I'm looking after to use a setup with that objectives in mind:
- Create a subinterface on interface GigabitEthernet0/0/1
- create a Vlan and assign it to that subinterface
- create a vrrf and assign it to that subinterface
- declare a dhcp server and attach it to that subinterface. 4)route to wan from vlan.
The idea is to have a layer 2 and 3 separate isolated virtual networks.
The sites a was reading where:
https://www.mustbegeek.com/configure-vrf-in-cisco-ios-router/
The Code I produced is:
enable
configure terminal
ip cef
ip dhcp database disk0:router-dhcp timeout 60
ip dhcp database disk0:router-dhcp write-delay 60
ip dhcp bootp ignore
end
enable
configure terminal
ip vrf VRF200
RD 68686:200
route-target export 68686:200
route-target import 68686:200
ip route vrf VRF200 0.0.0.0 0.0.0.0 192.168.20.1
ip dhcp excluded-address 192.168.20.1 192.168.20.110
ip dhcp excluded-address 192.168.20.210 192.168.20.255
ip dhcp pool VLAN200
network 192.168.20.0 255.255.255.0
default-router 192.168.20.1
class VLAN200
dns-server 8.26.56.26
dns-server 198.153.192.1
domain-name localdomain
lease infinite
vrf VRF200
excluded-address 192.168.20.1 192.168.20.110
excluded-address 192.168.20.210 192.168.20.255
end
interface GigabitEthernet0/0/1.200
description VLAN200
encapsulation dot1q 200
ip address 192.168.20.1 255.255.255.0
no shutdown
vrf forwarding VLAN200
duplex auto
speed auto
exit
Is just a prove of concept, I'm not experienced on cisco, and evidently this code is not working. I attach a interface to GigabitEthernet0/0/1 from my PC tagged with vlan200 and no ping into GigabitEthernet0/0/1.200 and no dhcp.
Any guide will be very welcome.
Yes, this card can send tagged frames. Used it a lot before. I have a router mikrotik and I can use the vlan200 without problems if I plug the wire into it.
1.Seems up:
#show interface GI0/0/1.200
GigabitEthernet0/0/1.200 is up, line protocol is up
Hardware is ISR4331-3x1GE, address is 00a3.d1ab.d5dc (bia 00a3.d1ab.d5dc)
Description: VLAN200
Internet address is 192.168.20.1/24
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 200.
ARP type: ARPA, ARP Timeout 04:00:00
Keepalive not supported
Last clearing of "show interface" counters never
I didn't setup a Spaning Tree so last commands do not aply.
After a few tests I was doing again step by step the config and testing. The vlan seems ok, and after setup ip by hand I can ping...
#ping 192.168.20.111
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.20.111, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
Them I setup the DHCP server and seems ok too:
#Show ip dhcp binding
Bindings from all pools not associated with VRF:
IP address Client-ID/ Lease expiration Type State Interface
Hardware address/
User name
192.168.20.111 0118.31bf.d040.62 Infinite Automatic Active GigabitEthernet0/0/1.200
So the problem of my setup has to be related to VRF.
Thank you for your help.