Trouble routing VLAN clients to another network
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Dear sirs,
This is my first try to configure a managed router and I am having trouble accesing systems in another VLAN.
My current configuration includes a single VLAN (10) with IP address 10.3.1.1, currently configured only on port 1.
Port 23 has been configured as L3 interface with IP address 10.0.2.138.
From a computer in the workstations network (IP 10.3.1.2) both VLANs can be pinged (10.3.1.1 and 10.0.2.138). However, I cannot ping the router on the other end with IP 10.0.2.137. The VLAN can be pinged from the router side.
Am I missing some route to allow access to 10.0.2.137?
Below are both the configuration and the route table.
Thank you for your help!
!T2600G-28TS
#
vlan 10
#
serial_port baud_rate 38400
#
system-time ntp UTC+08:00 133.100.9.2 139.78.100.163 12
no system-time dst
#
user name admin privilege admin secret 5 $1$F/N/O/D=N<G7@0B/L:A>F9B;B4@=H;@9!!!|{
no service reset-disable
#
#
ip ssh server
#
#
interface vlan 1
ip address 192.168.0.1 255.255.255.0
ipv6 enable
#
interface vlan 10
ip address 10.3.1.1 255.255.255.0
no ipv6 enable
#
interface gigabitEthernet 1/0/1
switchport general allowed vlan 10 untagged
switchport pvid 10
#
#
interface gigabitEthernet 1/0/22
#
interface gigabitEthernet 1/0/23
no switchport
ip address 10.0.2.138 255.255.255.0
description "GwInterface"
no ipv6 enable
no ip igmp snooping
no ipv6 mld snooping
#
interface gigabitEthernet 1/0/24
#
#
end
T2600G-28TS(config)#show ip route
Codes: C - connected, S - static
* - candidate default
10.0.0.0/24 is subnetted, 2 subnets
C 10.0.2.0/24 is directly connected, Gi1/0/23
C 10.3.1.0/24 is directly connected, VLAN10
C 192.168.0.0/24 is directly connected, VLAN1
Dear Fae,
Thank you for your reply.
The firewall on the test computer is down, so that does not seem to be the problem.
The following is a diagram of the setup I am trying to achieve:
The general idea is that I need to have workstations connected to VLAN 10 (ports 1-20). They need to connect to the workstations switch via port 23 configured as Layer3 with IP 10.0.2.37. General internet traffic will go through VLAN 12 to a switch.
As noted previously, from 10.3.1.2 I can ping 10.3.1.1, 10.0.2.38 and 10.0.2.37 but not a computer in the workstations switch (e.g. 10.0.2.130).
From the test workstation (10.0.2.130) I can ping 10.0.2.37.
Thank you for your help!