timmyb12345
1 Copper

6224 Trunk via VPN(WAN)

 

Afternoon,

 

I have two pairs of stacked Powerconnect 6224 switches (ultimately 2 switches) With the following Vlans:

VLAN10 10.10.0.0/20

VLAN11 10.10.90.9/23

VLAN100 10.10.100.0/24

VLAN101 10.10.101.0/24

 

They are all connected together with cabling to form the following structure:

 

PRODUCTION SITE: | | DR Site:

| |

VLAN10 | | VLAN11

VLAN100 | | VLAN101

 

The two switches are on the same fabric therefore inter-vlan routing is working fine with Trunk ports between the switches. But I want to be able to route the trunk through a WAN in Disaster situations. Can somebody please point me in the right direction? I think I will have to:

 

-Create a VPN tunnel between the two sites. (Has anyone got any pointers?)

-On both the 6224, create a new static route to the VPN router for the different vlan subnets

 

Are these steps correct? How will the route be enforced? Will it be ignored due to inter-vlan routing being enabled through the 6224 vlan interface?

 

Thanks in advanced

 

0 Kudos
4 Replies
8 Krypton

Re: 6224 Trunk via VPN(WAN)

You can set the route metric in the "ip route" command, so that one route has a higher preference than the other.  When the prefered route is not available, the other will be used.

dvlan-tunnel feature might be useful for tunneling through you VPN.

0 Kudos
timmyb12345
1 Copper

Re: 6224 Trunk via VPN(WAN)

Can you alter metrics for default inter-vlan routes (that are set up automatically)?

0 Kudos
8 Krypton

Re: 6224 Trunk via VPN(WAN)

directly connected interfaces will always have the highest preference.   Set the route to a lower preference.  When the connected interface is not available, the route in the routing table will be used.

 

0 Kudos
timmyb12345
1 Copper

Re: 6224 Trunk via VPN(WAN)

Can I just pass this over you to see if I have it in my head 100%. I have the internal interfaces for each vlan on the corrosponding switch.

 

SWITCH 1 | VLAN TRUNK | SWITCH 2
VLAN100 GW VLAN101 GW
10.10.100.254   10.10.101.254

Addresses:
10.10.100.1 10.10.101.1


Would the routes be as follows?

On Switch 1
Route to 10.10.101.0/24 = Next Hop 10.10.101.254


On Switch 2
Route to 10.10.100.0./24 = Next Hop 10.10.100.254

The VLAN TRUNK is on the same fabric (for now) so the routes should work yes? If the fabric was down and I wanted to pass the routes to a router instead would I have to change the static route or can two routes exist with different metrics? If so, how do the routes failover? 

 

Thanks

 

Tim

0 Kudos