custom routes on 2960-S 48

[tjbradford]

I have a 2960 switch which is S version of ios but seem to be failing to do some really simple config

Basically I have four vlans 10,20,30,40
each of these is configured on the switch, for example . 192.168.10.9, 192.168.20.9, etc
I have two gateways, a new line and an old one, and want to move some services off the old link to the new

before the new line I have a gateway on the switch of 0.0.0.0 0.0.0.0 192.168.10.1 - this routes all traffic to the old line.

works fine

however if I then want to send a desktop out of the new line eg. ip route 192.168.10.2 255.255.255.255 192.168.10.2
it will never receive a response, now I know the link is goo, if I change the host gateway to the new link I can browse the web fine.

when pinging the host from the new line firewall it shows a loop between the switch and itself.

what have I missed here ?

 

[tjbradford]

edit to above

eg. ip route 192.168.10.3 255.255.255.255 192.168.10.2

 

[VinceWhirlwind]

You seem to have a messed up idea of how to put in an ip route statement.

If you want to send traffic to the internet (0.0.0.0) down a different path, but just for one source PC (192.168.10.2), then your routing needs to say:
ROUTE SOURCEIP to DESTIP via TARGETIP

Normal routing does not look at source. Normal routing looks like:
ROUTE DESTIP via TARGETIP.

To route based on source, you need policy-based routing. I can't remember exactly, but I doubt a 2960 can do that.

If you want to use a Layer2 switch to route traffic (???why???) then the best you can do is probably stop routing using the Layer2 switch, create two different VLANs, associate each VLAN's subnet with a different ISP, and let the ISP routers handle it.

 

[tjbradford]

as previously mentioned, we have an old lease line and a new one.

I wish to move all internal devices across to the new leased line in stages, eg. per department.

once users are all across to the new line the old line can be turned off and all ip routes removed other than that of
ip route 0.0.0.0 0.0.0.0 192.168.10.2

looks like these units do support policy based route mapping so this combines with a permit acl for those ranges being cut across will work nicely.

cool

 

[VinceWhirlwind]

If the 2960 supports PBR, you're set. Colour me amazed.