11-04-2025 01:10 PM
I have a 9200L as a core switch, with 5 other switches attached by 10GigEthernet cables. I cannot seem to get to the internet for all but the primary VLan on any of the other 9200L switches. Please help.
11-04-2025 01:51 PM
Hello @pmac14,
You will have to provide us with some more information:
11-05-2025 05:53 AM - edited 11-05-2025 05:58 AM
as @Torbjørn already mentioned, more information about the topology will help!
that said, a question: has it worked before?
if not, first check if the other vlans'are routed correctly and included in NAT and ACL rules on the router/firewall connecting to the internet, especially does this router know the route back to these vlan's
>>> VLan on L2 Switches <<<
if the switches really are L2 only then there is no routing between the vlan's and between vlan en interface connecting to the internet
-> you need to add routing configuration externally
11-05-2025 03:47 PM
maybe for security reasons only primary VLan is allowed to go out on the Internet? what has changed recently ?
Regards, ML
**Have fun labbing!!!***
***Please Rate All Helpful Responses ***
11-06-2025 06:30 PM
Hello pmcbride,
As some of the other user have mentioned more information would provide a better understanding of the issue. If only one switch is getting connected to the internet, and the others aren't, maybe they aren't trunked in their link back to the core switch? Or it could be a security issue as Martin L stated.
It seems we could only provide speculation with the current layout.
11-07-2025 06:02 AM
We are currently running three Vlans. Attached is drawing showing connection and ports connecting. All those ports should be trunked, correct?
11-07-2025 09:35 AM
Correct, these ports should be Trunk ports. Trunk ports are used between switches to networking devices.
Switch to switch
Or
Switch to router
Without Trunks configured on the connected interfaces, there won't be any communication through those interfaces.
11-07-2025 08:29 AM
and what subnets are used for vlan 70,71,72 ?
and evenso important, who does the routing between those vlans and de vlan with subnet 192.168.0.0/24 ? (core or sophos?)
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide