topic Re: PCs under VLAN can't reach internet but SW can in ICX Switches

PCs under VLAN can't reach internet but SW can

fernando_fl_rez — Tue, 28 Aug 2018 01:44:31 GMT

I'm in a phase where all vlans work correctly and I'm trying to use the uplink ports to reach my router.

Here are the relevant parts of my current config:

lag ge static id
ports ethe 1/2/1 to 1/2/2

vlan 30 name users
untagged ethe 1/1/1 to 1/1/12
router-interface ve 30

vlan 200 name phones
tagged ethe 1/1/1 to 1/1/12
router-interface ve 200

ip route 0.0.0.0/0 192.168.1.1

interface lag 1
ip address 192.168.1.10 255.255.255.0

interface ve 30
ip address 192.168.3.1 255.255.255.0

interface ve 200
ip address 10.0.200.1 255.255.255.0

From the switch i'm able to ping the gateway and also internet but not from the pcs or phones.

Any ideas? Also, how can I debug routing as it happens?

Thank you!

Re: PCs under VLAN can't reach internet but SW can

worawit_waiprib — Tue, 28 Aug 2018 02:07:41 GMT

Hi Fernando,

I have some question.
1. Can PCs ping its gateway 192.168.3.1?
2. Can PCs ping router IP 192.168.1.1?

If 1 = Yes and 2 = No, please check your routing on the router.
Thank you
Worawit

Re: PCs under VLAN can't reach internet but SW can

fernando_fl_rez — Tue, 28 Aug 2018 13:17:59 GMT

Thank you for your response. Router has a 192.168.1.1/24 IP.

It's firewall allow any to any. What exactly should I check?

Thanks!

Re: PCs under VLAN can't reach internet but SW can

fernando_fl_rez — Tue, 28 Aug 2018 15:09:42 GMT

Solved!

Created routes back to the switch from the gw and everything worked perfectly.

Thank you!