The switch is a Layer 3 switch, it's set up as a stack of 4 with the top 1 totally dedicated to lab machines. The others are data for the rest of the network. So essentially the lab machines are segmented from the other switches but still need to access the rest of the network for apps, mail, etc. Currently the routes on the switch are as follows:
Default route - IP of firewall 192.168.1.1 192.168.1.0/24 - 192.168.1.30 (IP of data VLAN) 192.168.2.0/24 - 192.168.2.10 (IP of lab VLAN) I can ping both VLAN addresses from the firewall and both from a static IP on the .2 network, but I still can't ping the DHCP server at 192.168.1.2. One person suggested I make the DHCP server DG the IP of the data VLAN, but wouldn't that mess up the rest of the network? Jay Jay Dale Senior Systems Administrator P:281-574-2414 From: Crawford, Scott [mailto:[email protected]] Sent: Friday, January 27, 2012 7:54 PM To: NT System Admin Issues Subject: RE: Setup separate lab VLAN What is this switch connected to? You'll need a route on the switch it's connected to that points to this switch. If the DHCP server is on the other switch, you'll need the VLAN defined there as well. Are the 460's a layer 3 switch? From: Jay Dale [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Friday, January 27, 2012 3:13 PM To: NT System Admin Issues Subject: RE: Setup separate lab VLAN When I put a static address of 192.168.2.100 on one of the lab PC's, I can ping the IP address of the lab VLAN which is set to 192.168.2.10 and I can ping the IP of the default data vlan which is 192.168.1.30. However I can't ping the DHCP server address which is 192.168.1.2. Am I missing a route somewhere? Jay Dale Senior Systems Administrator P:281-574-2414 From: Glen Johnson [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Friday, January 27, 2012 2:27 PM To: NT System Admin Issues Subject: RE: Setup separate lab VLAN What isn't working. Do the machines on the lab vlan not get an IP address? What device is routing from lab vlan to the vlan where dhcp server is? From: Jay Dale [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Friday, January 27, 2012 2:36 PM To: NT System Admin Issues Subject: Setup separate lab VLAN Hey all, I'm truly stuck, hopefully I can find some assistance here. I have a client which is a school that is running out of IP addresses. Their subnet is 192.168.1.x/24 I would like to segment off their lab, which is around 50 PC's right there (in addition to all the youtube/facebook users) on it's own VLAN using subnet 192.168.2.x/24 I'm currently using 4 Extreme x460's - 1 of which is dedicated only to lab machines. I've set up another DHCP scope for the 192.168.2.x network. I created a VLAN on the switch and did the following commands: Create vlan Lab Configure vlan lab ipaddress 192.168.2.10/24 Configure vlan lab add ports 1:1-1:48 Enable bootprelay vlan lab Configure bootprelay add <ip of DHCP server> Configure bootprelay dhcp-agent information option Configure bootprelay dhcp-agent information check Enable ipforwarding vlan Lab I activated the scope, but it doesn't work. Is there a manual scope option that needs to be entered? Thanks, Jay Jay Dale Senior Systems Administrator Unetek, Inc. Phone: 281.574.2414 Email:[email protected]<mailto:[email protected]> Confidentiality Notice: This e-mail, including any attached files, may contain confidential and/or privileged information for the sole use of the intended recipient. If you are not the intended recipient, you are hereby notified that any review, dissemination or copying of this e-mail and attachments, if any, or the information contained herein, is strictly prohibited. If you are not the intended recipient (or authorized to receive information for the intended recipient), please contact the sender by reply e-mail and delete all copies of this message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
