Internet Routable IPs with VLANS on 6248

just a point of clarification

where i said "I have set the default route to the internal interface of vyatta (10.10.10.21/24)..."

it should have read, "On the 6248 i have set the default route to 10.10.10.21/24 (that of the internal interface of vyatta)"

Cheers!

At a high level:

your servers need to have their default gateways set to the IP address of the appropriate vlan on the 6248 (172.160.24.1, 172.169.25,1, etc)

the vyatta needs to have routes to the subnets on the 6248 it is not directly connected to.  (route add 172.160.24.0 mask 255.255.255.0 10.10.10.21,  etc. )

the 6248 needs to have a default route to the vyatta (10.10.10.21)

the 6248 needs to have routing enabled globally and on each of the vlan interfaces.

Post your config if this is not enough information. 

Thanks so much - ill give it a shot.

so no OSPF, just need to setup static routes on Vyatta and default on 6248? as well as routing enabled gloablly and on each VLAN

How do i configure the port to the vyatta on the 6248? trunk? access? general? Do i need to have it on any of the VLANs i have created? (172.160.24.0/24 for example?)

Do you know if i am going to have a problem using the private 10.10.10.0/24 address space between 6248 and vyatta if someone on the internet wants to access server 172.160.24.25?

Thanks again

cheers

Ill try it all... :-)

-Pete

so no OSPF, just need to setup static routes on Vyatta and default on 6248? as well as routing enabled gloablly and on each VLAN

BH: Yes.

How do i configure the port to the vyatta on the 6248? trunk? access? general? Do i need to have it on any of the VLANs i have created? (172.160.24.0/24 for example?)

 BH: since the port to the vyatta is only carrying a single vlan, I would set it to an access port.  This will set the port to transmit and receive untagged traffic in the vlan for 10.10.10.x.

Do you know if i am going to have a problem using the private 10.10.10.0/24 address space between 6248 and vyatta if someone on the internet wants to access server 172.160.24.25?

BH: the internet will never even know about the 10.10.10.x network since you are just using it to transition to the 172.160.x.x networks.

Thanks again

BH: you are welcome

Ok so still not quite right.. 

My servers can ping their respective gateways fine, and talk to each other on the same Vlan. I'm just not getting how to set up the port going to the vyatta internal interface.

So i have created a vlan (vlan100) and have assigned port g3 to it as an untagged access port. I have a cable from this port (g3) connected to the in internal interface (eth1) of Vyatta (which is set to 10.10.10.21/24). Should i assign an ip address to vlan100 or not? something like 10.10.10.22/24 so its on the same subnet as the internal interface of the Vyatta? 

I may have mentioned that i have a single default route set to the internal interface of the vyatta router. Is that right? do i need a static route per vlan? or something else

How should my VLAN membership pages look? 

Right now i have it as

port 3 (connected to vyatta internal) assigned to vlan 100

port 23 (connected to Server 2) assigned to vlan10 

port 35 (connected to Server 3) assigned to vlan20 

ports14 and 48 (connected to Servers 1 and 4) assigned to vlan30

Should each of the vlans also have  have port g3 assigned to it as well as the ports the servers are on? 

I would like to be able to ping the internal vyatta interface from a server if possible, but right now i can only ping the vlan gateway. If i can get to the internal interface of vyatta from a server i should be golden. (because i have proven that i can get to the internal interface of the vyatta from the internet...if i briefly switch it to an internet routeable address(ping only)... i know you mentioned adding routes to vyatta and i will do so, but surely the internal interface should respond to pings even those routes are not defined?

Thanks!!!! 

-Pete

This would be easier if you posted your config file.

You need an ip address on vlan 100 and all the vlans need to have routing enabled.  Please post your config if this does not work.

Im all set now - Thank you very much for your help

:-)