8600 Vlans 1

[juju1028]

I've created 10 Vlans on the 8600 Passport and one of the vlans is a connection to a comcast Modem/router to the internet. The vlan port( 10/45-10/46) that was created for the comcast router is assigned an IP address of 10.1.10.230. One of the vlans of the other ports( 1/3-1/6)is assigned 10.4.5.254 gateway address. My problem is I can ping the gateway, 5.254 and I can ping 10.1.10.230, but the next hop of 10.1.10.1, which is my way out to the internet I cannot ping. Can someone tell me why? What would I need to do in order for all my Vlans to get to the internet through that set of ports?

 

[Googer]

I would try the following.

1) Can you ping the Comcast router from the 8600? If not then you need to look at the settings on the router and for the 10.1.10.0 VLAN on the 8600.
2) Is IP forwarding turned on in the 8600? Make sure IP fowarding is turned on for the 8600. Without this on, it won't forward your packets to the other subnet.
3) If you plug a machine into the 10.1.10.0 subnet can you ping the Comcast router? If this is the kind of router I'm thinking it is, it has a built in firewall and some firewalls can be set not to respond to pings.
4) Check the routing table on the 8600? What entry does it have for your default route? Does your default route point to the Comcast router?

Good Luck

Googer

 

[juju1028]

IP forwarding is turned on and the default route that I entered are two types: (1) 0.0.0.0 0.0.0.0 Next hop is 10.1.10.1 which is the comcast modem.The other route entry is 10.4.5.0 255.255.255.0 next hop 10.1.10.1. Is there reason why users from the vlan of 10.4.5.0 cannot get to the internet in light of this info? Would I need to turn on RIP or have comcast turn on RIP and setup default routes on its device to route anything from 10.0.0.0 255.0.0.0?

 

[Googer]

Is the 10.4.5.0 route a static route that you entered on the 8600? The route for the 10.4.5.0 subnet on your 8600 should be a local route and should have a next hop of 10.4.5.254. That is has a next hop of 10.1.10.1 could be your problem. This route should show up in route table automatically when you program the VLAN on the 8600. When id does it will have a next hop that is the VLAN IP, in this case it should be 10.4.5.254. The default route looks good to me.

You do need something to tell the Comcast router that you have the 10.4.5.0 network on the other side of the 10.1.10.0 network. Otherwise, it will not know what to do with this traffic when it gets it. You can do this by putting a static route into the Comcast router that reads 10.4.5.0 255.255.255.0 next hop 10.1.10.230 or you can do this with rip. Rip would need to be turned on for the Comcast router, globally on the 8600, and on both the 10.1.10.0 VLAN and the 10.4.5.0 VLAN. If you don’t turn it on the 10.4.5.0 VLAN it won’t get advertised outbound on the 10.1.10.0 interface.

Googer