URGENT!!!!! VLAN on 3550

[spot69]

I have an existing network. It is on a 10.30.0.1 network scheme. I just purchased 1 3550 router and 6 2950 switches.
I want to set up 3 seperate Vlans. I assigned 2of the 10 GB ports on the 3550 to vlan1 and used the ip address of 10.30.0.x. I made 2 ports on the 3550 vlan 2 and gave the 10.30.1.x scheme to those. In order to see vlan 1 from vlan2 I had to trunk the vlan ports on both the 3550 and the 2950. IS that what I need to do. I want to have 3 seperate networks but I have a firewall on the 10.30.0 side. I need all vlans to get there for internet.
I have 3 days to solve this
please feel free to email me wmonroe@gonetrix.com

 

[StarTAC]

y don't u place a router with trunked ports in each of the vlans...?.. or if u have an internal route processor [which i don't think so otherwise u wouldn't be here] then you're covered...

do u have a layer 3 router/device in the equation, anywhere..?..

good luck..

 

[BuckWeet]

the 3550 is a layer 3 box..

 

[rburke]

Post your config for the 3550 and we should be able to help out. In general you will need to turn on "ip routing" and then setup routes for your switch to get out to the internet. This can usually be done by applying a default route with the command "ip route 0.0.0.0 0.0.0.0 next_hop_address" where next_hop_address is the next hop IP address to get to the internet or it is an interface. But like I said it is susually easier if you post your configs (passwords edited out and public IP's changed to protect teh innocent) and then we can see what you've done and how to fix it.

Burke

 

[spot69]

I have had such a hard time with this I just reset the config to factory on all devices to start over. I have a drawing of what I want to do. I'm not sure how to get it to you I'm trying to post it here but don't think I can

 

[wybnormal]

Your Cisco rep should be able to help or give TAC a ring. THey will help with the configs as part of their normal maintenance contract.

If you can scan the pic (with IPs changed) and just post the pic on a freeserver somewhere and give us the link, that would be a great help.

MikeS


Find me at

http://www.packetattack.com

"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu

 

[routerman]

Have a look at this example, I've cut these bits of config out of one of the 3550's I worked on recently, changed addresses so that it fits your scheme.

interface GigabitEthernet0/1
switchport access vlan 10
switchport mode access
no ip address
spanning-tree portfast
!
interface GigabitEthernet0/2
switchport access vlan 20
switchport mode access
no ip address
spanning-tree portfast
!
!
interface Vlan10
ip address 10.30.0.0 255.255.255.0
!
interface Vlan20
ip address 10.30.1.0 255.255.255.0

router eigrp 1
network 10.0.0.0
no auto-summary
no eigrp log-neighbor-changes


sh ip ro conn
10.0.0.0/8 is variably subnetted, 42 subnets, 4 masks
C 10.30.0.0/24 is directly connected, Vlan10
C 10.30.1.0/24 is directly connected, Vlan20


This will enable L3 switching between the 2 VLANS.

 

[spot69]

Thank you all for the input.. routerman I'm looking over the setup you just gave me. Here is a link to what I'm tring to do.

http://gonetrix.com/cisco/

I'm not even sure that thais is the best way to do it. Please look it over and see what you think

 

[rburke]

I do have one question about your diagram, why not attach the PIX to the 3550, making the 3550 the central switch instead of routing all traffic fom all three VLAN's to the 2950? It would make alot more sense, IMO, to attach the PIX to the 3550 and you could apply policy there instead of hte 2950 and 3550. Just an observation...

Burke

 

[waka1]

I agree with rburke. Use the 3550 as the Pix uplink if possible. All of these switches come out of the box as VTP servers. You need to designate the 3550 as the Vtp server and the rest of the switches as VTP clients in the same domain so they can exchange vtp advertisements. If you set up trunking on one port, the port on the other end that the trunk is connected to must run the same protocol (isl, dot1q, etc). In other words, both endpoint interfaces must reflect the same characteristics including vlans in order to pass vlan info including data. If you need steps in how to do this let me know. The main thing is whether it is physically feasible to use the 3550 as the uplink since it is layer 3 capable. Check out

http://www.cisco.com/pcgi-bin/Support/browse/index.pl?i=Technologies&f=1324

for links for setting up vlans and L3 devices. Let me know if I can be of some help.

 

[spot69]

waka1 give me some contact info please If I could pick your brain for just a min I think I could solve this