UNSOLVED
L
lbendingclark
10 Posts
0
27818
September 25th, 2015 12:00
Dell Switch 6248 - cannot connect to firewall with configuration
I have it so the Vlan's can talk to each other, the tracert shows that they're going through the correct default gateway's. The issue I'm having is that on port 47, I have the wifi firewall connected to VLAN 50, which has the IP of 172.10.10.2. The Wifi Firewall's default gateway is set as 172.10.10.1.
I can ping the default gateway of the VLAN 50, but not 172.10.10.1; Even with the ip route command below.
Any help will be greatly appreciated.
Here's my running configuration:
!Current Configuration:
!System Description "PowerConnect 6248, 3.3.8.2, VxWorks 6.5"
!System Software Version 3.3.8.2
!Cut-through mode is configured as disabled
!
configure
vlan database
vlan 2-3,20,40,50,67
vlan routing 3 1
vlan routing 2 2
vlan routing 50 3
vlan routing 20 4
vlan routing 67 5
exit
stack
member 1 2
exit
ip address 192.168.1.9 255.255.255.0
ip default-gateway 192.168.1.1
ip address vlan 40
ip routing
ip route 0.0.0.0 0.0.0.0 172.10.10.1
interface vlan 2
routing
ip address 172.16.15.1 255.255.255.0
exit
interface vlan 3
routing
ip address 172.16.16.1 255.255.255.0
exit
interface vlan 20
routing
ip address 172.16.17.1 255.255.255.0
exit
interface vlan 50
routing
ip address 172.10.10.2 255.255.255.0
exit
interface vlan 67
routing
exit
!
interface ethernet 1/g1
gvrp enable
switchport access vlan 2
exit
!
interface ethernet 1/g2
gvrp enable
switchport access vlan 2
exit
!
interface ethernet 1/g3
gvrp enable
switchport access vlan 2
exit
!
interface ethernet 1/g4
gvrp enable
switchport access vlan 2
exit
!
interface ethernet 1/g5
gvrp enable
switchport access vlan 3
exit
!
interface ethernet 1/g6
gvrp enable
switchport access vlan 3
exit
!
interface ethernet 1/g7
gvrp enable
switchport access vlan 3
exit
!
interface ethernet 1/g8
gvrp enable
switchport access vlan 3
exit
!
interface ethernet 1/g9
gvrp enable
switchport access vlan 20
exit
!
interface ethernet 1/g10
gvrp enable
switchport access vlan 20
exit
!
interface ethernet 1/g11
gvrp enable
switchport access vlan 20
exit
!
interface ethernet 1/g12
gvrp enable
switchport access vlan 20
exit
!
!
interface ethernet 1/g47
switchport mode general
switchport general pvid 50
switchport general allowed vlan add 2-3,20,50 tagged
exit
!
interface ethernet 1/g48
gvrp enable
exit
!
interface ethernet 1/xg1
gvrp enable
exit
!
interface ethernet 1/xg2
gvrp enable
exit
!
interface ethernet 1/xg3
gvrp enable
exit
!
interface ethernet 1/xg4
gvrp enable
exit
exit
Let me know if I need to provide more information.
Thanks
lbendingclark
10 Posts
1401
0
Posted September 28th, 2015 08:00
Okay, I've tried having VLAN 50 in access mode and it still didn't work. The PC I'm trying to get to access the firewall internet is in VLAN 3 with it's default gateway at 172.16.16.1. I set the default gateway of VLAN 50 to 172.10.10.2, which it can ping. But it cannot access the firewall at 172.10.10.1.
Should I change the default gateway of VLAN 50 to the firewall IP address? Also the management VLAN is currently 40 with the ip address of 192.168.1.1
lbendingclark
10 Posts
1401
0
Posted September 28th, 2015 14:00
Yes I just checked. A client placed on VLAN 50 is able to access the internet, but not any of the other VLAN's. Just as none of the other VLAN's are able to access that client or the internet.
I have the port with the firewall set to:
interface ethernet 1/g47
switchport mode general
switchport general pvid 50
switchport general allowed vlan add 2-3,20,50 tagged
exit
And all the others are access. Would this cause any issues?
lbendingclark
10 Posts
1401
0
Posted September 29th, 2015 14:00
I tried changing the port on the switch to access mode, and it lost it's internet connectivity. I think for our purposes, that port needs to be general mode in order for traffic to see it.
And it is just the client on VLAN 50, all other VLAN's can still talk to each other, and ping the ip address of VLAN 50, but they do not receive the internet connection that the client on VLAN 50 does.
Any changes to our configuration that you can suggest?
lbendingclark
10 Posts
288
0
Posted September 29th, 2015 16:00
So we have the VLAN routing working on all PC's no matter what VLAN they're attached to. Now the only issue is with the Internet not coming through to Any VLAN that's not 50.
Access doesn't work because the firewall is putting out tagged traffic on port 47 (VLAN 50). Is there a specific port/place we should put the incoming internet connection in order for VLANs 2, 3, and 20 to talk to port 47 and the internet?
lbendingclark
10 Posts
288
0
Posted October 1st, 2015 09:00
Yeah looks like that was the issue. The routes back to the network weren't set on the firewall.
Another question, for creating a MAC ACL on the switch, is there a central management software that we could use for all our switches so we don't have to input each MAC address separately?
lbendingclark
10 Posts
1401
0
Posted September 25th, 2015 15:00
This is a test network we're setting up to emulate our future network. 172.10.10.1/24 is our interface default internet gateway, and we have that connected to a port on the test network switch. The gateway is managed through our firewall.