Basic L3 routing on Summit

[Morrack]

Ok, I give up. This should be a simple, simple, simple task but I am completely missing something here.

I have 2 routers, 1 for internet traffic and 1 for VPN traffic.

In a cisco environment, if I have all my PC's using a cisco L3 switch as their default gateway I can then simply add static routes to the switch telling it which of 2 routers to direct traffic to based on the destination.

On a summit 200 (and I'm new to extreme switches) I would have thought it would be the same. I've configured static routes to point to the appropriate gateways. I've enabled ipforwarding although the very unclear manual half suggests I only need to do this if routing between VLANs.

I cannot seem to get the summit to route the traffic. This is driving me crazy as I'm sure it's some stupid, simple thing that I've missed but I can't seem to figure out what.

Static routes:

Dest Gateway VLAN
<VPN subnet 1> <VPN Router VLAN x> <X>
<VPN subnet 2> <VPN Router VLAN x> <X>
<VPN subnet 3> <VPN Router VLAN x> <X>
<VPN subnet 4> <VPN Router VLAN x> <X>
default <Internet Router VLAN x> <X>
default <Internet Router VLAN y> <y>


Pretty basic right? Argh!!! The VLANS all work fine; I can manually add persistant routes to the PC's and they work fine so it's nothing to do with the routers. The summit just won't route for me

All assistance is greatly appreciated!!




Peter Sherwood

Morrack Consulting

http://www.morrack.com

 

[clayfoxmvp]

Hey Peter,

I am currently trying to test the same thing. I am new to Extreme as well but now have 15 of them. I am not sure if the basic layer 3 has all the functionality or not. I know to do OSPF it needs the full layer 3. I tried to get OSPF working unsuccessfully but I did had RIP working. I would look at your RIP settings I think you may need these on to get the routing to work. I will let you know if I find anything.

Clay

 

[rn4it]

We predomitatly use Extreme gear, as long as the Summit200 is the the default gateway for the PC's it will make the routing decisions. What happens when you do traceroutes to go to the internet and the VPN? Is IPforwarding enabled on all VLANS associated to the PC's, Inet Router and VPN gateway?

 

[Morrack]

Update: it seems, unless I'm still missing something, that you can't have a default route for each VLAN (even though the switch accepts the programming). In the example above the problem was that every packet, regardless of which VLAN it orignated on, was following the default route for the default VLAN (unless there was a specific route that matched of course). Once I deleted the default route for the default VLAN it started working.

This of course only solves the problem temporarilly. I'm still looking into how to get around this apparent severe limitation.



Peter Sherwood

Morrack Consulting

http://www.morrack.com