cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
451
Views
0
Helpful
1
Replies

SG500X Inter VLAN Routing

Sundypha1
Level 1
Level 1

Hi there,

I've got a problem with VLAN routing.
First said, I'm new to VLAN's.

I've set up a Debian DHCP Server with following VLANS:

eth0      Link encap:Ethernet  HWaddr b8:27:eb:69:d0:18
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:360 errors:0 dropped:0 overruns:0 frame:0
          TX packets:139 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:28838 (28.1 KiB)  TX bytes:16833 (16.4 KiB)

eth0.1    Link encap:Ethernet  HWaddr b8:27:eb:69:d0:18
          inet addr:10.1.0.1  Bcast:10.1.15.255  Mask:255.255.240.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

eth0.5    Link encap:Ethernet  HWaddr b8:27:eb:69:d0:18
          inet addr:10.105.100.1  Bcast:10.105.103.255  Mask:255.255.252.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

eth0.10   Link encap:Ethernet  HWaddr b8:27:eb:69:d0:18
          inet addr:10.110.100.1  Bcast:10.110.103.255  Mask:255.255.252.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:347 errors:0 dropped:0 overruns:0 frame:0
          TX packets:139 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:26816 (26.1 KiB)  TX bytes:15165 (14.8 KiB)

eth0.15   Link encap:Ethernet  HWaddr b8:27:eb:69:d0:18
          inet addr:10.115.100.1  Bcast:10.115.103.255  Mask:255.255.252.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

eth0.20   Link encap:Ethernet  HWaddr b8:27:eb:69:d0:18
          inet addr:10.120.100.1  Bcast:10.120.103.255  Mask:255.255.252.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:5 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:230 (230.0 B)  TX bytes:0 (0.0 B)

eth0.30   Link encap:Ethernet  HWaddr b8:27:eb:69:d0:18
          inet addr:10.130.100.1  Bcast:10.130.103.255  Mask:255.255.252.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:4 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:184 (184.0 B)  TX bytes:0 (0.0 B)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

and the switch configuration is the following: (shortened for the problems purpose)

switchcfd817#show running-config
config-file-header
switchcfd817
v1.3.0.62 / R750_NIK_1_3_647_260
CLI v1.0
set system queues-mode 4

file SSD indicator encrypted
@
ssd-control-start
ssd config
ssd file passphrase control unrestricted
no ssd file integrity control
ssd-control-end cb0a3fdb1f3a1af4e4430033719968c0
!
vlan database
vlan 2,5,10,15,20,30
exit
voice vlan id 15
voice vlan state disabled
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
ip dhcp relay address 10.110.100.1
ip dhcp relay enable
bonjour interface range vlan 1
hostname switchcfd817
re: <space>,  Quit: q or CTRL+Z, One line: <return> ip ssh password-auth                         : <return>
clock timezone " " 1
clock summer-time web recurring eu
ip domain polling-interval 18
 ip address 10.1.0.10 255.255.240.0
 no ip address dhcp
 ip dhcp relay enable
!
interface vlan 2
 name Admin
 ip address 10.102.100.10 255.255.252.0
!
interface vlan 5
 name Guests
 ip address 10.105.100.10 255.255.252.0
 ip dhcp relay enable
!
interface vlan 10
 name Server
 ip address 10.110.100.10 255.255.252.0
!
interface vlan 15
 name Voice
 ip address 10.115.100.10 255.255.252.0
 ip dhcp relay enable
!
interface vlan 20
 name Printer
 ip address 10.120.100.10 255.255.252.0
 ip dhcp relay enable
!
interface vlan 30
 name "Mechanical Engineers"
 ip address 10.130.100.10 255.255.252.0
 ip dhcp relay enable
!
interface gigabitethernet1/1/19
 switchport trunk allowed vlan add 10,20,30
!
interface gigabitethernet1/1/20
 switchport trunk native vlan 10
!
interface gigabitethernet1/1/25
 switchport mode access
 switchport access vlan 5
!
interface Port-channel1
 description data-syn-1
!
exit
macro auto built-in parameters printer $native_vlan 20
macro auto built-in parameters host $max_hosts 10 $native_vlan 1

With a client connected to a VLAN 30 or VLAN 10 port I get an IP from the DHCP, so DHCP relaying works.

 

Now the Problem:
I want to ping the DHCP Server on it's VLAN 10 IP 10.110.100.1 from VLAN 5 (static IP: 10.105.100.50 GW: 10.105.100.10)

this shows the routes automatically setup by the switch:

switchcfd817#show ip route
Maximum Parallel Paths: 1 (1 after reset)
IP Forwarding: enabled
Codes: > - best, C - connected, S - static,
       R - RIP

C   10.1.0.0/20 is directly connected, vlan 1
C   10.105.100.0/22 is directly connected, vlan 5
C   10.110.100.0/22 is directly connected, vlan 10
C   10.120.100.0/22 is directly connected, vlan 20
C   10.130.100.0/22 is directly connected, vlan 30

and the ARP list from the switch:

switchcfd817#show arp

Total number of entries: 2

  VLAN    Interface     IP address        HW address          status
--------------------- --------------- ------------------- ---------------
vlan 5     gi1/1/25   10.105.100.50   00:80:80:8a:61:14   dynamic
vlan 10    gi1/1/19   10.110.100.1    b8:27:eb:69:d0:18   dynamic

I'm able to ping 10.110.100.10 (Switch on VLAN10) from VLAN 5 but not the DHCP Server.

What am I missing there?

best regards

Sundypha

1 Reply 1

Sundypha1
Level 1
Level 1

After mirroring port GE19 (DHCP Server) I see that the Switch is sending the ping packet to the DHCP Server. But without a VLAN Tag. So what do I have to do, to let the DHCP Server accept VLan10 as it's native? or better, to let the swtich tag the native vlan on a trunk interface to prevent double-tagged packets? And the Switch also does an ARP Request who has 10.110.100.1 despite it should know it in it's ARP Table.