0

I Need some guidance on getting my lab networking configured. Any support is appreciated.

My Lab consists of:

2 cisco switches: 2960s(access layer 2) and 3750X(ip routing/layer 3) 
Xenserver with PFsense 6 eth ports

4 Vlans on the cisco switch configured:

vlan1   svi 192.168.68.0/24 
vlan100 svi 192.168.1.0/24
vlan200 svi 192.168.2.0/24
vlan600 svi 192.168.6.0/30 (transit network L3 to Pfsense)

I am working on setting up Intervlan routing, but cant see the vlan interfaces in PFsense...

Would I need a trunkport with 801.q, a /30 vlan, or a routed non-switchport connected to PFsense LAN/OPT?

Im following this guide but not able see VLan interfaces or establish communication with the Firewall and switch.

https://greigmitchell.co.uk/2019/08/configuring-intervlan-routing-with-a-layer-3-switch-and-pfsense/

Thanks for your time.

  • How is the switch connected to the firewall? – Ron Trunk Jul 19 at 20:24
  • @RonTrunk I have tested two ways..One using a non switch port from the switch to the PFsense LAN port. Another way was using a switch access port with a /30 subnet for a transit network – BocajNET Jul 20 at 5:28
  • We need a simple diagram to know how you have connected your 4 devices. – Ron Trunk Jul 20 at 11:56
1
  1. In case if you are using Cisco3850 or any other layer3 switch

You can create svi in layer3 switch and connect firewall inside interfàce(LAN) to layer3 switch (no-switchport interface ) Configure firewall inside interface with ip address 192.168.68.2 and switch interface leave as it is For example Switch(config)# int f0/1 Switch(config)#no shutdown /*This interface ip will be vlan1 ip that is 192.168.68.1 this switch interface will connect to firewall LAN interface 192.168.68.2

Have a default route in layer3 switch

In layer3 switch

Ip route 0.0.0.0 0.0.0.0 192.168.68.2 (pointing towards firewall inside interface gateway

In firewall add route

ip route 192.168.68.0 255.255.255.0 192.168.68 .1

ip route 192.168.1.0. 255.255.255.0 192.168.68.1 Ip route 192.168.2.0 255.255.255.0 192.168.68.1 Ip route 192.168.6.0 255.255.255.248 192.168.68.1

Remaining configuration as usual in firewall configuration.....natting , default route in firewall pointing towards isp gateway for internet access and for reverse traffic for incoming traffic

In layer3 switch

Svi configurations , DHCP pool configuration if required , access-list configuration to restrict traffic among vlans , spanning -tree configuration..

. 2) In case if your are using C2960 layer2 switch

If your are using c2960 switch then this switch is layer2 switch you should create subinterface in firewall and connect switch 2960 and configure switch port as trunk connectiing firewall . ....

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.