10-30-2024 08:10 AM
Hello Guys,
Im looking for a solution but i think im missing something.
So in essence im trying to create a router on a stick with a modem that releases the ip range 192.168.178.1
I have a cisco C1300 series switch to configure two networks ranged 192.168.28.1 and 192.168.0.1
I will be using port 2 for .0.1 with vlan id 10 and port 3 for .28.1 with vlan id 20 and port 10 for the uplink.
Both networks should not be able to see/access each other but have internet access.
Wanted scenario see the added screenshot in this thread.
If there is more info needed let me know!
Thanks in advance!
current config:
config-file-header
C1300
v4.1.4.1
CLI v1.0
file SSD indicator plaintext
@
!
unit-type-control-start
unit-type unit 1 network gi uplink none
unit-type-control-end
!
vlan database
vlan 10,20
exit
one
ip dhcp server
ip dhcp pool network company 1
address low 192.168.28.1 high 192.168.28.254 255.255.255.0
exit
ip dhcp pool network company 2
address low 192.168.0.1 high 192.168.0.254 255.255.255.0
exit
ip dhcp pool network MANAGEMENT
address low 192.168.1.1 high 192.168.1.254 255.255.255.0
exit
bonjour interface range vlan 1
hostname C1300
ip ssh server
!
interface vlan 1
ip address 192.168.1.254 255.255.255.0
no ip address dhcp
!
interface vlan 10
name company 1
!
interface vlan 20
name company 2
!
interface GigabitEthernet2
description HAKA
no switchport
switchport access vlan 10
!
interface GigabitEthernet3
description KPS
no switchport
switchport access vlan 20
!
interface GigabitEthernet10
switchport mode trunk
switchport trunk allowed vlan 1,10,20
!
exit
10-30-2024 10:00 AM
If order to create the router on a stick the modem should be able to connect in trunk with the switch and have subinterface. Does it?
10-30-2024 03:27 PM
Hi,
Isolation is done via VLAN's, all good; for restricting inter-VLAN traffic and for Internet access, further configurations need to be applied on the upstream layer 3 device.
Note that your DHCP server / pool configuration on the switch is useless, the switch will NOT be able to allocate IPv4 addresses to hosts since it is directly connected to hosts at layer 2 (same broadcast domain), however it is not present within the broadcast domain (no Layer 3 / SVI interface with IP configured within these VLAN's).
Best,
Cristian.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide