SG300 Vlan

Guys,

I have created Vlans on the sg300 (I know its not a full Cisco but budget etc) Switch is in L3 Routing mode.

I even followed the guide on this site too.

Vlan1 - Default
Vlan10 - 172.16.10.0/24
Netgear wifi router 172.16.0.1 (gateway to internet)

I have a group of devices I want in Vlan10 (I setup DHCP on the 172.16.10.0/24 and the devices acquired their IP from the VLAN).

I can ping devices from the switch no problem.
Devices cannot ping each other 172.16.10.5 -> 172.16.0.25 no reply
Devices cannot ping internet 172.16.10.5 -> 8.8.8.8 no reply

I have setup routes
0.0.0.0 next hop 172.16.0.1
172.16.0.0
172.16.10.0

Do I need to create a route on my Netgear wifi router? is the netgear wifi router causing me the issues or have I configured the SG300 wrong. I am at work at the moment and cannot grab an output from the CLI but I can later.

Thanks in advance

Darren

Hi Darren,

There’s a couple of things you can try/check to figure this out.

  1. Do your hosts have the correct default gateway? This has to be the IP address of the SG300 for each VLAN.

  2. Can you ping the default gateway address of another VLAN from your host? If so, it proves that the host has the correct default gateway and that your SG300 does inter-VLAN routing.

  3. If you use Windows, disable the firewall for a moment. By default it blocks ICMP (ping) traffic.

  4. Your router will require static routes for the subnets of each VLAN. Right now it only knows about it’s local subnet (172.16.0.0/24) and it has a default route towards the Internet. It doesn’t have any idea where 172.16.10.0/24 is for example. You can add a static route for 172.16.0.0/16 or something and point it to the SG300.

  5. See if you can ping 172.16.0.1 from a host. That proves that the SG300 knows how to reach the router and that the router knows how to get back to the host.

  6. If everything is working at this moment except Internet traffic then you’ll have to check your NAT settings on the router. Some simple routers only do NAT for the subnet on their LAN interface.

Hope this helps!

Rene