L3 intervlan routing

[FWHATER]

Excuse me if this seems like a very simple question. I have
an L3 4507, with all my hosts on vlan 1. I've created a second vlan for voip. Clients on vlan2 can ping each other, including the ip for vlan 1, but nothing else. The default route is our firewall. I know that with L2 switches trunked with L3 routers, I would set up sub-interfaces and associate my vlans with them. How can my hosts on vlan 2 reach hosts on vlan 1 on my 4507 ?

 

[baddos]

The default route should be the switch's vlan interface for their specific vlan. The switch's default route should then be the firewall.

 

[FWHATER]

I don't think you route traffic to it's own interface. You'll get an error saying "%Invalid next hop address (it's this router)".

 

[baddos]

The default route for the hosts on the vlan should be the layer 3 switch's IP address. The default route on your switch should be the firewall.

 

[FWHATER]

vlan 1's ip is 11.11.1.1
vlan 2's ip is 12.12.1.1
firewall ip is 13.13.1.1

the default route for the switch is
ip route 0.0.0.0 0.0.0.0 13.13.1.1.

What are you proposing ? How would you set the default route for hosts on vlan 2 ? How will hosts on vlan 1 see hosts on vlan 2 ?

 

[baddos]

Random host on vlan 1 has their default gateway set to 11.11.1.1

Random host on vlan 2 has their default gateway set to 12.12.1.1

The layer3 switch will route between the two subnets.

 

[FWHATER]

What's the command ? Don't say ip default-gateway, because that command isn't available for vlan 2.

 

[baddos]

ip route 0.0.0.0 0.0.0.0 13.13.1.1

Thats the command for the switch.

 

[FWHATER]

That's already there.

 

[baddos]

Also make sure that you have "ip routing" in your configuration. Sometimes people turn that off if they don't plan on using their switch for layer3.

 

[FWHATER]

ip routing is already on by default. The switch will not route between subnets without a router although it's a l3 switch. Listen, it's considered layer 3 because you can configure the interfaces with ip addresses and convert the interfaces from l2 to l3. Unless you know of a command that routes between the subnets, a router is needed.

 

[FWHATER]

I stand corrected. For some reason our firewall was configured as the gateway, causing the native vlan to skip vlan 2. Since pointing my dhcp server to the swtich, vlan 1 can now see vlan 2 and vice versa. Thank you BADDOS !!!!