routing on a 3750 1

[KayDubYa]

I am hoping someone can help me with this problem. I am trying to route different vlans with a 3750 to 2 seperate LAN interfaces on my firewall with no luck. I want to be able to send one vlan(25) to interface one and another vlan(98) to interface two of the firewall. The default route is interface one. I setup a static route for interface two so it looks like this

0.0.0.0 0.0.0.0 10.10.1.6
10.98.0.0 255.255.0.0 10.12.1.2

The problem I am having is that internet traffic does not go through vlan 98. I can ping the firewall interface and access the web admin page from 98 but I cannot get out to the internet. The default route works fine.

I know it is not the firewall because I can reverse these settings and it will work the other way. How can I get internet on both?

 

[KayDubYa]

So I think I have found the answer to my own question. My model of the 3750 does not have the IP services image, therfore does not support PBR. Does anyone know of another way to do this?

 

[jimfixit]

you do have to have that particular IOS. If you have a license for that feature set and you have smart-net you can simply download it.

We do what you are talking about all the time using c3750-advipservicesk9-mz.122-46.SE.bin

You may not require the cryto version so you could eliminate the versions with k9 in the header.

 

[KayDubYa]

Thanks Jim. Is there another way to do this route without the upgrade?

Ken

 

[jimfixit]

you mean, legally? not that I can think of. For a switch to route you have to have IP services version of the IOS, and you can't get it if you didn't pay for that level of feature set. But check with various vendors, even some of the major warehouse vendors sell smartnet and IOS updates and some are fairly inexpensive compared to your local 'partner resellers'. Of course I know in these economic times "less than the other guy" doesn't cut it if your budget has a zero balance. Good luck!

 

[KayDubYa]

Yes, I meant legally. I was hoping that a static route would take care of it. Money is tight here. We are a small private school that is in a major budget crunch right now. This might be a tough sell. Thanks for all your help.

Ken

 

[burtsbees]

I am not getting a full picture...
The firewall has two LAN interfaces (10.10.1.6 and 10.12.1.2), correct? Can you post a network diagram?

Burt

 

[tjbradford]

i'm pretty sure the std image supports intervlan routing ,where are the static routes you added on the switch ?

i'm pretty sure the std image allows even for eigrp (stick mode only)

i will check this tomorrow

 

[KayDubYa]

EIGRP is in services image. The inter-vlan routing seems to only allow the one default route. I'll have to wait until next budget to see if I can get some money for upgrades. thanks for your help.

 

[VinceWhirlwind]

Hang on - the unenhanced image supports routing including RIP.

3750 is a Layer-3 switch - it routes just fine.

You need the enhanced image if you want OSPF (etc...) or multicast routing.

 

[tjbradford]

with the std image you can enable eigrp so a neighbouring device can obtain its routing table , if you wish to propergate it throughout your entire infrastructure then you require an enhanced image