Wired Intelligent Edge

 View Only
last person joined: 17 hours ago 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Expand all | Collapse all

6200f Inter VLAN Routing

This thread has been viewed 20 times
  • 1.  6200f Inter VLAN Routing

    Posted 17 days ago

    I'm attempting to test InterVLAN Routing before I deploy our new 6200f and 6300f switches. However I'm unable to get my two test laptops to ping each other. I have the laptops connected to interfaces 1/1/1 and 1/1/3.

    The laptop in interface 1/1/1 is using IP 10.2.90.5/24 and default gateway 10.2.90.2
    The laptop in interface 1/1/3 is using IP 10.2.99.5/24 and default gateway 10.2.99.3
    The laptops are both able to ping each others default gateway but not each other. This is all configured on the same switch, what am I missing? When I setup the default gateway on the firewall/router the intervlan routing works.
    Here is the show ip routes:


  • 2.  RE: 6200f Inter VLAN Routing
    Best Answer

    Posted 17 days ago

    Do the laptops have firewalls enabled?  Normally when I see behavior like that it's because Windows Firewall is blocking pings




  • 3.  RE: 6200f Inter VLAN Routing

    Posted 17 days ago

    I'm able to send a receive pings from the laptops and also ping each other when the firewall is doing the routing. Will windows firewall block incoming ping requests based on the switch doing the inter vlan routing?




  • 4.  RE: 6200f Inter VLAN Routing

    Posted 17 days ago

    I assume "the firewall" is your current setup and the new switches are what you're moving to?  From the perspective of the laptops it shouldn't matter what is doing the routing as long as the routing is happening correctly.  Are your new switches connected to the existing firewall or are these completely different setups?

    Do you have Wireshark installed on the laptops?  Could you do a packet capture while trying the pings to capture both the ARP and ICMP messages?




  • 5.  RE: 6200f Inter VLAN Routing

    Posted 17 days ago

    So I removed one laptop from the domain so that I could turn off the windows firewall settings which are managed through Group Policy so that I could test your theory. I was then able to ping that laptop from the other but I could not ping the laptop which was still domain joined. Now I'm wondering what inbound rule within Windows Defender is blocking this as I will have to resolve this as I restructure our network. Thank you for your assistance David!




  • 6.  RE: 6200f Inter VLAN Routing

    Posted 17 days ago

    For anyone curious, the inbound rule that was blocking this is called "Virtual Machine Monitoring (Echo Request - ICMPv4-In)".