Thanks for revert Daniel. The global command "IP Routing" is already set:

ip routing

ip route 0.0.0.0 0.0.0.0 10.201.35.100

My intention is to separate the LAN interface of the router and WAN interface of riverbed box in a VLAN with pure layer 2 functionality. The LAN interface of the riverbed box should be connected to a VLAN with layer 3 capabilities.

In the past I have used layer 2 switches (Dell PC 3524). On these devices it was possible to separate the WAN and LAN path as described above

If that not works I will be forced to connect the router and riverbed box directly with a Network cable, instead of connect them by using the switch ports. Is this correct?

We have different type of Cisco Routers from our MPLS provider (mainly 2000 series) and different type of Riverbed boxes (250,550,1050). Indeed - I try to segregate the traffic as it enters the network - from the Cisco router LAN interface to Riverbed WAN0.0 (Layer2 VLAN) and from Riverbed LAN0.0 into the LAN (Layer3 VLAN). Let know if you need more details. Thanks

Thanks for your revert

The network diagramm is correct. Please find the port assignment in the configuration underneath

configure

vlan 2

name "Transfer-Network"

vlan association subnet 10.201.35.0 255.255.255.0

exit

vlan 3

name "RVB-Ports-WAN-0.0-Pri"

exit

vlan 5

name "IT-Network-Old"

vlan association subnet 10.200.35.0 255.255.255.0

exit

vlan 6

name "IT-Network"

vlan association subnet 10.240.20.0 255.255.255.0

exit

vlan 7

name "Client-Network"

vlan association subnet 10.240.18.0 255.255.254.0

exit

vlan 8

name "Industry-Network"

vlan association subnet 10.240.16.0 255.255.254.0

exit

vlan 2-8

exit

ip name-server "10.200.35.120"

ip access-list Monitoring

permit ip 10.239.114.46 255.255.255.255 10.201.0.0 0.0.255.255

deny every

exit

ip access-list Intersite

exit

ip access-list Datacenter

exit

ip routing

ip route 0.0.0.0 0.0.0.0 10.201.35.100

interface vlan 1

exit

interface vlan 2

ip address 10.201.35.2 255.255.255.0

exit

interface vlan 5

ip address 10.200.35.101 255.255.255.0

ip helper-address 10.7.194.135 dhcp

exit

interface vlan 6

ip address 10.240.20.101 255.255.255.0

bandwidth 10000

ip helper-address 10.7.194.135 dhcp

exit

interface vlan 7

ip address 10.240.18.101 255.255.254.0

bandwidth 10000

ip helper-address 10.7.194.135 dhcp

exit

interface vlan 8

ip address 10.240.16.101 255.255.254.0

bandwidth 10000

ip helper-address 10.7.194.135 dhcp

exit

ip vrrp

!

interface Gi1/0/1

switchport access vlan 3

exit

!

interface Gi1/0/2

switchport access vlan 3

exit

!

interface Gi1/0/3

switchport access vlan 2

exit

!

interface Gi1/0/5

switchport access vlan 5

exit

!

interface Gi1/0/6

switchport access vlan 6

exit

!

interface Gi1/0/7

switchport access vlan 7

exit

!

interface Gi1/0/8

switchport access vlan 8

exit

!

interface Te1/0/1

switchport mode trunk

switchport trunk allowed vlan 2,5-8

exit

interface vlan 2

vrrp 2

vrrp 2 mode

vrrp 2 description Master

vrrp 2 ip 10.201.35.1

vrrp 2 track interface Vl2

vrrp 2 track ip route 10.201.35.0/24

vrrp 2 priority 200

vrrp 2 preempt delay 15

exit

interface vlan 5

vrrp 5

vrrp 5 mode

vrrp 5 description Master

vrrp 5 ip 10.200.35.100

vrrp 5 track interface Vl2

vrrp 5 track ip route 10.201.35.0/24

vrrp 5 priority 200

vrrp 5 preempt delay 15

exit

interface vlan 6

vrrp 6

vrrp 6 mode

vrrp 6 description Master

vrrp 6 ip 10.240.20.100

vrrp 6 track interface Vl2

vrrp 6 track ip route 10.201.35.0/24

vrrp 6 priority 200

vrrp 6 preempt delay 15

exit

interface vlan 7

vrrp 7

vrrp 7 mode

vrrp 7 description Master

vrrp 7 ip 10.240.18.100

vrrp 7 track interface Vl2

vrrp 7 track ip route 10.201.35.0/24

vrrp 7 priority 200

vrrp 7 preempt delay 15

exit

interface vlan 8

vrrp 8

vrrp 8 mode

vrrp 8 description Master

vrrp 8 ip 10.240.16.100

vrrp 8 track interface Vl2

vrrp 8 priority 200

vrrp 8 preempt delay 15

exit