Hello to all of you experts.
I'm sorry if this is a dumb question (I usually don't ask those, but I'm human), but I haven't a clue of what's wrong in this environment.
I wish to permit all my VLANs to just comunicate with VLAN 1 and the internet.
All internal traffic is inside 192.168.0.0/16 range like:
. VLAN 1: 192.168.1.0/24 (ip addr 192.168.1.1)
. VLAN 2: 192.168.2.0/24 (ip addr 192.168.2.1)
. VLAN 3: 192.168.3.0/24 (ip addr 192.168.3.1)
This is the only routing-activated layer3 switch on campus
and is the default gateway for everybody
So, I created the "acl_default" and applied it at the inbound of every VLAN (except VLAN 1, obviously)
ip access-list extended "acl_default"
10 permit ip 192.168.0.0 0.0.255.255 192.168.1.0 0.0.0.255
900 deny ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255
950 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
exit
It works...but, every morning, all the users in the VLANs (not VLAN 1) cannot communicate with some servers on VLAN 1.
If I traceroute to a server from VLAN 120 (192.168.120.0/24), I see a loop:
traceroute to 192.168.1.69 ,
1 hop min, 30 hops max, 5 sec. timeout, 3 probes
1 192.168.120.1 1 ms 1 ms 1 ms
2 192.168.120.1 0 ms 1 ms *
3 192.168.120.1 1 ms 1 ms 1 ms
4 192.168.120.1 1 ms 1 ms *
5 192.168.120.1 1 ms 1 ms 1 ms
6 192.168.120.1 1 ms 1 ms *
7 192.168.120.1 1 ms 1 ms 1 ms
8 192.168.120.1 1 ms 1 ms *
9 192.168.120.1 0 ms 2 ms 0 ms
10 192.168.120.1 1 ms 1 ms *
11 192.168.120.1 1 ms 1 ms 1 ms
But...If I go to server_69 and ping back the 120_gateway, everything starts to work!!
That's why only certain servers can't be reached in the morning: The ones that don't communicate very often with the other-than-vlan1 subnets.
Chassis info: HP Procurve 5400Rzl2 Software: KB.15.17.0003
What am I missing?
Thank you all in advance (even if just for reading this long post)
Rui