cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
482
Views
0
Helpful
3
Replies

Simple Inter-Vlan Routing - Need help

rmueller
Level 1
Level 1

I am trying to setup simple routing with my Catalyst 3560-E switch. My setup is as follows:

  • On port 1 of the switch it is connected to a TP-Link router that gets its internet from a Cisco Wireless to Ethernet converter (Coming from a hotspot)
  • On port 2 of the switch it is connected directly to the Cisco Wireless to Ethernet converter (Bypassing the router)
  • My goal is to setup a VPN connection using pureVPN (Already setup) on the router and if I want to bypass the vpn I change my gateway to my Catalyst 3560-E which routes it directly to the cisco wireless converter.
  • I setup VLAN 2 for port 2 with an IP address. The cisco can get out to the internet but I cannot when I set my gateway accordingly. 

Here is my configuration for my switch. If you could let me know what I am doing wrong here that would be great!

Current configuration : 5050 bytes
!
! Last configuration change at 21:05:28 UTC Mon Mar 13 2017
! NVRAM config last updated at 20:04:43 UTC Mon Mar 13 2017
!
version 15.0
service config
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$ayIQ$ujFtzsZYQqx2.JZloiIV31
!
username <user> privilege 15 secret 5 $1$Nvz6$PyKJ6aSAdGtQbbercJw8R.
no aaa new-model
clock timezone UTC -5 0
system mtu routing 1500
ip routing
ip dhcp excluded-address 192.168.1.1 192.168.1.50
!
ip dhcp pool dhcp
network 192.168.1.0 255.255.255.0
dns-server 8.8.8.8
default-router 192.168.1.1
lease 7
!
!
vtp mode transparent
!
!
crypto pki trustpoint TP-self-signed-201487104
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-201487104
revocation-check none
rsakeypair TP-self-signed-201487104
!
!
crypto pki certificate chain TP-self-signed-201487104
certificate self-signed 01
.......Random characters
quit
spanning-tree mode pvst
spanning-tree extend system-id
!
!
!
!
!
port-channel load-balance dst-ip
!
!
!
!
vlan internal allocation policy ascending
!
vlan 2
!
!
!
!
interface FastEthernet0
no ip address
no ip route-cache
shutdown
!
interface GigabitEthernet0/1
description Main Internet
switchport mode access
!
interface GigabitEthernet0/2
description Secondary Internet
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet0/3
!
interface GigabitEthernet0/...
!
interface GigabitEthernet0/48
!
interface GigabitEthernet0/49
!
interface GigabitEthernet0/50
!
interface GigabitEthernet0/51
!
interface GigabitEthernet0/52
!
interface TenGigabitEthernet0/1
!
interface TenGigabitEthernet0/2
!
interface Vlan1
ip address 192.168.1.254 255.255.255.0
!
interface Vlan2
description Direct Connection to Internet
ip address 192.168.43.250 255.255.255.0
!
interface Vlan3
no ip address
!
ip default-gateway 192.168.43.1
ip http server
ip http authentication local
ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 192.168.43.1 permanent
!
!
!
!
line con 0
line vty 0 4
line vty 5 15
!
end

#  show vlan

VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi0/1, Gi0/3, Gi0/4, Gi0/5
Gi0/6, Gi0/7, Gi0/8, Gi0/9
Gi0/10, Gi0/11, Gi0/12, Gi0/13
Gi0/14, Gi0/15, Gi0/16, Gi0/17
Gi0/18, Gi0/19, Gi0/20, Gi0/21
Gi0/22, Gi0/23, Gi0/24, Gi0/25
Gi0/26, Gi0/27, Gi0/28, Gi0/29
Gi0/30, Gi0/31, Gi0/32, Gi0/33
Gi0/34, Gi0/35, Gi0/36, Gi0/37
Gi0/38, Gi0/39, Gi0/40, Gi0/41
Gi0/42, Gi0/43, Gi0/44, Gi0/45
Gi0/46, Gi0/47, Gi0/48, Te0/1
Te0/2
2 VLAN0002 active Gi0/2
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
2 enet 100002 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0
1003 tr 101003 1500 - - - - - 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0
1005 trnet 101005 1500 - - - ibm - 0 0

Remote SPAN VLANs
------------------------------------------------------------------------------


Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------

MUELLERSWITCH#show ip int br
Interface IP-Address OK? Method Status Protocol
Vlan1 192.168.1.254 YES NVRAM up up
Vlan2 192.168.43.250 YES manual up up
Vlan3 unassigned YES unset up down
FastEthernet0 unassigned YES NVRAM administratively down down
GigabitEthernet0/1 unassigned YES unset up up
GigabitEthernet0/2 unassigned YES unset up up
GigabitEthernet0/3 unassigned YES unset up up
GigabitEthernet0/4 unassigned YES unset up up
GigabitEthernet0/5 unassigned YES unset up up
GigabitEthernet0/6 unassigned YES unset up up
GigabitEthernet0/7 unassigned YES unset down down
GigabitEthernet0/8 unassigned YES unset down down
GigabitEthernet0/9 unassigned YES unset down down
GigabitEthernet0/10 unassigned YES unset down down
GigabitEthernet0/11 unassigned YES unset down down
GigabitEthernet0/12 unassigned YES unset down down
GigabitEthernet0/13 unassigned YES unset down down
GigabitEthernet0/14 unassigned YES unset up up
GigabitEthernet0/15 unassigned YES unset down down
GigabitEthernet0/16 unassigned YES unset down down
GigabitEthernet0/17 unassigned YES unset down down
GigabitEthernet0/18 unassigned YES unset up up
GigabitEthernet0/19 unassigned YES unset down down
GigabitEthernet0/20 unassigned YES unset down down
GigabitEthernet0/21 unassigned YES unset down down
GigabitEthernet0/22 unassigned YES unset down down
GigabitEthernet0/23 unassigned YES unset down down
GigabitEthernet0/24 unassigned YES unset down down
GigabitEthernet0/25 unassigned YES unset down down
GigabitEthernet0/26 unassigned YES unset down down
GigabitEthernet0/27 unassigned YES unset down down
GigabitEthernet0/28 unassigned YES unset down down
GigabitEthernet0/29 unassigned YES unset down down
GigabitEthernet0/30 unassigned YES unset down down
GigabitEthernet0/31 unassigned YES unset down down
GigabitEthernet0/32 unassigned YES unset down down
GigabitEthernet0/33 unassigned YES unset down down
GigabitEthernet0/34 unassigned YES unset down down
GigabitEthernet0/35 unassigned YES unset down down
GigabitEthernet0/36 unassigned YES unset down down
GigabitEthernet0/37 unassigned YES unset down down
GigabitEthernet0/38 unassigned YES unset up up
GigabitEthernet0/39 unassigned YES unset down down
GigabitEthernet0/40 unassigned YES unset down down
GigabitEthernet0/41 unassigned YES unset down down
GigabitEthernet0/42 unassigned YES unset down down
GigabitEthernet0/43 unassigned YES unset down down
GigabitEthernet0/44 unassigned YES unset down down
GigabitEthernet0/45 unassigned YES unset down down
GigabitEthernet0/46 unassigned YES unset down down
GigabitEthernet0/47 unassigned YES unset down down
GigabitEthernet0/48 unassigned YES unset down down
GigabitEthernet0/49 unassigned YES unset down down
GigabitEthernet0/50 unassigned YES unset down down
GigabitEthernet0/51 unassigned YES unset down down
GigabitEthernet0/52 unassigned YES unset down down
TenGigabitEthernet0/1 unassigned YES unset down down
TenGigabitEthernet0/2 unassigned YES unset down down

Thanks in advanced!!

3 Replies 3

Reza Sharifi
Hall of Fame
Hall of Fame

The gateway on your PC or laptop should be the same as the gateway on the switch (192.168.43.1).

Also, since you only have one vlan on the switch and have "ip default-gateway 192.168.43.1"

You don't need "ip route 0.0.0.0 0.0.0.0 192.168.43.1 permanent" command anymore.

Its one or the other.

HTH

I have attached a picture of what I want to do. I want my PC to be able to communicate to the 192.168.1.0 network and still get to the internet by going through 192.168.43.1. 

I should mention that 192.168.43.1 is giving off DHCP and I dont want that spreading to my network unnecessarily. 

I tried to set my PC to 192.168.43.18 and the GW to 192.168.43.1. After doing this, I couldn't get connected to the 192.168.1.0 network.

I ended up giving up on this and just going with two separate routers on the same subnet. It is working now.