Stratix 8300 (Cisco IE3000) Routing

[dau.xiong1]

Hey everyone. I am trying to connect my Plant Switch (Stratix 8300) to the Business Core Switch. I am not an IT professional, so I am trying my best by reading manuals and doing Google searches. My IT dept does not support non-Cisco switches (yes I know it has Cisco internals), so I'm pretty much on my own. My problem is I am not able to Ping the Stratix 8300. 

Below is my Network Diagram. Attached are screen shots of the Web Setup.

10.205.172.0/24 is my subnet.
10.205.172.2/24 = Stratix 8300
10.205.172.3-254/24 = Devices
Gi1/1 is connected to IDF Switch.

Here's what IT has done:
Create VLAN 205 on IDF switch (Now VLAN205 has been created on 10.200.171.121 and 10.200.172.10)
Change the VLAN of FA0/29 interface on IDF switch to VLAN205
Create sub-interface on the MPLS router for VLAN205 
Create VLAN 205 on Core switch (10.200.172.10) 

Am I doing something wrong on the Routing Page? Do I need to put the Core Switch IP address in the Gateway? Do I need to add Static Routes?

[dau.xiong1]

Can anyone help?  Thanks.

[johnd2310]

Hi, 

The information you have given is not too clear.

What is the network address for vlan 205? is 10.200.172.0/24 the network address for vlan 205?

If vlan 205 on the core switch is 10.200.172.10, then on your stratix switch you need to create an access port in vlan 205 and assign ip address 10.200.172.2/24(for example).

Then on the stratix switch create a static route for the business network pointing to the core switch(10.200.172.10)

On the core switch IT will create a static route pointing to the plant network

Normally it is not a good idea to span a vlan from the plant network all the way to the business network. You do not want any layer 2 events in one network propagating to the other network.  Ideally the IDF switch should be a layer 3 device to serve as  the demarc between the two networks. you can configure access-lists on the IDF switch to control traffic between the two networks.

The following is just an example of the configuration you can have:

Configure vlan 201 only on the Stratix 8300 switch with ip address 10.201.172.2/24

Enable ip routing on the IDF 3560 switch. For this you need ipbase or ip services ios

configure interface on the IDF switch that connects to the Startix switch as a layer 3 interface

interface FastEthernet0/40
 no switchport
 ip address 10.201.172.121 255.255.255.0

Configure interface on IDF switch connected to core switch as a layer 3 interface

interface FastEthernet0/29

no switchport
 ip address 10.200.172.121 255.255.255.0

Configure interface on core switch connected to IDF switch as a layer 3 interface

interface GigabitEthernet0/29

no switchport
 ip address 10.200.172.10 255.255.255.0

configure static routing on stratix switch for business networks

configure static routing on IDF switch for business and plant networks

configure static routing on core switch for plant networks

configure access-lists on IDF switch to control traffic allowed into and out the plant network

Thanks

John

[dau.xiong1]

John,

Thanks for the reply back.

I do not have access to configure the IDF and Core switch, those are controlled by IT.

On my Stratix 8300, I created VLAN 205 as a Layer 2, so it has no IP address.  IT told me to do so.  Would this work?

Instead of using VLAN1 for my devices, maybe I should change it to VLAN205 with IP address of 10.205.172.2/24?

So I should create a static route to the Core Switch and not the IDF?  Is it okay if I use a Default Route to 10.200.172.10?

Thanks.

[johnd2310]

Hi,

Your Stratix switch is layer 3 so you will need an ip address on the 10.200.172.0/24 network and configure routing between the core switch and the Stratix switch.  For example vlan 205 on core switch is 10.200.172.10 and vlan 205 on Stratix is 10.200.172.2. when this is done, you should be able to ping 10.200.172.10(core switch) from the Stratix. Then you can configure static routing on the Stratix for networks on the core

Hope this helps

Thanks

John

[dau.xiong1]

Talking to IT here is what they said:

Network address for Valn 205 is 10.205.172.0/24 and We have created sub-interface with 10.205.172.1/24 ip address in Core-router and assigned it in to Vlan 205.

We are using router for interval routing not the core switch so there is no need to define static routes on core switch as we have defined layer 2 vlan’s on core switch.

Questions:

1.  How do I setup VLAN 205 on the Stratix 8300?  Is it okay to set it up with no IP Address?

2.  What mode do I setup Gi1/1, Access, Trunking?

3.  What gateway IP address should I use for Routing?

4.  Any other tips?

[johnd2310]

Hi

You have to configure Vlan 205 on the Stratix with ip address 10.205.172.2/24 and Gi1/1 has to be an access port.

On the Stratix you will need to configure static route pointing to 10.205.172.1 for anything you would like to reach on the core.

Thanks

John

[dau.xiong1]

John,

I currently have the Stratix IP address set to 10.205.172.2/24.  Will I need to change that to something else now since you suggested setting VLAN 205 to 10.205.172.2/24?

Thanks.

[johnd2310]

Hi,

If your Stratix is already at 10.205.172.2/24 can you ping the core 10.205.172.1?

Thanks

John