i have 3 vlans, vlan10, vlan20 and vlan30 in my single ARUBA 2930F switch ang connected to my FW... i need to know if i can make intervlan routing by using this single switch alone? like i plug my laptop in vlan10 and pc in vlan20, will they have routing between each other? is it possible without touching the FW/..thanks
It depends where is your gateway defined.
If your switch is acting as gateway for both subnets, it can route traffic between the,
If switch is configured as a Layer 2 device and firewall is your gateway for clients, routing has to be done on firewall.
2930 is a basic layer 3 switch and is capable to do inter VLAN routing.
with this setup can i have already the intervlan routing on this and get internet from the FW? i already created FW rules for all VLANs..
I just responded to this thread:
It looks the same. Let me know when this is different.
You cannot have both commands "ip routing" and "ip default-gateway x.x.x.x" at the same time configured at the switch.
If you want to make intervlan routing, all three interfaces vlan (10, 20 and 30) must be created at the switch as the default gateway of each network.
Also, maintain only the "ip routing" command with a default static route to your firewall "ip route 0.0.0.0 0.0.0.0 192.168.1.1"
IP default-gateway is only for the switch itself, so let's say management traffic. For all other traffic, you have IP routing. When no dynamic routing protocol configured this will be directly connected routes in combination with static routes. Hope this makes it clear.
I have the same similiar problem.
I put the default route 0.0.0.0 0.0.0.0 192.168.12.1 (Adress of my FW ) and pass the command ip routing
But i can't ping two machnines between too vlans (Vlan 10 and Vlan 12 )on the same Switch V
I put he config also , if somehome can help please :
; JL320A Configuration Editor; Created on release #WC.16.07.0002; Ver #14:01.4f.f8.1d.9b.3f.bf.bb.ef.7c.59.fc.6b.fb.9f.fc.ff.ff.37.ef:02
hostname "CR"module 1 type jl320aradius-server host 192.168.10.5 key "evLeG05wwG"radius-server timeout 4ntp server 192.168.10.1ip route 0.0.0.0 0.0.0.0 192.168.12.2ip routinginterface 1no power-over-ethernetexitinterface 2no power-over-ethernetexitinterface 3no power-over-ethernetexitinterface 4no power-over-ethernetexitinterface 5no power-over-ethernetexitinterface 6no power-over-ethernetexitinterface 7no power-over-ethernetexitinterface 8no power-over-ethernetexitinterface 9no power-over-ethernetexitinterface 10no power-over-ethernetexitinterface 11no power-over-ethernetexitinterface 12no power-over-ethernetexitsnmp-server community "public" unrestrictedaaa port-access authenticator activeoobmip address dhcp-bootpexitvlan 1name "DEFAULT"no untagged 1-24no ip addressipv6 enableipv6 address dhcp fullexitvlan 10name "VIDEO_CA_INT"untagged 13-22tagged 24ip address 192.168.10.126 255.255.255.128ip igmpexitvlan 11name "VARICONTROL"untagged 1-12ip address 192.168.11.247 255.255.255.0exitvlan 12name "COM_INV"untagged 23ip address 192.168.12.1 255.255.255.252exitvlan 2000name "unauth"ip address 192.168.200.247 255.255.255.0exitspanning-treeno tftp serverno autorunno dhcp config-file-updateno dhcp image-file-updateno dhcp tr69-acs-urlpassword manager
You mention that you're trying to ping between systems on VLANs 10 and 12; I'll note that VLAN 12 is assigned an IP address on a /30 subnet, so there could only be one other device on that subnet (which appears to be the switch default route).
Are your devices pointing to the switch IP address on their respective VLANs as the default gateway? (A device on VLAN 10 should point to 192.168.10.126, and one on VLAN 12 should point to 192.168.12.1)
At Aruba, we believe that the most dynamic customer experiences happen at the Edge. Our mission is to deliver innovative solutions that harness data at the Edge to drive powerful business outcomes.
© Copyright 2021 Hewlett Packard Enterprise Development LPAll Rights Reserved.