Most likely a firewall problem. You would want to check the firewall policies to ensure<br><br>1. It allows ICMP from your host<br>2. Intra zone traffic is allowed if All interfaces are in the same security zone. Some firewalls disable this by default.<br>
3. There are correct policies in place for inter-zone traffic is all interfaces are in seperate security zones.<br><br>cheers<br><br><div class="gmail_quote">On Wed, Oct 19, 2011 at 8:47 AM, Huettner, Christof <span dir="ltr"><<a href="mailto:Christof.Huettner@megatech-communication.de">Christof.Huettner@megatech-communication.de</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div link="blue" vlink="purple" lang="DE"><div><p class="MsoNormal">Hello,<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">i have a Blackdiamond with 8 VLANs configured… VLAN1,10,20,30,40,50,60,70<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">One Port ist configured with TagAll to my Firewall (Sonicwall) In the SonicWall there are 8 VLAN Subinterfaces for each VLAN.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Standard Gateway on the Clients are the Switch.<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Ive configured a default route in each VLAN to the Firewall like:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Configure iproute add default 192.168.100.251 (Firewall IP in VLAN 1)<u></u><u></u></p><p class="MsoNormal">Configure iproute add default 192.168.98.251 (Firewall IP in VLAN 10)<u></u><u></u></p>
<p class="MsoNormal">Configure iproute add default 192.168.96.251 (Firewall IP in VLAN 20)<u></u><u></u></p><p class="MsoNormal">... so for each vlan..<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">
I can ping in each vlan the Firewall`s ip, but i cant ping the firewalls other vlan ip, for example, im in VLAN 1 (Switch IP: 192.168.100.250)<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">
I have an IP: 192.168.100.10<u></u><u></u></p><p class="MsoNormal">Subnet: 255.255.255.0<u></u><u></u></p><p class="MsoNormal">Default-Gateway: 192.168.100.250<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">
<u></u> <u></u></p><p class="MsoNormal">I can ping all other things in the network (there is ip forwading enabled at all)<u></u><u></u></p><p class="MsoNormal">I can ping the SonicWall in my Network 192.168.100.251<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">But i cant ping the sonicwalls ip in the other networks like 192.168.98.251 or 192.168.96.251<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">
Should i add a own vlan for the internet access? Dont know, i come more from cisco, and there is a default route like <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> to Firewall<u></u><u></u></p><p class="MsoNormal">
<u></u> <u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:gray">Hüttner, Christof | Network / Application Specialist</span></b><span style="color:navy"><br>
</span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:#3366ff">MEG</span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:fuchsia">A</span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:#3366ff">TECH</span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:navy"> </span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:gray">communication GmbH | Englfinger Strasse 56 | DE – 94508 Schoellnach / Germany</span><span style="color:navy"><br>
</span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:gray">Phone : <a href="tel:%2B49%20%280%299903%209324%C2%A0220" value="+4999039324220" target="_blank">+49 (0)9903 9324 220</a> | Fax : <a href="tel:%2B49%20%280%299903%209324%20200" value="+4999039324200" target="_blank">+49 (0)9903 9324 200</a> | </span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:gray" lang="EN-GB"><a href="mailto:jens.schneider@megatech-communication.de" title="mailto:robert.reiter@megatech-communication.de
mailto:nicole.spiess@megatech-communication.de
mailto:rigobert.kuehn@megatech-communication.de" target="_blank"><span style="color:blue" lang="DE">christof.huettner@megatech-communication.de</span></a></span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:gray"><br>
<br></span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:gray"><u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:gray">==============================</span><span style="font-size:9.0pt"><br>
</span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:gray">Sitz der Gesellschaft: Schoellnach</span><span style="font-size:9.0pt"><br></span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:gray">Handelsregister: Amtsgericht Deggendorf, HRB 2315</span><span style="font-size:9.0pt"><br>
</span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:gray">Geschäftsführung: Rigobert Kuehn</span><span style="font-size:9.0pt;font-family:"Times New Roman","serif""><u></u><u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:gray">Wichtiger Hinweis:</span></b><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:gray"> Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen.<br>
Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben sollten,<br>weisen wir Sie darauf hin, dass das unerlaubte Kopieren sowie die unbefugte Weiterleitung dieser E-Mail nicht gestattet ist.<br>
Bitte informieren Sie sofort den Absender und löschen Sie diese E-Mail. </span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:gray" lang="EN-GB">Vielen Dank. <br><b>Important Note:</b> This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information.<br>
If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. <br>Please inform us immediately and destroy the original transmittal. Thank you for your cooperation.<br>
==============================</span><u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p></div></div><br>_______________________________________________<br>
extreme-nsp mailing list<br>
<a href="mailto:extreme-nsp@puck.nether.net">extreme-nsp@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/extreme-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/extreme-nsp</a><br></blockquote></div><br>