

[abtt-39]

thank you

Local VLAN on B

VLAN 10 10.60.133.253 255.255.255.0

VLAN 20 : 10.61.133.253 255.255.255.0

VLAN 30 10.62.133.253 255.255.255.0

Looking at the conf file of the ISP site A router, there is BGP:

router bgp XXX
bgp router-id *DEL-OBS************************************
network 0.0.0.0/0
network 10.39.0.0/16
network 10.39.6.0/24
network 172.17.128.0/24
network 172.17.129.0/24
network 172.17.130.0/24
network 172.17.131.0/24
network 192.168.1.0/24
neighbor 10.153.153.2
remote-as XXX
description iBGP peering with neighbor 10.153.153.2
next-hop-self

In my architecture, I have site A and B, but in reality, there are more C, D etc...
But site B will be the first with local VLANS that I need to route to main site A

I don't know BGP, but in this case, I shouldn't just ask for the addition of static routes on Router B like this:

ip route 10.60.133.0 255.255.255.0 10.60.133.253
ip route 10.61.133.0 255.255.255.0 10.61.133.253
ip route 10.62.1330.0 255.255.255.0 10.62.133.253

and nothing else?

[mlund]

Yes, that is correct. The isp will create the additional static route, one for each of your additional subnet. Then they will be advertising those routes in bgp so other sites will learn about the new networks.

[abtt-39]

ok thanks.

And once i have requested the addition of static routes to the provideron router B, the port of the switch connecting to this router, i configure it as indicated in this post ? 

switchport mode trunk
switchport trunk native vlan 10
description Link to ISP

[mlund]

Yes, that will work.