Greetings I have several switches interconnected in my network and multiple VLANs configured with SVI assigned to each. InterVLAN routing works just fine. The switchport connected to corporate firewall is the first port on the main switch (interface GigabitEthernet1/0/1 I recon). The firewall is VLAN unaware and it is managed by third party; I do not have access to it. The firewall is configured to route below two ranges only, and that is fine: 155.111.215.254/25 (servers) 10.15.245.254/24 (end users) In my network, these ranges are broken down to sub-ranges and assigned VLAN ip address. Other ranges that I have in my network (192.168.x.x) are used by peripheral devices within LAN only and do not need to reach the firewall (neither internet). So here is the problem I have: If I point end user machines and servers to corresponding firewall interfaces (assign default gateway accordingly), they can reach each other and have access to internet. But they would not be able to reach peripheral devices in 192.168.x.x range which are pointed to respective VLAN IP address (SVI). If I point end user machines and servers to respective VLAN IP address, they would reach peripheral devices, but there would be no connection to the internet. So what I need is access to internet for computers with ip address within firewall configured range, but with SVI as the default gateway rather than the firewall interfaces.   My request to add each VLAN to the firewall was rejected because it would cost money. For a workaround, I wonder whether there is something to do with the switchport connected to the firewall, or it is adding some rules on the firewall I need (like NAT). If it is the latter, then how to make a proper request to the firewall management team. I would appreciate a suggestion on how to deal with this.  Many thanks. PS: Attaching main switch config file just in case. ... View more

Hi all I inherited a LAN with a Cisco C3560 switch and I cannot access it. I found some configuration files of the switch on previous admin's computers. Appreciate if someone could "decode" it for me.  Below is the text of one of them: ___________________________________ (config)#banner motd ^ (config)#service password-encryption (config)#username secadmin privilege 15 secret ********** (config)#ntp server 192.168.20.203 (config)#aaa mew-model (config)#aaa authentication enable default none (config)#aaa authentication login CONS_AL none (config)#aaa authentication login VTY_AL local (config)#hostname RUTANWSW02 (config)#ip domain name DOMAIN.ORG (config)#crypto key generate rsa modulus 2048 (config)#ip ssh version 2 (config)#line console 0 (config-line)#login authentication CONS_AL (config-line)#exit (config)#access-list 1 permit 10.15.245.1 (config)#line vty 0-15 (config-line)#login authentication VTY_AL (config-line)#transport input ssh (config-line)#access-class 1 in (config-line)#exit (config)#exit #wr mem ________________ I tried to SSH it using putty with default port 22 and it says connection refused, does not even ask for credentials. SSH to a Cisco wireless controller on the same network works just fine.  Thanks     ... View more