cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1186
Views
0
Helpful
2
Replies

SG500X InterVlan Routing

dave.beckettjr
Level 1
Level 1

I need some help determing why I cannot reach the internet from my device.

I can reach the internet through the switch CLI.

Current config

VLAN10 - 10.1.10.1 255.255.255.0

Device IP 10.1.10.5

VLAN1 IPAddress 200.1.1.1

Firewall inside address 200.1.1.2

I can ping form switch CLI all the way through to internet

frome device I can ping 200.1.1.1 but not 200.1.1.2

interface vlan 1

ip address 200.1.1.1 255.255.255.0

no ip address dhcp

!

interface vlan 10

ip address 10.1.10.1 255.255.255.0

ip dhcp relay enable

!

interface vlan 100

ip address 10.1.100.1 255.255.255.0

ip dhcp relay enable

!

interface gigabitethernet1/1/1

switchport trunk allowed vlan add 10,100-101

!

interface gigabitethernet1/1/2

ip dhcp relay enable

switchport mode access

switchport access vlan 10

!

interface gigabitethernet1/1/3

switchport mode access

switchport access vlan 10

!

interface gigabitethernet1/1/37

switchport mode general

switchport general allowed vlan add 10 untagged

switchport general pvid 100

!

show ip route

Maximum Parallel Paths: 1 (1 after reset)

IP Forwarding:          enabled

Codes: C - connected, S - static, D - DHCP, R - RIP

S  0.0.0.0/0          [1/1] via  200.1.1.2  0:12:54                vlan 1

C  10.1.10.0/24       is directly connected                        vlan 10

C  10.1.100.0/24      is directly connected                        vlan 100

C  200.1.1.0/24       is directly connected                        vlan 1

2 Replies 2

Tom Watts
VIP Alumni
VIP Alumni

Hi David, are you able to ping other devices connecting to the switch which are on different subnets?

Also, what is on pirt gi1/1/37 and why a general port with 2 untagged vlans?

-Tom
Please mark answered for helpful posts

-Tom Please mark answered for helpful posts http://blogs.cisco.com/smallbusiness/

Hi David,

can you confirm that the default gateway of the device is 10.1.10.1. And that the DNS server is correct(I guess it's your firewall, 200.1.1.2).

Can you ping the Firewall from the Switch CLI? Perhaps it deny ICMP packets.

Also try to ping a public IP in the internet from your device, for example 8.8.8.8.

best regards

Christian

- Please rate helpful posts -
Review Cisco Networking products for a $25 gift card