I have been tasked to configure mentioned cisco switch (in work), although I don't have experiences with configuring switches I have managed to do some basic configuration to some extent. Situation is depicted below. We have intranet connection and internet connection, both have DHCP server. Then there is equipment inside vehicle shown as PC, printer and UPS on the picture as local network. This local network should have access to the intranet (mainly the PC). Intranet and internet must be separated. I am accessing the switch via config PC connected by ethernet - unfortunately I don't have CLI access.
I would appreciate help on how to bridge VLANs so that VLAN1 has access to the intranet which is VLAN2 (with DHCP). And VLAN3, which is also DHCP, could access internet. Most posts here on forum related to my problem are older and links posted there do not work anymore.
Here is the current configuration
config-file-header
switch2fcd8d
v1.4.11.5 / R800_NIK_1_4_220_026
CLI v1.0
set system mode router
file SSD indicator plaintext
@
vlan database
vlan 2-4
exit
bonjour interface range vlan 1
hostname *
username * password *
!
interface vlan 1
ip address 192.168.1.1 255.255.255.0
no ip address dhcp
!
interface vlan 2
name INTRANET
ip address dhcp
!
interface vlan 3
name INTERNET
ip address dhcp
!
interface vlan 4
name CONFIG
ip address 192.168.2.1 255.255.255.0
!
interface gigabitethernet1
switchport mode general
switchport general allowed vlan add 2,4 tagged
switchport forbidden vlan add 3
switchport default-vlan tagged
!
interface gigabitethernet2
switchport mode general
switchport general allowed vlan add 2,4 tagged
switchport forbidden vlan add 3
switchport default-vlan tagged
!
interface gigabitethernet3
switchport mode general
switchport general allowed vlan add 2,4 tagged
switchport forbidden vlan add 3
switchport default-vlan tagged
!
interface gigabitethernet4
switchport mode general
switchport general allowed vlan add 2,4 tagged
switchport forbidden vlan add 3
switchport default-vlan tagged
!
interface gigabitethernet5
switchport mode general
switchport general allowed vlan add 2,4 tagged
switchport forbidden vlan add 3
switchport default-vlan tagged
!
interface gigabitethernet6
switchport mode general
switchport general allowed vlan add 2,4 tagged
switchport forbidden vlan add 3
switchport default-vlan tagged
!
interface gigabitethernet7
switchport mode access
switchport access vlan 3
switchport forbidden vlan add 2,4
switchport forbidden default-vlan
!
interface gigabitethernet8
switchport mode access
switchport access vlan 3
switchport forbidden vlan add 2,4
switchport forbidden default-vlan
!
interface gigabitethernet9
switchport mode access
switchport access vlan 3
switchport forbidden vlan add 2,4
switchport forbidden default-vlan
!
interface gigabitethernet10
switchport mode access
switchport access vlan 3
switchport forbidden vlan add 2,4
switchport forbidden default-vlan
!
interface gigabitethernet11
switchport mode access
switchport access vlan 3
switchport forbidden vlan add 2,4
switchport forbidden default-vlan
!
interface gigabitethernet12
switchport mode access
switchport access vlan 3
switchport forbidden vlan add 2,4
switchport forbidden default-vlan
!
interface gigabitethernet13
switchport mode general
switchport general allowed vlan add 4 tagged
switchport general allowed vlan add 2 untagged
switchport forbidden vlan add 3
switchport default-vlan tagged
!
interface gigabitethernet14
switchport mode general
switchport general allowed vlan add 2,4 tagged
switchport forbidden vlan add 3
switchport default-vlan tagged
!
interface gigabitethernet15
switchport mode general
switchport general allowed vlan add 2,4 tagged
switchport forbidden vlan add 3
switchport default-vlan tagged
!
interface gigabitethernet16
switchport mode general
switchport general allowed vlan add 2,4 tagged
switchport forbidden vlan add 3
switchport default-vlan tagged
!
interface gigabitethernet17
switchport mode general
switchport general allowed vlan add 2,4 tagged
switchport forbidden vlan add 3
switchport default-vlan tagged
!
interface gigabitethernet18
switchport mode general
switchport general allowed vlan add 2,4 tagged
switchport forbidden vlan add 3
switchport general pvid 2
switchport default-vlan tagged
!
interface gigabitethernet19
switchport mode access
switchport access vlan 3
switchport forbidden vlan add 2,4
switchport forbidden default-vlan
!
interface gigabitethernet20
switchport mode access
switchport access vlan 3
switchport forbidden vlan add 2,4
switchport forbidden default-vlan
!
interface gigabitethernet21
switchport mode access
switchport access vlan 3
switchport forbidden vlan add 2,4
switchport forbidden default-vlan
!
interface gigabitethernet22
switchport mode access
switchport access vlan 3
switchport forbidden vlan add 2,4
switchport forbidden default-vlan
!
interface gigabitethernet23
switchport mode access
switchport access vlan 3
switchport forbidden vlan add 2,4
switchport forbidden default-vlan
!
interface gigabitethernet24
switchport mode general
switchport general allowed vlan add 2,4 tagged
switchport forbidden vlan add 3
switchport general pvid 4
switchport default-vlan tagged
!
interface gigabitethernet25
switchport forbidden vlan add 3
!
interface gigabitethernet26
switchport forbidden vlan add 3
!
exit
