ā07-25-2023 01:22 PM
I have 3 vlans on a x440. The default vlan 1 can ping vlan 10 VoIP phones. But I can't open a web interface from vlan 1. Across the vti tunnel I can. I can do a trace route and it hits the local inside gateway then sends it back to the switch then to the phone. It's almost like TCP isn't working between vlans.
I can include whatever config is necessary. I've attached a diagram.
ā07-27-2023 04:32 AM
You can double-check the VLAN configuration on the x440 switch to ensure that all three VLANs (default VLAN 1, VLAN 10 for VoIP phones, and the VLAN used for the VTI tunnel) are correctly configured with the appropriate IP addresses and subnet masks.
ā07-28-2023 06:04 AM
I think it probably is some configuration issue. I'll post my vlan config on the X440.
I am not tagging anything on the VTI tunnel. I'm just using default routes pointing to the inside address of the ASA that is the end point of the vti tunnel. I can reach the VoIP on our local switch from the other side of the VTI tunnel so i know they are reachable from a web browser.
* X440G2-48p-10G4.1 # sho confi | in ipforw
enable ipforwarding vlan Default
enable ipforwarding vlan VLAN_0010
enable ipforwarding vlan VLAN_0025
configure bootprelay add 192.168.1.10 vr VR-Default
enable bootprelay ipv4 vr VR-Default
configure bootprelay vlan Default add 192.168.1.10
configure bootprelay vlan VLAN_0010 add 192.168.1.10
configure bootprelay vlan VLAN_0025 add 192.168.1.10
ā07-26-2023 04:10 PM
Hello,
Do you have ip forwarding enabled on your VLANs?
Klaus
ā07-27-2023 12:29 PM
* X440G2-48p-10G4.1 # sho confi | in ipforw
enable ipforwarding vlan Default
enable ipforwarding vlan VLAN_0010
enable ipforwarding vlan VLAN_0025
i do. Thanks.