SG300 inter vlan routing

[blabadie1]

I am trying to route between 3 vlans.

I have configured the sub interfaces on my 1921 Router

0/1/0.10         10.28.144.2 255.255.255.0

0/1/0.20         172.32.50.2 255.255.255.0

0/1/0.50         198.168.167.2 255.255.255.0

On switch:

Vlan 10: 10.28.144.2 255.255.255.0

Vlan 20: 172.32.50.2 255.255.255.0

Vlan 50: 198.168.167.2 255.255.255.0

from the switch I can ping all the interfaces and vlans. But I can not ping from host A on vlan 10 to host B on vlan 20

Please help

[Aleksandra Dargiel]

Hi, What are tge default gateways in those two hosts? You should also check windows firewall settings. Regards, Aleksandra

[blabadie1]

Default gateway for host A is 10.28.144.1

Default gateway for host B is 172.32.50.1

I have windows Firewall turned off.

Here is my config:

config-file-header
ZEUSSW1
v1.3.5.58 / R750_NIK_1_35_647_358
CLI v1.0
set system mode router 

file SSD indicator encrypted
@
ssd-control-start
ssd config
ssd file passphrase control unrestricted
no ssd file integrity control
ssd-control-end cb0a3fdb1f3a1af4e4430033719968c0
!
vlan database
vlan 10,20,50
exit
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
ip dhcp server
ip dhcp pool network security
address low 172.32.50.11 high 172.32.50.62 255.255.255.192
lease infinite
domain-name FAKENAME.com
default-router 172.32.50.1
time-server 129.6.15.29
dns-server 8.8.8.8
exit
bonjour interface range vlan 1
hostname ZEUSSW1
username cisco password encrypted 6b283bb060c269432d08ac33b47a337c0a40035d privilege 15
ip ssh server
clock timezone EST -5
clock summer-time web recurring usa
clock source sntp
sntp unicast client enable
sntp unicast client poll
sntp server nist1-macon.macon.ga.us poll
sntp server nist1-ny2.ustiming.org poll               
sntp server nist1-pa.ustiming.org poll
sntp server time-b.nist.gov poll
ip domain name zesuejuice.com
ip name-server  8.8.8.8
ip domain timeout 2
ip domain retry 1
!
interface vlan 1
 no ip address dhcp
 shutdown
!
interface vlan 10
 name DATA
 ip address 10.28.144.2 255.255.255.0
!
interface vlan 20
 name SECURITY
 ip address 172.32.50.2 255.255.255.192
!
interface vlan 50
 name temp
 ip address 192.168.167.2 255.255.255.0               
!
interface gigabitethernet1
 switchport mode access
 switchport access vlan 20
!
interface gigabitethernet2
 switchport mode access
 switchport access vlan 20
!
interface gigabitethernet3
 switchport mode access
 switchport access vlan 20
!
interface gigabitethernet4
 switchport mode access
 switchport access vlan 20
!
interface gigabitethernet5
 switchport mode access
 switchport access vlan 20

[Aleksandra Dargiel]

Hi, Try to set default gateway to .2 as this is the swich interface. Also with routing on switch your 1921 router can be in one vlan, no need for 2 roueters on the same broadcast domain. Aleksandra