subnet on layer 3 switch

David Lin · ‎03-03-2008

The ISP provided one 28bit subnet. One IP address has been configured as the default gateway on router. One layer 3 switch connects to this router. I'm gonna separate this 28bit subnet to two 29bit subnets on layer 3 switch. one for the L3 routing port connects to uper level route. Another one for the VLAN. How can I configure it? Thanks.

Richard Burts · ‎03-03-2008

David

Perhaps I am not understanding well: you have already put 1 address on the router (which logically means that there is 1 subnet on the router) and it connects to your layer 3 switch (which will have the same subnet as the router). And if you want to put the other /29 on the VLAN then you can do so. But putting the /29 on the VLAN means that there will be a limitation to how many host addresses you have available in the VLAN. Is that what you want to do? If so it is pretty straightforward. If the ISP gave you 200.200.200.128/28 then you will use 200.200.200.128/29 and 200.200.200.136/29:

on layer 3 switch connection to the router

ip address 200.200.200.129 255.255.255.248

on the vlan interface

ip address 200.200.200.137 255.255.255.248

I might suggest a different approach. Do not put the ISP addresses on the layer 3 switch. do all the addressing on the switch in private address space (192.168.0.0 or whatever). The create a NAT pool on the router using the ISP addresses and do address translation on the router.

HTH

Rick

HTH

Rick

David Lin · ‎03-03-2008

Thanks, Rick.

The topology is: ISP-Router-Switch-Servers

I want some Servers stay in an VLAN on the Switch even it will waste some IP address.

I did the configuration as your example,

Router's E0/1: 200.200.200.129/28

Switch:

interface GigabitEthernet1/1

no switchport

ip address 200.200.200.130 255.255.255.248

interface Vlan200

ip address 200.200.200.137 255.255.255.248

ip route 0.0.0.0 0.0.0.0 200.200.200.129

I can ping anywhere from Switch. But from a Server in VLAN200, I can't ping either 200.200.200.129 or other public IP address. Vice versa, I can't ping the IP address in VLAN 200 from outside Internet.

When I disable the Layer 3 feature on the Switch and configured the server with 200.200.200.138/28 and gateway 200.200.200.128 which are functioning properly.

I am aware the problem should be the difference of subnet between the Router and Switch B. But I don't know how to figure it out. Any further advice would be great appreciated.

aijaz802 · ‎03-03-2008

Hi,

I think you mis configured the subnet mask on the router....make it /29 instead of /28.

Router's E0/1: 200.200.200.129/255.255.255.248

I hope this helps....

BR

*aijaz*

David Lin · ‎03-04-2008

Thanks.

But it doesn't help as I tried before. And I think the broadcast for 200.200.200.136/29 will not go to the Swtich like this way.