Hi Everyone,
This is my first post here. Until now I was only reading others posts - hope I can join and be more active as my knowledge will increase ;) Sorry for posting some maybe very basic questions - hope I can learn and become help for others soon.
I am making a simple config switch config on Catalyst 2960CG with 8 ports. It is a L2 switch with lanbase-routing enabled so some L3 features are there as well. Switch has Gi 0/1-8 ports configured as switchport mode access and ports Gi 0/9-10 configured as switchport mode trunk.
interface GigabitEthernet0/1
switchport mode access
!
interface GigabitEthernet0/2
switchport mode access
!
interface GigabitEthernet0/3
switchport mode access
!
interface GigabitEthernet0/4
switchport mode access
!
interface GigabitEthernet0/5
switchport mode access
!
interface GigabitEthernet0/6
switchport mode access
!
interface GigabitEthernet0/7
switchport mode access
!
interface GigabitEthernet0/8
switchport mode access
!
interface GigabitEthernet0/9
switchport mode trunk
!
interface GigabitEthernet0/10
switchport mode trunk
!
interface Vlan1
ip address 172.30.128.5 255.255.255.0
!
ip default-gateway 172.30.128.1
no ip http server
no ip http secure-server
Idea is that this is a switch dedicated to small DMZ and that on Gi 0/10 which is trunk there is a connection to firewall which is my gateway. I do not manage our UTM firewall but support has communicated to me that they have set firewall port to 172.30.128.0/24 as per my request. I should be able to get access to internet and additionally I should be able to telnet to 10.104.84.9 255.255.255.0 on port 5000 and some other addresses as you can see below. You can see rules for that on my firewall below.
(NAT 172.30.128.0/24) subnet to outside interface so this subnet can access internet.
Rules:
1.
Source: 172.30.128.9
Destination: 194.7.129.0/24, 65.216.73.194, 217.31.76.146, 217.31.76.137, 217.31.46.146
Ports: ssh
2.
Source: 172.30.128.9
Destination: 194.7.129.0/24, 194.36.113.137, 194.36.133.139
Ports: https
3.
Source: 172.30.128.9
Destination: 194.36.113.137, 188.94.133.139
Ports: TCP/45169, TCP/45791
4.
Source: 172.30.128.9, 10.104.84.9
Destination: 10.104.84.9, 172.30.128.9
Ports: TCP/5000
5.
Source: 172.30.128.9
Destination: 217.31.76.152
Ports: TCP/1514
6.
Source: 172.30.128.9
Destination: 194.7.15.70, 157.25.5.18, 157.25.5.3, 8.8.8.8
Ports: UDP/53
7.
Source: 172.30.128.9
Destination: 69.50.219.51
Ports: UDP/123
It is a very simple configuration and I believe it should work but I cannot get to 10.104.84.9 255.255.255.0 on port 5000 as well as I have no access to internet. There is no DHCP on this network - I am setting static IP:172.30.128.9 255.255.255.0 172.30.128.1 and 8.8.8.8; 194.7.15.70.
Can anyone please check if there is something that I am missing? I will be much obliged for your help.
Maciej Garcarz
