T2600G - VLan routing Internet

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

T2600G - VLan routing Internet

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
T2600G - VLan routing Internet
T2600G - VLan routing Internet
2020-06-05 14:32:44 - last edited 2020-06-05 14:41:23
Hardware Version: V4
Firmware Version: 20200110

I have a Tp-Link Switch model T2600G-28TS,
I made 4 VLANs: VLAN_1 (port 1 to 2), VLAN_10 (port 3 to 10), VLAN_20 (port 11 to 20) and VLAN_50 (port 23 to 24) ,
I have assigned PVID for each port to desired VLAN,
VLAN 1 is for management only,
VLAN 10 and 20 are  for local network
VLAN 50 is for routing to Internet (IP router: 192.168.1.254)

 

Each port in Vlan_10 (192.168.10.x - Gw 192.168.10.254)  and Vlan_20 ( 192.168.20.x - Gw 192.168.20.254) is directly connected to one computer

 

(L3 Features/Interface) I create a static virtual interface for each VLAN, the IPs are;
VLAN10: 192.168.10.254
VLAN20: 192.168.20.254
VLAN50: 192.168.1.253

 

(L3 Features/static Routing) I set default 0.0.0.0/0 to 192.168.1.254

 

the problem I have is:

from any computer I can't access the internet.

 

However I can do:
a) I can ping between pc within the same Vlan.
b) I can ping the switch interfaces
b) I can ping Vlan 50 interface (192.168.1.253)
c) from the ping tool swtich, I can ping all computers, all vlans interfaces, the router (192.168.1.254) and a internet ip (1.1.1.1)

 

What could be wrong?
In advance I thank any help.

 

  0      
  0      
#1
Options
6 Reply
Re:T2600G - VLan routing Internet
2020-06-06 11:01:06 - last edited 2020-06-06 11:01:36

 

icosta wrote

What could be wrong?

 

Either a missing default route in the switch or a wrong gateway in the PC used for testing (gateway should be the switch). 

༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#2
Options
Re:T2600G - VLan routing Internet
2020-06-06 14:29:59 - last edited 2020-06-07 08:07:25

@R1D2

 

Dear R1D2
Thank you for your care.
I checked  again the route table (see attachment) and found no lack of routing.
I ping from PC connected to port 7 / vlan_10 with the configuration:
IP: 192.168.10.10
Mask: 255.255.255.0
Gw: 192.168.10.254

From it, I can ping all ports on Vlan_10, as well as for all vlans interfaces .
But I can't ping ip router (192.168.1.254).
From the ping tool swtich, I can ping all computers, all vlans interfaces, the router and the internet IP.
Conclusion: The block is in the forwarding of packets (origin in Vlan10 / 20) from Vlan_50 to the router.
And I still haven't found how to fix it
Once again, thank you for your care.

 

  0  
  0  
#3
Options
Re:T2600G - VLan routing Internet
2020-06-09 10:19:18

@icosta, show the network routes of the router, please.

 

 

༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#4
Options
Re:T2600G - VLan routing Internet
2020-06-10 08:32:57

@R1D2

 

the switch is directly connected to the router (Huawei HG8247Q), owned by the communications provider, that does not have a GUI / Cli to obtain the routing table.
However, tomorrow I intend to build a Pfsense firewall /router that gives us more control over the routing.
Thank you for your care.

 

  0  
  0  
#5
Options
Re:T2600G - VLan routing Internet
2020-06-10 08:45:49

 

icosta wrote
However, tomorrow I intend to build a Pfsense firewall /router that gives us more control over the routing. 

 

That will definitely help.

 

You need to inform the router that the next hop for network 192.168.10.0/24 is the switch at 192.168.1.253/24.

Just add network rules for your VLANs 10 and 20.

༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  1  
  1  
#6
Options
Re:T2600G - VLan routing Internet
2020-06-11 19:57:42

@R1D2 

 

R1D2 wrote

 

You need to inform the router that the next hop for network 192.168.10.0/24 is the switch at 192.168.1.253/24.

Just add network rules for your VLANs 10 and 20.

 

Routes and rules added in PFsense and it worked in full!
Thank you for your support.

 

  0  
  0  
#7
Options