problem with routing between vlans (C3750 + C3560)

[underdogg]

Hello All,

I have a strange problem.
Fase 1: I begin with a test lab, 2x core (C3750) + 2x access (C3560).
The core switches are routing, and the vlan can communicate to each other.

Fase 2: I put the switches in the corporate network and all divices are connected on vlan 1.
The gateway on all divices is a v-gate (routing / firewall server).  It works.

Fase 3: I put a server in another vlan. The server can ping the switches, but not de v-gate or the other divices.
so, I thought to switch all divices to another vlan (vlan 80). The same effect, no routing.
I tested with 2 vlan's. 1 laptop on vlan 20 and 1 laptop on vlan 30. The laptops can communicate with each other.

what is the problem?

[Geert Reijnders]

Hi Sebastiaan,

Do you have configs of the switches? And have you tested if you could ping from one of the laptops to the v-gate?

Kind Regards,

Geert Reijnders

[underdogg]

See documents for config.

No, I can't ping to the v-gate.

Gateway of last resort is not set

     xx.0.0.0/24 is subnetted, 5 subnets
C       xx.1.10.0 is directly connected, Vlan80
C       xx.142.120.0 is directly connected, Vlan10
C       xx.142.121.0 is directly connected, Vlan20
C       xx.142.122.0 is directly connected, Vlan30
C       xx.142.123.0 is directly connected, Vlan40

If i make a vlan100 with ip xx.1.20.0, than I can ping to Vlan10 to Vlan40.

[Geert Reijnders]

Hi Sebastiaan,

I've got a few questions.

is your vgate in vlan 80?

Is the default gateway of your servers/workstations the vlan interface of the coreswitch?

Is it possible that you miss a route back on your vgate to your core switch which contains the subnets of your vlans?

Kind regards,

Geert Reijnders

[underdogg]

Hi Geert,

Yes, the Vgate is on the Vlan80.

The servers/workstations default gateway is the V-gate.

I have looked in the Vgate, and there is a route to another switch.

The Vgate is not under my controle, so I must contact the owners of the Vgate.

I let you know who it ends.

Thx & Kind regards,

Sebastiaan Wijker

[glen.grant]

    All the gateways should be the SVI of the vlan they are attached to , if you need a default route then you implement the default route ont he core  pointing to the the Vgate .

[Geert Reijnders]

Ok, hopefully this solves the issue.

Please rate usefull answers.

Met vriendelijke groet,

Client ICT Groep

Geert Reijnders

[underdogg]

In the Vgate stood the route xx.142.0.0 to xx.1.10.23.

Now i broke it down to xx.142.30.0 to xx.1.10.23 and xx.142.121.0 to xx.1.10.4 (core switch).

The server xx.142.121.111 can ping the Vgate xx.1.10.2, but can't ping an another device on the xx.1.10.0 segment.

any ideas??