UNSOLVED

DemosDoulou

updated

19 years ago

0

4843

July 26th, 2007 22:00

6024 Internet routing

I am trying to add internet connectivity to my network. 

I have a sonicwall firewall connected to a 3424 switch on vlan 1 with a ip of 172.25.0.250.  This switch is trunked to a 6024F. 

I have several vlans configured on the system.  I can ping the firewall from any vlan. 

 I can connect to the internet using a computer on vlan1 with the firewall as the default gateway. 

 I can not connect to the internet from any other vlan. I have a default route set on the 6024F to point to the firewall at 172.25.0.250 and the firewall has routes back to the network.  What am I doing wrong?

 

6024F

Router Configuration
-----------------------------

interface ethernet g1
description "Switch - C145"
exit
interface ethernet g2
description "Switch - SEC 8"
exit
interface ethernet g3
description "Switch - B121A"
exit
interface ethernet g4
description "Switch - TS Trailer"
exit
interface ethernet g5
description "Switch SEC 7"
exit
interface ethernet g6
description "Switch SEC D119"
exit
interface ethernet g7
description ASB
exit
interface ethernet g10
description "MED IDF1"
exit
interface ethernet g23
description "Switch - N714"
exit
interface ethernet g24
description "PCSO Data"
exit
interface ethernet g24
speed 10
exit
interface range ethernet g(1-10,17,22-23)
switchport mode trunk
exit
vlan database
vlan 10,20,30,80,90,500,1000,3000
exit
interface range ethernet g(1-10,22-23)
switchport trunk allowed vlan add 10
exit
interface range ethernet g(1-7,9,23)
switchport trunk allowed vlan add 20
exit
interface range ethernet g(2-10,22-23)
switchport trunk allowed vlan add 30
exit
interface range ethernet g(2,5)
switchport trunk allowed vlan add 80
exit
interface range ethernet g(4,7)
switchport trunk allowed vlan add 90
exit
interface ethernet g7
switchport trunk allowed vlan add 500
exit
interface range ethernet g(2-3,6)
switchport trunk allowed vlan add 1000
exit
interface ethernet g24
switchport access vlan 3000
exit
interface vlan 10
name DVR
exit
interface vlan 20
name UPS
exit
interface vlan 30
name "ACCESS CONTROL"
exit
interface vlan 80
name "KOYO PLC"
exit
interface vlan 90
name "TECHNICAL SERVICES STAFF"
exit
interface vlan 500
name "Outside Network"
exit
interface vlan 1000
name "DVR USERS"
exit
interface vlan 3000
name "PCSO Data Network"
exit
interface ethernet g24
no negotiation
exit
interface vlan 1
ip address 172.25.0.3 255.255.255.0
exit
interface vlan 10
ip address 172.25.1.2 255.255.255.0
exit
interface vlan 20
ip address 172.25.2.2 255.255.255.0
exit
interface vlan 30
ip address 172.25.3.2 255.255.255.0
exit
interface vlan 90
ip address 172.25.9.2 255.255.255.0
exit
interface vlan 500
ip address 172.25.200.2 255.255.255.0
exit
interface vlan 1000
ip address 192.168.10.2 255.255.255.0
exit
interface vlan 3000
ip address 136.174.93.252 255.255.255.0
exit
ip route 0.0.0.0 0.0.0.0 172.25.0.250
ip route 136.174.0.0 255.255.0.0 136.174.93.2
ip route 138.174.0.0 255.255.0.0 136.174.93.2
ip route 172.26.0.0 255.255.0.0 136.174.93.2
ip access-list "172.25.0.0 NETWORK"
permit any any 192.168.10.0 0.0.0.255
permit any any 172.25.0.0 0.0.255.255
permit any 172.25.0.199 0.0.0.0 136.174.228.0 0.0.0.255
exit
ip access-list "pcso"
permit any 136.174.0.0 0.0.255.255 172.25.1.0 0.0.0.255
permit any 136.174.130.25 0.0.0.0 136.174.93.252 0.0.0.0
permit any 138.174.0.0 0.0.255.255 172.25.1.0 0.0.0.255
permit any 172.26.0.0 0.0.255.255 172.25.1.0 0.0.0.255
exit
ip access-list "VLAN 1000"
permit any any 172.25.0.199 0.0.0.0
permit any any 172.25.1.0 0.0.0.255
exit
ip access-list ""
permit any 192.168.10.0 0.0.0.255 any
exit
ip access-list "5"
permit any any any
exit
ip access-list "internet"
permit any any 172.25.9.0 255.255.255.0
exit
interface vlan 3000
service-acl input "pcso"
exit
hostname "SEC CORE ROUTER"

clock timezone -5
clock summer-time recurring usa
clock source sntp
sntp client poll timer 3600
sntp unicast client enable
sntp unicast client poll
sntp server 136.174.130.25 poll
interface vlan 3000
sntp client enable
exit


OOB host Configuration
-----------------------------

Empty configuration

3424

console# show run
interface range ethernet g(1-2)
switchport mode trunk
exit
vlan database
vlan 10,20,30,90,500
exit
interface range ethernet g(1-2)
switchport trunk allowed vlan add 10
exit
interface range ethernet g(1-2)
switchport trunk allowed vlan add 20
exit
interface ethernet e24
switchport access vlan 30
exit
interface range ethernet g(1-2)
switchport trunk allowed vlan add 30
exit
interface range ethernet g(1-2)
switchport trunk allowed vlan add 90
exit
interface range ethernet g(1-2)
switchport trunk allowed vlan add 500
exit
interface vlan 10
name DVR
exit
interface vlan 20
name UPS
exit
interface vlan 500
name "outside network"
exit
interface vlan 1
ip address 172.25.0.22 255.255.255.0
exit
ip default-gateway 172.25.0.3

 

 

  • nlspears

    52 Posts

    115

    0

    Posted September 7th, 2007 19:00

    Does the firewall have routes back to each vlan network?