Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chris Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

inter VLAN Routing

Status
Not open for further replies.

turksthegreat

Technical User
Oct 28, 2013
1
US
I have an 8 stack switch setup varying from 24 to 48 ports, 3 Vlans. Vlan labels are data (tag4) 10.4.1.50, data2 (tag5) 10.4.2.50 and VOIP (tag40)10.40.1.50. Ipforwarding is enabled on all Vlans and vlan ports are tagged accordingly, and routes are established on the VR-Default. I can access the internet with a computer on the data2 network but cannot actually ping the data2’s ipaddress? I can ping data2 for computer on data’s network but not a computer on its own network. Really doesn’t make any sense to me but I am still new to networking and really new to extreme switches. I also have the data vlan utilizing a DHCP server that I am going to switch that to assign IPs from data2 once I get this routing problem fixed. Thanks in advanced. Below are the vlan configs. Switch models are extreme summit switches x450e, x250e and a x350
show vlan data
VLAN Interface with name Data created by user
Admin State: Enabled Tagging: 802.1Q Tag 4
Virtual router: VR-Default
Primary IP : 10.4.1.50/24
IPv6: None
STPD: None
Protocol: Match all unfiltered protocols
Loopback: Disabled
NetLogin: Disabled
QosProfile: None configured
Egress Rate Limit Designated Port: None configured
Ports: 214. (Number of active ports=119)
Untag: *1:1, *1:2, 1:3, *1:4,*1:5(filesvr), 1:6, *1:7,
1:8, *1:9, 1:10, 1:11, *1:12, *1:13, *1:14,
*1:15, 1:16, *1:17,*1:18(Image_Now), *1:22,*1:23(DATA_TRUNK), *2:1,
*2:2, *2:3, *2:4, *2:5, 2:6, 2:7, 2:8,
*2:9, 2:10, *2:11, *2:12, *2:13, *2:14, *2:15,
*2:16, *2:17, *2:18, *2:19, *2:20, *2:21, *2:22,
*2:23, 2:24, 2:25, 2:26, *2:27, *2:28, *2:29,
2:30, *2:31, *2:32, *2:33, 2:34, 2:35, 2:36,
2:37, *2:38, 2:39, *2:40,*2:41(cc51), *2:43, *2:44,
*2:45,*2:46(CiscoRouter), *2:47, *2:48, 2:49, 2:50, *3:1,
*3:2, *3:3, *3:4, *3:5, *3:6, *3:7, *3:8,
[7mPress <SPACE> to continue or <Q> to quit:[m[60;D[K 3:9, *3:10, *3:11, 3:12, 3:13, 3:14, 3:15,
*3:16, *3:17, 3:18, 3:19, *3:20, 3:21, *3:22,
*3:23, 3:24, 4:1, 4:2, *4:3, 4:4, 4:5,
4:6, 4:7, 4:8, *4:9, 4:10, 4:11, *4:12,
4:13, 4:14, 4:15, 4:16, 4:17, 4:18, 4:19,
*4:20, 4:21, *4:22, *4:23, *4:24, *5:1, *5:2,
5:3, *5:4, *5:5, *5:6, 5:7, 5:8, 5:9,
5:10, 5:11, 5:12, 5:13, 5:14, *5:15, *5:16,
5:17, *5:18, *5:19, 5:20, 5:21, *5:22, *5:23,
5:24, *6:1, *6:2, *6:3, *6:4, *6:5, 6:6,
6:7, *6:8, *6:9, *6:10, *6:11, 6:12, 6:13,
6:14, 6:15, *6:16, 6:17, *6:18, 6:19, *6:20,
6:21, *6:22, *6:23, *6:24, *7:1, *7:2, 7:3,
7:4, *7:5, 7:6, *7:7, *7:8, *7:9, *7:10,
7:11, 7:12, *7:13, 7:14, *7:15, 7:16, 7:17,
*7:18, 7:19, *7:20, *7:21, 7:22, *7:23, 7:24,
*7:25, *7:26, 7:27, 7:28, 7:29, 7:30, 7:31,
*7:32, 7:33, *7:34, 7:35, *7:36, 7:37, 7:38,
*7:39, 7:40, 7:41, 7:42, 7:43, 7:44, 7:45,
*7:46, *7:47, *7:48
Tag: *1:24
Flags: (*) Active, (!) Disabled, (g) Load Sharing port
(b) Port blocked on the vlan, (a) Authenticated NetLogin port
[7mPress <SPACE> to continue or <Q> to quit:[m[60;D[K (u) Unauthenticated NetLogin port, (m) Mac-Based port
Slot-1 x450e-Server-Room.6 # show vlan
---------------------------------------------------------------------------------------
Name VID Protocol Addr Flags Proto Ports Virtual
Active router
/Total
---------------------------------------------------------------------------------------
Data 4 10.4.1.50 /24 -f--------------- ANY 119/214 VR-Default
Data2 5 10.4.2.50 /24 -f--------------- ANY 11/18 VR-Default
Default 1 -------------------------------T----- ANY 0 /4 VR-Default
Mgmt 4095 ------------------------------------- ANY 0 /1 VR-Mgmt
VOIP 40 10.40.1.50 /24 -f--------------- ANY 115/209 VR-Default
---------------------------------------------------------------------------------------
Flags : (C) EAPS Control vlan, (d) NetLogin Dynamically created VLAN,
(D) VLAN Admin Disabled, (E) ESRP Enabled, (f) IP Forwarding Enabled,
(i) ISIS Enabled, (I) IP Forwarding lpm-routing Enabled, (L) Loopback Enabled,
(l) MPLS Enabled, (m) IPmc Forwarding Enabled, (n) IP Multinetting Enabled,
(N) Network LogIn vlan, (o) OSPF Enabled, (p) PIM Enabled,
(P) EAPS protected vlan, (r) RIP Enabled,
(T) Member of STP Domain, (V) VPLS Enabled, (v) VRRP Enabled

Total number of Vlan(s) : 5
Slot-1 x450e-Server-Room.7 # show vlan voip
VLAN Interface with name VOIP created by user
Admin State: Enabled Tagging: 802.1Q Tag 40
Virtual router: VR-Default
Primary IP : 10.40.1.50/24
IPv6: None
STPD: None
Protocol: Match all unfiltered protocols
Loopback: Disabled
NetLogin: Disabled
QosProfile: QP5
Egress Rate Limit Designated Port: None configured
Ports: 209. (Number of active ports=115)
Untag: *1:19,*1:20(Voicemail), 2:42
Tag: *1:1, *1:2, 1:3, *1:4, 1:6, 1:8, *1:9,
1:10, 1:11, *1:12, *1:13, *1:14, *1:15, 1:16,
*1:17, *1:22, *1:24, *2:1, *2:2, *2:3, *2:4,
*2:5, 2:6, 2:7, 2:8, *2:9, 2:10, *2:11,
*2:12, *2:13, *2:14, *2:15, *2:16, *2:17, *2:18,
*2:19, *2:20, *2:21, *2:22, *2:23, 2:25, 2:26,
*2:27, *2:28, *2:29, 2:30, *2:31, *2:32, *2:33,
2:34, 2:35, 2:36, 2:37, *2:38, 2:39, *2:40,
*2:41(cc51), *2:43, *2:44, *2:45, *2:47, *2:48, 2:49,
2:50, *3:1, *3:2, *3:3, *3:4, *3:5, *3:6,
[7mPress <SPACE> to continue or <Q> to quit:[m[60;D[K *3:7, *3:8, 3:9, *3:10, *3:11, 3:12, 3:13,
3:14, 3:15, *3:16, *3:17, 3:18, 3:19, *3:20,
3:21, *3:22, *3:23, 3:24, 4:1, 4:2, *4:3,
4:4, 4:5, 4:6, 4:7, 4:8, *4:9, 4:10,
4:11, *4:12, 4:13, 4:14, 4:15, 4:16, 4:17,
4:18, 4:19, *4:20, 4:21, *4:22, *4:23, *4:24,
*5:1, *5:2, 5:3, *5:4, *5:5, *5:6, 5:7,
5:8, 5:9, 5:10, 5:11, 5:12, 5:13, 5:14,
*5:15, *5:16, 5:17, *5:18, *5:19, 5:20, 5:21,
*5:22, *5:23, 5:24, *6:1, *6:2, *6:3, *6:4,
*6:5, 6:6, 6:7, *6:8, *6:9, *6:10, *6:11,
6:12, 6:13, 6:14, 6:15, *6:16, 6:17, *6:18,
6:19, *6:20, 6:21, *6:22, *6:23, *6:24, *7:1,
7:3, 7:4, *7:5, 7:6, *7:7, *7:8, *7:9,
*7:10, 7:12, *7:13, 7:14, *7:15, 7:16, 7:17,
*7:18, 7:19, *7:20, *7:21, 7:22, *7:23, 7:24,
*7:25, *7:26, 7:27, 7:28, 7:29, 7:30, 7:31,
*7:32, 7:33, *7:34, 7:35, *7:36, 7:37, 7:38,
*7:39, 7:40, 7:41, 7:42, 7:43, 7:44, 7:45,
*7:46, *7:47, *7:48
Flags: (*) Active, (!) Disabled, (g) Load Sharing port
(b) Port blocked on the vlan, (a) Authenticated NetLogin port
(u) Unauthenticated NetLogin port, (m) Mac-Based port
[7mPress <SPACE> to continue or <Q> to quit:[m[60;D[KSlot-1 x450e-Server-Room.8 # Cshow
Slot-1 x450e-Server-Room.9 # show data2
VLAN Interface with name Data2 created by user
Admin State: Enabled Tagging: 802.1Q Tag 5
Virtual router: VR-Default
Primary IP : 10.4.2.50/24
IPv6: None
STPD: None
Protocol: Match all unfiltered protocols
Loopback: Disabled
NetLogin: Disabled
QosProfile: None configured
Egress Rate Limit Designated Port: None configured
Ports: 18. (Number of active ports=11)
Untag: 1:21(SWVOIPTrunk)
Tag: *1:1, *1:2, 1:3, *1:4,*1:5(filesvr), 1:6, 1:8,
*1:9, 1:10, 1:11, *1:12, *1:13,
Also I have read just about every manual I could find on extreme switches attempting to full grasp their concept of Vlan routing but I am not 100 percent sure I understand it concept. From what I grasp create a vlan, tag the vlan, ensure some form of ip port forwarding is enabled and then? Is there something special you have to do to get vlans to cross communicate? Thanks for any help! Also new to this forum so if this is posted in the wrong place let me know.


 
Did you create a subinterface for each of the VLANs on the router's interface you are bouncing the traffic off of?
 
What model switches are these? Do they do Layer-3?
If not, then you need to pass all VLANs to the router to do the routing.

I assume 1:24 is your uplink port. You have the Data VLAN tagged on the uplink port, the VOIP VLAN untagged, and the DATA2 VLAN not even on it.
I wonder how your router is configured?
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top