topic Re: intra vlan routing issue. Can Ping but nothing else between vlans in ExtremeSwitching (EXOS/Switch Engine)

intra vlan routing issue. Can Ping but nothing else between vlans

aaroncirilo — Tue, 25 Jul 2023 20:22:50 GMT

I have 3 vlans on a x440. The default vlan 1 can ping vlan 10 VoIP phones. But I can't open a web interface from vlan 1. Across the vti tunnel I can. I can do a trace route and it hits the local inside gateway then sends it back to the switch then to the phone. It's almost like TCP isn't working between vlans.

I can include whatever config is necessary. I've attached a diagram.

Re: intra vlan routing issue. Can Ping but nothing else between vlans

KlausD — Wed, 26 Jul 2023 23:10:34 GMT

Hello,

Do you have ip forwarding enabled on your VLANs?

Klaus

Re: intra vlan routing issue. Can Ping but nothing else between vlans

Robert09 — Thu, 27 Jul 2023 11:32:12 GMT

You can double-check the VLAN configuration on the x440 switch to ensure that all three VLANs (default VLAN 1, VLAN 10 for VoIP phones, and the VLAN used for the VTI tunnel) are correctly configured with the appropriate IP addresses and subnet masks.

Re: intra vlan routing issue. Can Ping but nothing else between vlans

aaroncirilo — Thu, 27 Jul 2023 19:29:28 GMT

* X440G2-48p-10G4.1 # sho confi | in ipforw
enable ipforwarding vlan Default
enable ipforwarding vlan VLAN_0010
enable ipforwarding vlan VLAN_0025

i do. Thanks.

Re: intra vlan routing issue. Can Ping but nothing else between vlans

aaroncirilo — Fri, 28 Jul 2023 13:04:12 GMT

I think it probably is some configuration issue. I'll post my vlan config on the X440.

I am not tagging anything on the VTI tunnel. I'm just using default routes pointing to the inside address of the ASA that is the end point of the vti tunnel. I can reach the VoIP on our local switch from the other side of the VTI tunnel so i know they are reachable from a web browser.

* X440G2-48p-10G4.1 # sho confi | in ipforw
enable ipforwarding vlan Default
enable ipforwarding vlan VLAN_0010
enable ipforwarding vlan VLAN_0025

configure bootprelay add 192.168.1.10 vr VR-Default
enable bootprelay ipv4 vr VR-Default
configure bootprelay vlan Default add 192.168.1.10
configure bootprelay vlan VLAN_0010 add 192.168.1.10
configure bootprelay vlan VLAN_0025 add 192.168.1.10