topic RE: How to connect firewall to Layer 3 to layer 2 switch in Network Architecture & Design

How to connect firewall to Layer 3 to layer 2 switch

Abdul_Farooq — Sun, 01 Apr 2018 17:20:00 GMT

in our environment we are using x460 layer3 switch its connected to firewall

firewall-->coreswitch is pinging

core--> layer 2 switch--> not pinging firewall ip, and vlan ip

firewall IP: X.X.10.200/24

X460 configuration

sh con
X460G2-24t-G4.86 # sh configuration

#
# Module devmgr configuration.
#
configure sys-recovery-level switch reset

#
# Module vlan configuration.
#
configure vlan default delete ports all
configure vr VR-Default delete ports 1-34
configure vr VR-Default add ports 1-34
configure vlan default delete ports 7
create vlan "one
configure vlan one tag 13
create vlan "two"
configure vlan "two" tag 14
configure ports 33 auto off speed 10000 duplex full
configure ports 34 auto off speed 10000 duplex full
configure vlan Default add ports 1-6, 8-34 untagged
onfigure vlan one add ports 16-24 tagged
configure vlan one add ports 7 untagged
configure vlan Default ipaddress X.X.10.201 255.255.255.0
configure vlan one ipaddress X.X.13.200 255.255.255.0
enable ipforwarding vlan one
configure vlan two ipaddress X.X.14.200 255.255.255.0
enable ipforwarding vlan two

#
# Module fdb configuration.
#

#
# Module rtmgr configuration.
#
configure iproute add X.X..13.0 255.255.255.0 X.X.10.200
configure iproute add default X.X.10.200

#
# Module mcmgr configuration.
#

#
# Module aaa configuration.
#

#
# Module acl configuration.
#

layer 2 210 switch

configuration

network protocol none

network parms X.X.10.206 X.X.X.X.0 X.X.10.201

vlan database

vlan 13-14

vlan name 13 "one"

vlan name 14 "two"

vlan routing 13 1

vlan routing 14 2

vlan routing 1 3

exit

RE: How to connect firewall to Layer 3 to layer 2 switch

Abdul_Farooq — Sun, 01 Apr 2018 17:24:00 GMT

interface 0/1

switchport access vlan 13

exit

interface 0/2

switchport access vlan 13

exit

--More-- or (q)uit

interface 0/3

switchport access vlan 13

exit

interface 0/4

switchport access vlan 13

exit

interface 0/5

switchport access vlan 13

exit

interface 0/10

switchport mode trunk

exit

RE: How to connect firewall to Layer 3 to layer 2 switch

Stephane_Grosj1 — Sun, 01 Apr 2018 19:43:00 GMT

Hi, I don't see the enable ipf vlan default.

RE: How to connect firewall to Layer 3 to layer 2 switch

Choukri_BELHADJ — Mon, 02 Apr 2018 16:09:00 GMT

Hello , 2 possibilities:
1 : IPF not enable on vlan default ( but the core replying from firewall .... strange )
2: Very basic , but 4 eyes better than 2.... check if the ping is not blocked on the Firewall interface , it's usually the case in most of time )

RE: How to connect firewall to Layer 3 to layer 2 switch

Abdul_Farooq — Mon, 02 Apr 2018 16:16:00 GMT

yes, and firewall lan port is connected to 24th port . 24th port is tagged port.

it is correct are can i change that port to untagged port