|
Title: EFW unreachable via L3 switch from different VLAN Post by: noob on Sunday 15 August 2010, 04:37:38 am I setup a fresh install of EFW 2.4
I would like to use EFW as my Firewall/Proxy/Gateway for my network. Here is my current setup and issue: EFW on VLAN1 Green IP: 192.168.0.1 L3 Switch VLAN 1 IP Address: 192.168.0.2 VLAN 10 IP Address: 192.168.10.1 I have a PC setup on both VLAN's PC1 on VLAN1 192.168.0.99 PC2 on VLAN10 192.168.10.10 I am UNABLE to ping the EFW from PC2 on VLAN10 I am ABLE to ping both EFW and PC2 from PC1, so I know the L3 switch is routing between the VLAN's. Routing Table of EFW: Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 br0 Routing Table of L3 Switch: C 192.168.10.0/24 is directly connected, Vlan10 C 192.168.0.0/24 is directly connected, Vlan1 S* 0.0.0.0/0 [1/0] via 192.168.0.1 Any help would be appreciated! Title: Re: EFW unreachable via L3 switch from different VLAN Post by: noob on Sunday 15 August 2010, 11:47:23 pm Simple solution!
Add IP addresses from each VLAN under the GREEN interface! New EFW routing table: Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.100.0 0.0.0.0 255.255.255.0 U 0 0 0 br0 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 br0 192.168.10.0 0.0.0.0 255.255.255.0 U 0 0 0 br0 |