8600 Vlans issue.

[juju1028]

I've created 10 Vlans on the 8600 Passport and one of the vlans is a connection to a comcast Modem/router to the internet. The vlan port( 10/45-10/46) that was created for the comcast router is assigned an IP address of 10.1.10.230. One of the vlans of the other ports( 1/3-1/6)is assigned 10.4.5.254 gateway address. My problem is I can ping the gateway, 5.254 and I can ping 10.1.10.230, but the next hop of 10.1.10.1, which is my way out to the internet I cannot ping. Can someone tell me why? What would I need to do in order for all my Vlans to get to the internet through that set of ports?


IP forwarding is turned on and the default route that I entered are two types: (1) 0.0.0.0 0.0.0.0 Next hop is 10.1.10.1 which is the comcast modem.The other route entry is 10.4.5.0 255.255.255.0 next hop 10.1.10.1. Is there reason why users from the vlan of 10.4.5.0 cannot get to the internet in light of this info? Would I need to turn on RIP or have comcast turn on RIP and setup default routes on its device to route anything from 10.0.0.0 255.0.0.0?

 

[Wookie27]

If I have understood your post correctly then I am confused as to why you have got a another default route pointing to 10.4.5.0 ?. When you create IP addresses on Vlans, routing between them is automatically turned on.

Therefore from what you have stated you already have a vlan within the 10.4.5.0 subnet (.254) therefore the logic of this is that in order to get to that internal subnet you have to go through the comcast router !

the 10.4.5.0 route will be local to the 8600 so it does not need to go via another router. Effectivley you are trying to route from one subnet via another router back into the same subnet.

lose the second default route, so you only have the 0.0.0.0 via 10.1.10.1

Also what routes have you got configured on the router, it needs to know a route back to the vlans on the 8600.

You say you have created 10 vlans. if all these have IP configured on them then you will need static routes back from the router to point to these.

Alternativley configure RIP on the router and vlans.

Let me know if this helps