Unsolved
4 Posts
0
1014
April 6th, 2021 10:00
traffic to firewall showing up as wrong vlan.
I'm using a dell 6248 as a core switch, and have multiple vlans tagged.
For example traffic with a 10.11.x.x ip is in vlan 11, our main vlan is 10.10.x.x Our subnet mask is set to 255.255.0.0 so not sure if that is causing issues?
When I check the firewall diagnostics traffic from a 10.11.x.x does appear but it shows as vlan 10 instead of 11. Causing the device to never receive the traffic from the internet. (internal works fine)
I tried to add config photos but the website seems to be blocking me.
The port to the firewall is setup as a trunk, and all the vlans are tagged on that port.
Is this an issue with the subnet mask or something deeper?
No Events found!
Josh Biggins
4 Posts
0
April 6th, 2021 14:00
Hi Thanks Josh, Ip routing is set to enabled. Firmware isn't the newest but it is a recent one.
RIP is set to disabled if that would affect anything, and clients can talk across vlans ok.
DELL-Josh Cr
Community Manager
•
9.6K Posts
•
43.1K Points
0
April 6th, 2021 14:00
Hi Josh,
It probably is not the subnet, it should be fine for those subnets. Is the firmware up to date? Is ip routing enabled on the switch?
DELL-Josh Cr
Community Manager
•
9.6K Posts
•
43.1K Points
0
April 6th, 2021 15:00
Do the clients point to the firewall for DNS?
Josh Biggins
4 Posts
0
April 6th, 2021 21:00
No, we are in a windows/domain environment so the dns query hits the domain controller (on a different vlan)
I can go and swap out the new firewall after hours, but I don't think the wifi clients could even open the webui of the firewall (the vlan10 ones could just fine!)
DELL-Joey C
Moderator
•
4.2K Posts
•
21K Points
0
April 6th, 2021 23:00
Hi,
It's most probably related to the firewall which might be the cause of the connection. Have you verified that multiple vlan have been configure on the firewall? Let's see if swapping out the firewall would help the issue.
DELL-Josh Cr
Community Manager
•
9.6K Posts
•
43.1K Points
0
April 7th, 2021 13:00
Can you try turning off ip routing on the switch?
Josh Biggins
4 Posts
0
April 7th, 2021 13:00
Hi, we spoke to the vendor (all 4 vlans etc are setup) the firewall is what's letting us know the traffic is all coming as vlan 10.
I spent about 2 hours on the phone, and their support determined it was a switch issue.
I think it's something to do with routing on the switch as 1 of the vlans that is totally kept separate can access the internet ok.