I'm trying desperately to add 2 VLANs to our existing LAN.
We have a Sonicwall at 192.168.111.1 and our existing LAN machines can connect to the internet with the following:
192.168.111.n 255.255.255.0 192.168.111.1
I've added 3 VLANs to the 6224 (10: 10.10.0.1, 11: 192.168.111.3 [for management], 20: 10.20.0.1)
1/g1 : VLAN 10 switchport mode access vlan 10
1/g2 : VLAN 20 switchport mode access vlan 20
1/g24 : VLAN 11 switchport mode trunk allowed vlan 10-11,20
I can ping between machines on the VLANs 10 and 20. I can not ping the firewall at 192.168.111.1 nor any machines on the existing LAN. I also can not ping any of the machines on VLAN 10/20 from our existing LAN. I can manage the 6224 via 192.168.111.3 from our existing LAN.
Here is the running config:
console#show running-config
!Current Configuration:
!System Description "PowerConnect 6224, 3.3.5.5, VxWorks 6.5"
!System Software Version 3.3.5.5
!Cut-through mode is configured as disabled
!
configure
vlan database
vlan 10-11,20
vlan routing 10 1
vlan routing 20 2
vlan routing 11 3
exit
stack
member 1 1
exit
switch 1 priority 1
ip address 1.1.1.1 255.255.255.0
ip routing
ip route 10.10.0.0 255.255.255.0 10.10.0.2
ip route 10.10.0.0 255.255.255.0 192.168.111.1
ip route 10.20.0.0 255.255.255.0 10.20.0.2
ip route 0.0.0.0 0.0.0.0 192.168.111.1
interface vlan 10
routing
ip address 10.10.0.1 255.255.255.0
bandwidth 10000
ip mtu 1500
exit
interface vlan 11
routing
ip address 192.168.111.3 255.255.255.0
bandwidth 10000
ip mtu 1500
exit
interface vlan 20
routing
ip address 10.20.0.1 255.255.255.0
exit
username "admin" password 12345 level 15 encrypted
!
interface ethernet 1/g1
spanning-tree portfast
mtu 9216
switchport access vlan 10
exit
!
interface ethernet 1/g2
spanning-tree portfast
mtu 9216
switchport access vlan 20
exit
!
interface ethernet 1/g3
spanning-tree portfast
mtu 9216
switchport access vlan 10
exit
!
interface ethernet 1/g4
spanning-tree portfast
mtu 9216
switchport access vlan 10
exit
!
interface ethernet 1/g5
spanning-tree portfast
mtu 9216
switchport access vlan 10
exit
!
interface ethernet 1/g6
spanning-tree portfast
mtu 9216
switchport access vlan 20
exit
!
interface ethernet 1/g7
spanning-tree portfast
mtu 9216
switchport access vlan 20
exit
!
interface ethernet 1/g8
spanning-tree portfast
mtu 9216
switchport access vlan 20
exit
!
interface ethernet 1/g9
spanning-tree portfast
mtu 9216
switchport access vlan 20
exit
!
interface ethernet 1/g10
spanning-tree portfast
mtu 9216
switchport access vlan 20
exit
!
interface ethernet 1/g11
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g12
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g13
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g14
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g15
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g16
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g17
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g18
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g19
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g20
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g21
spanning-tree portfast
mtu 9216
switchport mode general
switchport general pvid 11
switchport general allowed vlan add 10-11,20
exit
!
interface ethernet 1/g22
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g23
spanning-tree portfast
mtu 9216
switchport mode general
switchport general pvid 11
switchport general allowed vlan add 10-11,20
exit
!
interface ethernet 1/g24
spanning-tree portfast
mtu 9216
switchport mode trunk
switchport trunk allowed vlan add 10-11,20
exit
exit
I can't for the life of me figure out what I am doing wrong. I've tried adding all kinds of routes and changing up the switchport modes and trying configs from various forum posts.
I basically just want to get to where I can ping the firewall; I understand there will be some more jiggering that needs to be done on the firewall to get internet access, but one step at a time.
Does this config look close?