Hi Friend,
I see that you have not configured port channel between supervisor and 4232 L3 blade.
In your post you have updated that DHCP server is on vlan 3 and all the machines in other vlan pick an ip address from the DHCP server which will only work when intervlan routing works. Intervlan routing means routing between different vlans and as you have posted that the vlans are not able to communicate with each other.
So I am confuse here because you say that vlans are not able to talk to each other then how can they pick an ip address from DHCP server which is on vlan 3.
Anyways to make the communication between vlans intervlan routing should work and they way it works on 4k switch with 4232 l3 blade is little bit different.
Create a port channel and trunk between sup and 4232 l3 blade.
Just read this lines
The WS-X4232-L3 module has 32 Fast Ethernet ports and two Gigabit Ethernet ports.
These two Gigabit Ethernet ports correspond to interfaces gigabit 1 and gigabit 2 in the router configuration. These Gigabit Ethernet ports are routed ports.
Internally, the module has two Gigabit Ethernet interfaces (gigabit 3 and gigabit 4) that connect the router to the switch backplane. The switch backplane uses the first two ports in that slot to connect to the router module. When you insert the WS-X4232-L3 module in slot 3, Gigabit Ethernet interfaces 3 and 4 connect to the backplane ports 3/1 and 3/2. Ports 3/1 and 3/2 are Layer 2 (L2) ports with configuration on the switch Supervisor Engine.
Gigabit Ethernet interfaces 3 and 4 are L3 ports with configuration on the router module.
Now you have to configure something like this on supervisor on module 3
#module 3 : 34-port Router Switch Card
set vlan 5 3/1-2
set trunk 3/1 nonegotiate dot1q 1-1005
set trunk 3/2 nonegotiate dot1q 1-1005
set port channel 3/1-2 mode on
Configure something like this on router 4232-L3 blade
interface GigabitEthernet3
no ip address
no ip directed-broadcast
no negotiation auto
channel-group 1
interface GigabitEthernet4
no ip address
no ip directed-broadcast
no negotiation auto
channel-group 1
Now you can create subinterface for port channel for routing between vlans like this
interface Port-channel1.2
encapsulation dot1Q 2
ip address
ip helper-address
no ip redirects
no ip directed-broadcast
interface Port-channel1.5
encapsulation dot1Q 5 native
ip address
ip helper-address
no ip redirects
no ip directed-broadcast
This way intervlkan rotuing will start between vlan 2 and vlan 5 and same way you will create port channel subinterface for other vlans and get it route first.
Once routing start working between all the valns we can go with ACl to restrict the traffic.
Lets start and finish it.
Regards,
Ankur
