topic X440 Multiple Vlan Routing in ExtremeSwitching (EXOS/Switch Engine)

X440 Multiple Vlan Routing

Fun___Games — Wed, 04 May 2016 16:59:00 GMT

configure vlan default delete ports allconfigure vr VR-Default delete ports 1-24
configure vr VR-Default add ports 1-24
configure vlan default delete ports 1-24
create vlan "amp"
configure vlan amp tag 101
create vlan "control"
configure vlan control tag 100
create vlan "com"
configure vlan com tag 105
configure vlan amp add ports 6-8 untagged
configure vlan control add ports 1-5, 9-10, 14-20, 22-24 untagged
configure vlan com add ports 11-13 untagged
configure vlan control ipaddress 172.1.100.254 255.255.255.0
enable ipforwarding vlan control
configure vlan com ipaddress 172.1.105.1 255.255.255.0
enable ipforwarding vlan com
configure vlan amp ipaddress 172.1.101.1 255.255.255.0
enable ipforwarding vlan amp

I'm unable to ping anything on Com 105 or Amp 101 from Vlan Control 100.

RE: X440 Multiple Vlan Routing

Mareen — Wed, 04 May 2016 17:04:00 GMT

You have to enable loopback-modus for the vlans if there is nothing patched to the ports

RE: X440 Multiple Vlan Routing

Frank — Wed, 04 May 2016 17:07:00 GMT

Sorry to ask the basic questions:

- the default gateway on the machine in Vlan Control is set to 172.1.100.254 ?
- the default gateway on the machines in Vlan Amp/Com is set to 172.1.101.1 / 172.1.105.1 respectively?
- the target machines aren't running Windows in default firewall mode that kills pings?
- does a traceroute give any hints?

Sorry if you already checked all that, but I've been bitten by one of these things more times than I care to admit 😉

Frank

RE: X440 Multiple Vlan Routing

Henrique — Wed, 04 May 2016 17:07:00 GMT

Hi Frank,

For Vlan control: PC IP: 172.1.100.x/24 and Gateway: 172.1.100.254
For Vlan amp: PC IP: 172.1.101.x/24 and Gateway: 172.1.101.1
For Vlan com: PC IP: 172.1.105.x/24 and Gateway: 172.1.105.1

You can try to ping the switch vlan IPs from each machine. Based on your configuration it should work.

If you cannot ping from machines to machines I believe the windows firewall is blocking ICMP traffic. You can add a rule to the windows firewall to allow ingress ICMP traffic.

RE: X440 Multiple Vlan Routing

Fun___Games — Wed, 04 May 2016 17:07:00 GMT

Default Gateways are setup. I can ping from the switch to all networks. No firewall are enabled on any hardware.

RE: X440 Multiple Vlan Routing

Henrique — Wed, 04 May 2016 17:07:00 GMT

Can you ping from the PC to it's own gateway (switch ipaddress) and to all other switch vlans ips (172.1.100.254, 172.1.101.1, 172.1.105.1)?

Please share the outputs for:

show vlan
show fdb
show iparp

Which switch port the PC is connected?