Layer 3 Switching

[fieryhail]

I am in a situation where I have a layer 3 switch, and am having difficulty with intervlan routing/switching. I have 2 networks connected to a Catalyst 3550 and both of those networks are connected to different interfaces on a PIX 525 for internet access with different access levels.

192.168.1.0/24 (workstations) and 192.168.2.0/24 (file servers and media servers)

Hosts in each network use 192.168.1.1 and 192.168.2.1 as their default gateway which is the IP of the PIX interface each network is connected to.

When traffic goes from 192.168.1.0 to 192.168.2.0 it always passes through the PIX. This is what I want to avoid. Does anyone have any ideas about how best to accomplish this? Thanks in advance for any suggestions.

 

[Viconsul]

You can achieve your desired solution several ways, one way is to enable routing on your layer 3 switch, if you have the right image then create three vlans. Assign 1st vlan to your workstations, 2nd vlan to your file servers and create a 3rd vlan which will be for your pix inside interface. Make the pix inside interface the gateway of last resort and this should work as desired. You can either use a routing protocol or create static routes.

 

[fieryhail]

I tried the method suggested. I created the extra vlan, and devices on that vlan were able to get outbound to internet, however there were issues. Hosts in the other vlans were able to access each other, example:
192.168.1.101 could reach 192.168.2.202 and vice versa but neither one could ping PIX or internet access. Hosts in 192.168.0.0 were able to get internet access. I setup
ip route 0.0.0.0 0.0.0.0 192.168.0.1 (192.168.0.1 being the PIX "inside" interface) in the 3550 but no good. while logged into the switch directly, I was able to do ping internet addresses. I tried creating a routed interface on the 3550 and connecting that to the inside interface of the PIX, still, no traffic from hosts in the other networks. Not sure what I am doing wrong here.

 

[Viconsul]

You need acls on the pix which will permit the newly created vlans to access the internet.

 

[burtsbees]

Post a config from both the switch and the PIX please...

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!