10-19-2021 12:26 PM
11-15-2021 11:12 AM
10-26-2021 10:01 AM
Of course I'm not aware of your existing setup, but to turn your EXOS switch into a router, you would do something similar to the following:
0) Assumptions I'm making:
(There are multiple ways of doing this)
-Each Site has its own subnet/VLAN tagged to the x620
-The x620 would be the default gateway for all networks
-The x620 would have a point-to-point VLAN between it and the firewall
-The x620 has a default route to the firewall (via the point to point VLAN)
-The firewall has return routes for each Site/Subnet pointing to the x620 (via the point to point VLAN)
1) Create and tag relevant VLANs to the x620. Also create and add the point to point VLAN towards your firewall.
create vlan <VLAN> tag <#>
configure vlan <VLAN> [add | delete] port <#> [tagged | untagged]
2) Set IPs on each VLAN on the x620. These IPs will likely be the default gateway of your clients depending on your setup
configure vlan <VLAN> ipaddress <IP/MASK>
3) Configure a default route that points to your firewall
confiure iproute add default <FW IP>
4) Enable routing for each VLAN that you want the switch to route, including the P2P vlan. When the switch is the default gateway for your client, it will receive client traffic and forward to the firewall based on the default route previously added.
enable ipforwarding vlan <VLAN>
5) On your firewall, you would need to create/configure the P2P vlan to the x620 and also add a 'return' route to each of the local subnets that points to the x620 on the P2P vlan.
Essentially, 'enable ipforwarding' allows the switch to route traffic between VLANs when the switch is used as a gateway. Hopefully this helps!