Comments on: How to configure a Cisco Layer 3 switch-InterVLAN Routing

By: Blog Admin

Blog Admin — Mon, 31 Oct 2011 19:23:09 +0000

arun,

Yes ofcourse you can do intervlan communication with a L3 switch. This is what is supposed to do actually.

By: arun

arun — Fri, 28 Oct 2011 08:26:46 +0000

sir i am trying to create inter vlan communication for that ACLs must be there.
and i have already removed windows firewall.

sir,
is intervlan communication possible with L3 switch without using a router.

By: Blog Admin

Blog Admin — Mon, 24 Oct 2011 18:33:10 +0000

Arun:

1) all vlans must be created on all switches as Layer2 vlans
2) remove all ACLs and try again.
3) remove windows firewall (if any) from PC

By: arun

arun — Mon, 24 Oct 2011 07:50:22 +0000

sir i have question.
i have created 4 vlans on cisco catalyst L3 3550 switch and i have configured thier default gateways on other cisco L3 3550.
i have enabled ip roting over the second switch and applied ACL on default gateways.
Is this scenario is possible without a router????

when i am trying to ping other pc in second vlan it is not working but i m able to ping default gateway of ather vlas..

please provide me some solution…

By: Blog Admin

Blog Admin — Mon, 17 Oct 2011 07:13:53 +0000

1- Do a remote access VPN or create a static NAT mapping of vlan10 host to an outside address
2- HSRP is used when having two layer3 devices as gateways. In our scenario above (only one layer3 device) there is no point to do HSRP

By: mian

mian — Sun, 16 Oct 2011 18:06:20 +0000

Thanks for the article, but i have some questions.

1- If i want to connect host remotely from out side network on vlan 10 , then what is suggested configuration?
2- if i want to enable hsrp for vlan 10 , then which ip address next of stanby ip will be use?

Thanks

By: Blog Admin

Blog Admin — Wed, 28 Sep 2011 15:43:46 +0000

You need to create a routed port on the switch connected to inside of router. Remove vlan1 and put an IP address on the interface connected to inside of router (e.g make interface GigabitEthernet1/0/1 a “no switchport” port and then assign an IP address of 192.168.2.2).

By: waple02

waple02 — Wed, 28 Sep 2011 11:41:57 +0000

———————————-
—- ——————————– ——— ——————————-
1 default active Gi1/0/1, Gi1/0/4, Gi1/0/5
Gi1/0/6, Gi1/0/7, Gi1/0/8
Gi1/0/9, Gi1/0/10, Gi1/0/11
Gi1/0/12, Gi1/0/13, Gi1/0/14
Gi1/0/15, Gi1/0/16, Gi1/0/17
Gi1/0/18, Gi1/0/19, Gi1/0/20
Gi1/0/21, Gi1/0/22, Gi1/0/23
Gi1/0/24, Gi1/0/25, Gi1/0/26
Gi1/0/27, Gi1/0/28
2 test1 active Gi1/0/2
3 test2 active Gi1/0/3
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
—- —– ———- —– —— —— ——– —- ——– —— ——
1 enet 100001 1500 – – – – – 0 0
2 enet 100002 1500 – – – – – 0 0

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
—- —– ———- —– —— —— ——– —- ——– —— ——
3 enet 100003 1500 – – – – – 0 0
1002 fddi 101002 1500 – – – – – 0 0
1003 tr 101003 1500 – – – – – 0 0
1004 fdnet 101004 1500 – – – ieee – 0 0
1005 trnet 101005 1500 – – – ibm – 0 0

Remote SPAN VLANs
——————————————————————————

Primary Secondary Type Ports
——- ——— —————– ——————————————

By: waple02

waple02 — Wed, 28 Sep 2011 11:41:30 +0000

!
hostname Switch
!
enable password cisco
!
no aaa new-model
switch 1 provision ws-c3750g-24ts-1u
system mtu routing 1500
ip subnet-zero
ip routing
ip name-server 213.42.20.20
ip dhcp excluded-address 20.20.20.1
ip dhcp excluded-address 30.30.30.1
!
–More–
01:01:36: %SYS-5-CONFIG_I: Configured from console
ip dhcp pool pool1
network 20.20.20.0 255.255.255.0
dns-server 213.42.20.20
default-router 20.20.20.1
!

network 30.30.30.0 255.255.255.0
default-router 30.30.30.1
dns-server 213.42.20.20
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface GigabitEthernet1/0/1
!
interface GigabitEthernet1/0/2
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/3
switchport access vlan 3
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/4
!
interface GigabitEthernet1/0/5
!
interface GigabitEthernet1/0/6
!
interface GigabitEthernet1/0/7
!
interface GigabitEthernet1/0/8
!
interface GigabitEthernet1/0/9
!
interface GigabitEthernet1/0/10
!
interface GigabitEthernet1/0/11
!
interface GigabitEthernet1/0/12
!
interface GigabitEthernet1/0/13
!
interface GigabitEthernet1/0/14
!
interface GigabitEthernet1/0/15
!
interface GigabitEthernet1/0/16
!
interface GigabitEthernet1/0/17
!
interface GigabitEthernet1/0/18
!
interface GigabitEthernet1/0/19
!
interface GigabitEthernet1/0/20
!
interface GigabitEthernet1/0/21
!
interface GigabitEthernet1/0/22
!
interface GigabitEthernet1/0/23
!
interface GigabitEthernet1/0/24
!
interface GigabitEthernet1/0/25
!
interface GigabitEthernet1/0/26
!
interface GigabitEthernet1/0/27
!
interface GigabitEthernet1/0/28
!
interface Vlan1
ip address 192.168.2.2 255.255.255.0
!
interface Vlan2
ip address 20.20.20.1 255.255.255.0
!
interface Vlan3
ip address 30.30.30.1 255.255.255.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.2.1
ip http server
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
logging synchronous
login
line vty 5 15
login
!
end

By: waple02

waple02 — Wed, 28 Sep 2011 11:40:27 +0000

Hi All,
I’ve set up laboratory for vlan, What i want to achieve share the internet connection to the following vlans, vlan1,vlan2,vlan3.The vlan 1 can able to access internet connection but the other vlans vlan2,vlan3 can’t access the internet. Here’s my configuration

CISCO 2800 Series

interface FastEthernet0/0
ip address 192.168.1.40 255.255.255.0
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
no fair-queue
clock rate 2000000
!
interface Serial0/0/1
no ip address
shutdown
clock rate 2000000
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.1.99
no ip http server
no ip http secure-server
!
!
ip nat inside source list internet interface FastEthernet0/0 overload
!
ip access-list extended internet
permit ip 192.168.2.0 0.0.0.255 any
permit ip 20.20.20.0 0.0.0.255 any
permit ip 30.30.30.0 0.0.0.255 any
!
!
!
!
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
password cisco
logging synchronous
login
!
scheduler allocate 20000 1000
end