RE: Quick Cisco test network question..
Ok I was on vacation Trying to finish this up... I used option 1 with a vlan interface. Besides the routing vlan interface I will have 3 others that need to get trunked across the fiber. Vlan 2, 3, 4... for each vlan I assigned it a ip address of 192.168.2.254 255.255.255.0 for vlan 2 etc. Is the default gateway for this switch 1.1.1.1 255.255.255.0 then? I think it is, but wanted to make sure. Thanks... From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:52 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Not a dumb question at all. Yes you *would* need something in the interface to make the port live and establish it as a connected interface in the switch's routing table. L2 ports configured as L3 Routed interfaces are nice when you only have 1 subnet and aren't trunking any VLANs - in other words, you'd have to setup separate ports for each subnet you have. Essentially, imagine this scenario as having an actual router (not a switch) with 24 independent interfaces that are *routed* (NOT switched) at L3. This is not to say, however, that you can't have both routed interfaces and SVIs (VLAN Interfaces) running parallel - with multiple hosts (in multiple VLANs) communicating with the SVI through L2 ports. In your situation - I'd go w/ the VLAN interfaces as you're probably trunking more than 1 VLAN across that fiber and will want multiple L2 ports on the 3550 and 2950 to have connectivity to the gateway address. I probably shouldn't have mentioned option 1 as it doesn't necessarily fit your scenario. HTH, Aaron Rohyans, CCIE #21945 (How's this look Z? :-)) IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:04 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Sorry to sound dumb... if I use option #2 then nothing gets plugged into the actual f0/1 port right? It is just a routable interface? From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:01 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Two options - VLAN interfaces, or turning your Layer2 ports into Routed interfaces: 1. Switch(config)# ip routing Switch(config)# int vlan 100 Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 2. Switch(config)# ip routing Switch(config)# int fa0/1 Switch(config-if)# no switchport Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 HTH, Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 2:55 PM To: NT System Admin Issues Subject: Quick Cisco test network question.. We are setting up a test network between 2 buildings. We have 2 strands of fiber that go from the one building into our data center. It is going to be a closed network with no internet access , so it will be isolated from our production environment. I have a cisco 3550 that will be the core and on the other end we have a cisco 2950. it will be a windows 2008 test environment too, but we have to get the infrastructure in place first. We are going to set routing up on the 3550 (4 different vlans) and will have some servers and some clients on this switch. There will be no gateway out to the internet, totally closed network. I know you have to turn on IP Routing and set a default route, but where do I set up the routable network interface? As a vlan? For instance: Switch(config)# int vlan 100 Description routable network Ip address 192.168.1.1 255.255.255.0 Then route ip 0.0.0.0 0.0.0.0.0 192.168.1.1 Is this right? The switch doesn't seem to like it. Thanks..i have the advanced ip services image on the 3550. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Quick Cisco test network question..
Depends - For the switch itself, you'll want the default gateway to be another device on your network that is accessible through the switch's VLAN interfaces (subnets), or through the native VLAN interface. This device should also provide connectivity to the rest of your network. So, as an example... pretend 192.168.1.254 is the gateway router for all of your network to get out to the rest of the network and it connects to the 3550 off of Vlan1. Your setup would be as follows: Interface Vlan1 ip address 192.168.1.1 255.255.255.0 interface Vlan2 ip address 192.168.2.1 255.255.255.0 ip route 0.0.0.0 0.0.0.0 192.168.1.254 -or- ip route 0.0.0.0 0.0.0.0 Vlan1 HTH, Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 9:07 AM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Ok I was on vacation Trying to finish this up... I used option 1 with a vlan interface. Besides the routing vlan interface I will have 3 others that need to get trunked across the fiber. Vlan 2, 3, 4... for each vlan I assigned it a ip address of 192.168.2.254 255.255.255.0 for vlan 2 etc. Is the default gateway for this switch 1.1.1.1 255.255.255.0 then? I think it is, but wanted to make sure. Thanks... From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:52 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Not a dumb question at all. Yes you *would* need something in the interface to make the port live and establish it as a connected interface in the switch's routing table. L2 ports configured as L3 Routed interfaces are nice when you only have 1 subnet and aren't trunking any VLANs - in other words, you'd have to setup separate ports for each subnet you have. Essentially, imagine this scenario as having an actual router (not a switch) with 24 independent interfaces that are *routed* (NOT switched) at L3. This is not to say, however, that you can't have both routed interfaces and SVIs (VLAN Interfaces) running parallel - with multiple hosts (in multiple VLANs) communicating with the SVI through L2 ports. In your situation - I'd go w/ the VLAN interfaces as you're probably trunking more than 1 VLAN across that fiber and will want multiple L2 ports on the 3550 and 2950 to have connectivity to the gateway address. I probably shouldn't have mentioned option 1 as it doesn't necessarily fit your scenario. HTH, Aaron Rohyans, CCIE #21945 (How's this look Z? :-)) IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:04 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Sorry to sound dumb... if I use option #2 then nothing gets plugged into the actual f0/1 port right? It is just a routable interface? From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:01 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Two options - VLAN interfaces, or turning your Layer2 ports into Routed interfaces: 1. Switch(config)# ip routing Switch(config)# int vlan 100 Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 2. Switch(config)# ip routing Switch(config)# int fa0/1 Switch(config-if)# no switchport Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 HTH, Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 2:55 PM To: NT System Admin Issues Subject: Quick Cisco test network question.. We are setting up a test network between 2 buildings. We have 2 strands of fiber that go from the one building into our data center. It is going to be a closed network with no internet access , so it will be isolated from our production environment. I have a cisco 3550 that will be the core and on the other end we have a cisco 2950. it will be a windows 2008 test environment too, but we have to get the infrastructure in place first. We are going to set routing up on the 3550 (4 different vlans) and will have some servers and some clients on this switch. There will be no gateway out to the internet, totally closed network. I know you have to turn on IP Routing and set a default route, but where do I set up the routable network interface
RE: Quick Cisco test network question..
Thanks much. Yes this is totally isolated and not connected to the rest of the network. We are just testing some server apps and exchange 2007 etc on a closed network before we move the test servers into production etc. So then if I wanted to configure dhcp on the 3550 and hand out addresses in vlan 3 I would add a ip-helper line to the int vlan 3 correct? And make the scope etc from the subnet vlan 3 is defined for? I appreciate all your insight.. From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 2:29 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Ahh - if that's the case, you don't need a default gateway for the switch. If I understand you correctly, this network doesn't need to be connected to the rest of your network? Inter-Vlan Routing works by virtue of the fact that all the subnets that must be routed between are considered directly connected (via the Switched Virtual Interfaces - SVIs, or Vlan Interfaces). That plus the 'ip routing' command from Global Config is all you need. The default gateway is only used so that you can maintain reachability to/from the rest of your network... i.e. a host on your new network wants to get to a subnet that the switch doesn't know about. Does that help? Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 2:20 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Ok...sorry for the confusion im just trying to sort this out. There isn't a router involved so all we have is 2 switches connected by fiber. From the routing core switch (3550) I want to set up 4 vlans so that I can program layer 2 ports on the 3550 and 2950 at the other end of the fiber. I need to trunk the g0/1 ports with 802.1q. This is what I have on the routing switch (3550) Interface vlan 2 192.168.2.1 255.255.255.0 Interface vlan 3 192.168.3.1 255.255.255.0 Interface vlan 10 192.168.10.1 255.255.255.0 Interface vlan 100 1.1.1.1 255.255.255.0 IP routing ip route 0.0.0.0 0.0.0.0 1.1.1.254 not sure what default gateway should be etc to get the intravlan routing thanks again..im starting to get it.. From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 1:31 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Depends - For the switch itself, you'll want the default gateway to be another device on your network that is accessible through the switch's VLAN interfaces (subnets), or through the native VLAN interface. This device should also provide connectivity to the rest of your network. So, as an example... pretend 192.168.1.254 is the gateway router for all of your network to get out to the rest of the network and it connects to the 3550 off of Vlan1. Your setup would be as follows: Interface Vlan1 ip address 192.168.1.1 255.255.255.0 interface Vlan2 ip address 192.168.2.1 255.255.255.0 ip route 0.0.0.0 0.0.0.0 192.168.1.254 -or- ip route 0.0.0.0 0.0.0.0 Vlan1 HTH, Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 9:07 AM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Ok I was on vacation Trying to finish this up... I used option 1 with a vlan interface. Besides the routing vlan interface I will have 3 others that need to get trunked across the fiber. Vlan 2, 3, 4... for each vlan I assigned it a ip address of 192.168.2.254 255.255.255.0 for vlan 2 etc. Is the default gateway for this switch 1.1.1.1 255.255.255.0 then? I think it is, but wanted to make sure. Thanks... From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:52 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Not a dumb question at all. Yes you *would* need something in the interface to make the port live and establish it as a connected interface in the switch's routing table. L2 ports configured as L3 Routed interfaces are nice when you only have 1 subnet and aren't trunking any VLANs - in other words, you'd have to setup separate ports for each subnet you have. Essentially, imagine this scenario as having an actual router (not a switch) with 24 independent interfaces that are *routed* (NOT switched) at L3. This is not to say, however, that you can't have both routed interfaces and SVIs (VLAN Interfaces) running parallel - with multiple hosts (in multiple VLANs) communicating with the SVI
RE: Quick Cisco test network question..
Yep - I'm not sure you need the ip helper-address command though (although it won't hurt anything, except forward broadcast traffic to the destination specified - which could be detrimental if there's a lot of it. Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 2:35 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Thanks much. Yes this is totally isolated and not connected to the rest of the network. We are just testing some server apps and exchange 2007 etc on a closed network before we move the test servers into production etc. So then if I wanted to configure dhcp on the 3550 and hand out addresses in vlan 3 I would add a ip-helper line to the int vlan 3 correct? And make the scope etc from the subnet vlan 3 is defined for? I appreciate all your insight.. From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 2:29 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Ahh - if that's the case, you don't need a default gateway for the switch. If I understand you correctly, this network doesn't need to be connected to the rest of your network? Inter-Vlan Routing works by virtue of the fact that all the subnets that must be routed between are considered directly connected (via the Switched Virtual Interfaces - SVIs, or Vlan Interfaces). That plus the 'ip routing' command from Global Config is all you need. The default gateway is only used so that you can maintain reachability to/from the rest of your network... i.e. a host on your new network wants to get to a subnet that the switch doesn't know about. Does that help? Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 2:20 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Ok...sorry for the confusion im just trying to sort this out. There isn't a router involved so all we have is 2 switches connected by fiber. From the routing core switch (3550) I want to set up 4 vlans so that I can program layer 2 ports on the 3550 and 2950 at the other end of the fiber. I need to trunk the g0/1 ports with 802.1q. This is what I have on the routing switch (3550) Interface vlan 2 192.168.2.1 255.255.255.0 Interface vlan 3 192.168.3.1 255.255.255.0 Interface vlan 10 192.168.10.1 255.255.255.0 Interface vlan 100 1.1.1.1255.255.255.0 IP routing ip route 0.0.0.0 0.0.0.0 1.1.1.254 not sure what default gateway should be etc to get the intravlan routing thanks again..im starting to get it.. From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 1:31 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Depends - For the switch itself, you'll want the default gateway to be another device on your network that is accessible through the switch's VLAN interfaces (subnets), or through the native VLAN interface. This device should also provide connectivity to the rest of your network. So, as an example... pretend 192.168.1.254 is the gateway router for all of your network to get out to the rest of the network and it connects to the 3550 off of Vlan1. Your setup would be as follows: Interface Vlan1 ip address 192.168.1.1 255.255.255.0 interface Vlan2 ip address 192.168.2.1 255.255.255.0 ip route 0.0.0.0 0.0.0.0 192.168.1.254 -or- ip route 0.0.0.0 0.0.0.0 Vlan1 HTH, Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 9:07 AM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Ok I was on vacation Trying to finish this up... I used option 1 with a vlan interface. Besides the routing vlan interface I will have 3 others that need to get trunked across the fiber. Vlan 2, 3, 4... for each vlan I assigned it a ip address of 192.168.2.254 255.255.255.0 for vlan 2 etc. Is the default gateway for this switch 1.1.1.1 255.255.255.0 then? I think it is, but wanted to make sure. Thanks... From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:52 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Not a dumb question at all. Yes you *would* need something in the interface to make the port live and establish it as a connected interface
RE: Quick Cisco test network question..
Ahh - if that's the case, you don't need a default gateway for the switch. If I understand you correctly, this network doesn't need to be connected to the rest of your network? Inter-Vlan Routing works by virtue of the fact that all the subnets that must be routed between are considered directly connected (via the Switched Virtual Interfaces - SVIs, or Vlan Interfaces). That plus the 'ip routing' command from Global Config is all you need. The default gateway is only used so that you can maintain reachability to/from the rest of your network... i.e. a host on your new network wants to get to a subnet that the switch doesn't know about. Does that help? Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 2:20 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Ok...sorry for the confusion im just trying to sort this out. There isn't a router involved so all we have is 2 switches connected by fiber. From the routing core switch (3550) I want to set up 4 vlans so that I can program layer 2 ports on the 3550 and 2950 at the other end of the fiber. I need to trunk the g0/1 ports with 802.1q. This is what I have on the routing switch (3550) Interface vlan 2 192.168.2.1 255.255.255.0 Interface vlan 3 192.168.3.1 255.255.255.0 Interface vlan 10 192.168.10.1 255.255.255.0 Interface vlan 100 1.1.1.1255.255.255.0 IP routing ip route 0.0.0.0 0.0.0.0 1.1.1.254 not sure what default gateway should be etc to get the intravlan routing thanks again..im starting to get it.. From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 1:31 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Depends - For the switch itself, you'll want the default gateway to be another device on your network that is accessible through the switch's VLAN interfaces (subnets), or through the native VLAN interface. This device should also provide connectivity to the rest of your network. So, as an example... pretend 192.168.1.254 is the gateway router for all of your network to get out to the rest of the network and it connects to the 3550 off of Vlan1. Your setup would be as follows: Interface Vlan1 ip address 192.168.1.1 255.255.255.0 interface Vlan2 ip address 192.168.2.1 255.255.255.0 ip route 0.0.0.0 0.0.0.0 192.168.1.254 -or- ip route 0.0.0.0 0.0.0.0 Vlan1 HTH, Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 9:07 AM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Ok I was on vacation Trying to finish this up... I used option 1 with a vlan interface. Besides the routing vlan interface I will have 3 others that need to get trunked across the fiber. Vlan 2, 3, 4... for each vlan I assigned it a ip address of 192.168.2.254 255.255.255.0 for vlan 2 etc. Is the default gateway for this switch 1.1.1.1 255.255.255.0 then? I think it is, but wanted to make sure. Thanks... From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:52 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Not a dumb question at all. Yes you *would* need something in the interface to make the port live and establish it as a connected interface in the switch's routing table. L2 ports configured as L3 Routed interfaces are nice when you only have 1 subnet and aren't trunking any VLANs - in other words, you'd have to setup separate ports for each subnet you have. Essentially, imagine this scenario as having an actual router (not a switch) with 24 independent interfaces that are *routed* (NOT switched) at L3. This is not to say, however, that you can't have both routed interfaces and SVIs (VLAN Interfaces) running parallel - with multiple hosts (in multiple VLANs) communicating with the SVI through L2 ports. In your situation - I'd go w/ the VLAN interfaces as you're probably trunking more than 1 VLAN across that fiber and will want multiple L2 ports on the 3550 and 2950 to have connectivity to the gateway address. I probably shouldn't have mentioned option 1 as it doesn't necessarily fit your scenario. HTH, Aaron Rohyans, CCIE #21945 (How's this look Z? :-)) IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:04 PM To: NT System Admin Issues Subject: RE: Quick Cisco
RE: Quick Cisco test network question..
Ok then on the 2950 all I need to do is trunk the fiber port and add the vlans to the database? Any default gateway there / I would guess no by your previous post. From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 2:41 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Yep - I'm not sure you need the ip helper-address command though (although it won't hurt anything, except forward broadcast traffic to the destination specified - which could be detrimental if there's a lot of it. Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 2:35 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Thanks much. Yes this is totally isolated and not connected to the rest of the network. We are just testing some server apps and exchange 2007 etc on a closed network before we move the test servers into production etc. So then if I wanted to configure dhcp on the 3550 and hand out addresses in vlan 3 I would add a ip-helper line to the int vlan 3 correct? And make the scope etc from the subnet vlan 3 is defined for? I appreciate all your insight.. From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 2:29 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Ahh - if that's the case, you don't need a default gateway for the switch. If I understand you correctly, this network doesn't need to be connected to the rest of your network? Inter-Vlan Routing works by virtue of the fact that all the subnets that must be routed between are considered directly connected (via the Switched Virtual Interfaces - SVIs, or Vlan Interfaces). That plus the 'ip routing' command from Global Config is all you need. The default gateway is only used so that you can maintain reachability to/from the rest of your network... i.e. a host on your new network wants to get to a subnet that the switch doesn't know about. Does that help? Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 2:20 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Ok...sorry for the confusion im just trying to sort this out. There isn't a router involved so all we have is 2 switches connected by fiber. From the routing core switch (3550) I want to set up 4 vlans so that I can program layer 2 ports on the 3550 and 2950 at the other end of the fiber. I need to trunk the g0/1 ports with 802.1q. This is what I have on the routing switch (3550) Interface vlan 2 192.168.2.1 255.255.255.0 Interface vlan 3 192.168.3.1 255.255.255.0 Interface vlan 10 192.168.10.1 255.255.255.0 Interface vlan 100 1.1.1.1 255.255.255.0 IP routing ip route 0.0.0.0 0.0.0.0 1.1.1.254 not sure what default gateway should be etc to get the intravlan routing thanks again..im starting to get it.. From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 1:31 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Depends - For the switch itself, you'll want the default gateway to be another device on your network that is accessible through the switch's VLAN interfaces (subnets), or through the native VLAN interface. This device should also provide connectivity to the rest of your network. So, as an example... pretend 192.168.1.254 is the gateway router for all of your network to get out to the rest of the network and it connects to the 3550 off of Vlan1. Your setup would be as follows: Interface Vlan1 ip address 192.168.1.1 255.255.255.0 interface Vlan2 ip address 192.168.2.1 255.255.255.0 ip route 0.0.0.0 0.0.0.0 192.168.1.254 -or- ip route 0.0.0.0 0.0.0.0 Vlan1 HTH, Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2008 9:07 AM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Ok I was on vacation Trying to finish this up... I used option 1 with a vlan interface. Besides the routing vlan interface I will have 3 others that need to get trunked across the fiber. Vlan 2, 3, 4... for each vlan I assigned it a ip address of 192.168.2.254 255.255.255.0 for vlan 2 etc. Is the default gateway for this switch 1.1.1.1 255.255.255.0 then? I think it is, but wanted to make sure
RE: Quick Cisco test network question..
Two options - VLAN interfaces, or turning your Layer2 ports into Routed interfaces: 1. Switch(config)# ip routing Switch(config)# int vlan 100 Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 2. Switch(config)# ip routing Switch(config)# int fa0/1 Switch(config-if)# no switchport Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 HTH, Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 2:55 PM To: NT System Admin Issues Subject: Quick Cisco test network question.. We are setting up a test network between 2 buildings. We have 2 strands of fiber that go from the one building into our data center. It is going to be a closed network with no internet access , so it will be isolated from our production environment. I have a cisco 3550 that will be the core and on the other end we have a cisco 2950. it will be a windows 2008 test environment too, but we have to get the infrastructure in place first. We are going to set routing up on the 3550 (4 different vlans) and will have some servers and some clients on this switch. There will be no gateway out to the internet, totally closed network. I know you have to turn on IP Routing and set a default route, but where do I set up the routable network interface? As a vlan? For instance: Switch(config)# int vlan 100 Description routable network Ip address 192.168.1.1 255.255.255.0 Then route ip 0.0.0.0 0.0.0.0.0 192.168.1.1 Is this right? The switch doesn't seem to like it. Thanks..i have the advanced ip services image on the 3550. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Quick Cisco test network question..
http://www.cisco.com/en/US/tech/tk389/tk815/technologies_configuration_e xample09186a008015f17a.shtml http://www.tek-tips.com/viewthread.cfm?qid=1194217page=1 Bob Fronk [EMAIL PROTECTED] From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 2:55 PM To: NT System Admin Issues Subject: Quick Cisco test network question.. We are setting up a test network between 2 buildings. We have 2 strands of fiber that go from the one building into our data center. It is going to be a closed network with no internet access , so it will be isolated from our production environment. I have a cisco 3550 that will be the core and on the other end we have a cisco 2950. it will be a windows 2008 test environment too, but we have to get the infrastructure in place first. We are going to set routing up on the 3550 (4 different vlans) and will have some servers and some clients on this switch. There will be no gateway out to the internet, totally closed network. I know you have to turn on IP Routing and set a default route, but where do I set up the routable network interface? As a vlan? For instance: Switch(config)# int vlan 100 Description routable network Ip address 192.168.1.1 255.255.255.0 Then route ip 0.0.0.0 0.0.0.0.0 192.168.1.1 Is this right? The switch doesn't seem to like it. Thanks..i have the advanced ip services image on the 3550. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Quick Cisco test network question..
Thanks aaron... will try it in a few... appreciate it... From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:01 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Two options - VLAN interfaces, or turning your Layer2 ports into Routed interfaces: 1. Switch(config)# ip routing Switch(config)# int vlan 100 Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 2. Switch(config)# ip routing Switch(config)# int fa0/1 Switch(config-if)# no switchport Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 HTH, Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 2:55 PM To: NT System Admin Issues Subject: Quick Cisco test network question.. We are setting up a test network between 2 buildings. We have 2 strands of fiber that go from the one building into our data center. It is going to be a closed network with no internet access , so it will be isolated from our production environment. I have a cisco 3550 that will be the core and on the other end we have a cisco 2950. it will be a windows 2008 test environment too, but we have to get the infrastructure in place first. We are going to set routing up on the 3550 (4 different vlans) and will have some servers and some clients on this switch. There will be no gateway out to the internet, totally closed network. I know you have to turn on IP Routing and set a default route, but where do I set up the routable network interface? As a vlan? For instance: Switch(config)# int vlan 100 Description routable network Ip address 192.168.1.1 255.255.255.0 Then route ip 0.0.0.0 0.0.0.0.0 192.168.1.1 Is this right? The switch doesn't seem to like it. Thanks..i have the advanced ip services image on the 3550. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Quick Cisco test network question..
What no CCIE on the title Aaron :-) (You earned it) Z Edward E. Ziots Network Engineer Lifespan Organization Email: [EMAIL PROTECTED] Phone: 401-639-3505 MCSE, MCP+I, ME, CCA, Security +, Network + From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:01 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Two options - VLAN interfaces, or turning your Layer2 ports into Routed interfaces: 1. Switch(config)# ip routing Switch(config)# int vlan 100 Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 2. Switch(config)# ip routing Switch(config)# int fa0/1 Switch(config-if)# no switchport Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 HTH, Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 2:55 PM To: NT System Admin Issues Subject: Quick Cisco test network question.. We are setting up a test network between 2 buildings. We have 2 strands of fiber that go from the one building into our data center. It is going to be a closed network with no internet access , so it will be isolated from our production environment. I have a cisco 3550 that will be the core and on the other end we have a cisco 2950. it will be a windows 2008 test environment too, but we have to get the infrastructure in place first. We are going to set routing up on the 3550 (4 different vlans) and will have some servers and some clients on this switch. There will be no gateway out to the internet, totally closed network. I know you have to turn on IP Routing and set a default route, but where do I set up the routable network interface? As a vlan? For instance: Switch(config)# int vlan 100 Description routable network Ip address 192.168.1.1 255.255.255.0 Then route ip 0.0.0.0 0.0.0.0.0 192.168.1.1 Is this right? The switch doesn't seem to like it. Thanks..i have the advanced ip services image on the 3550. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Quick Cisco test network question..
Sorry to sound dumb... if I use option #2 then nothing gets plugged into the actual f0/1 port right? It is just a routable interface? From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:01 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Two options - VLAN interfaces, or turning your Layer2 ports into Routed interfaces: 1. Switch(config)# ip routing Switch(config)# int vlan 100 Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 2. Switch(config)# ip routing Switch(config)# int fa0/1 Switch(config-if)# no switchport Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 HTH, Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 2:55 PM To: NT System Admin Issues Subject: Quick Cisco test network question.. We are setting up a test network between 2 buildings. We have 2 strands of fiber that go from the one building into our data center. It is going to be a closed network with no internet access , so it will be isolated from our production environment. I have a cisco 3550 that will be the core and on the other end we have a cisco 2950. it will be a windows 2008 test environment too, but we have to get the infrastructure in place first. We are going to set routing up on the 3550 (4 different vlans) and will have some servers and some clients on this switch. There will be no gateway out to the internet, totally closed network. I know you have to turn on IP Routing and set a default route, but where do I set up the routable network interface? As a vlan? For instance: Switch(config)# int vlan 100 Description routable network Ip address 192.168.1.1 255.255.255.0 Then route ip 0.0.0.0 0.0.0.0.0 192.168.1.1 Is this right? The switch doesn't seem to like it. Thanks..i have the advanced ip services image on the 3550. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Quick Cisco test network question..
Thanks Aaron, You totally cleared it up. Makes perfect sense now. Thanks again... From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:52 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Not a dumb question at all. Yes you *would* need something in the interface to make the port live and establish it as a connected interface in the switch's routing table. L2 ports configured as L3 Routed interfaces are nice when you only have 1 subnet and aren't trunking any VLANs - in other words, you'd have to setup separate ports for each subnet you have. Essentially, imagine this scenario as having an actual router (not a switch) with 24 independent interfaces that are *routed* (NOT switched) at L3. This is not to say, however, that you can't have both routed interfaces and SVIs (VLAN Interfaces) running parallel - with multiple hosts (in multiple VLANs) communicating with the SVI through L2 ports. In your situation - I'd go w/ the VLAN interfaces as you're probably trunking more than 1 VLAN across that fiber and will want multiple L2 ports on the 3550 and 2950 to have connectivity to the gateway address. I probably shouldn't have mentioned option 1 as it doesn't necessarily fit your scenario. HTH, Aaron Rohyans, CCIE #21945 (How's this look Z? :-)) IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:04 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Sorry to sound dumb... if I use option #2 then nothing gets plugged into the actual f0/1 port right? It is just a routable interface? From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:01 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Two options - VLAN interfaces, or turning your Layer2 ports into Routed interfaces: 1. Switch(config)# ip routing Switch(config)# int vlan 100 Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 2. Switch(config)# ip routing Switch(config)# int fa0/1 Switch(config-if)# no switchport Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 HTH, Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 2:55 PM To: NT System Admin Issues Subject: Quick Cisco test network question.. We are setting up a test network between 2 buildings. We have 2 strands of fiber that go from the one building into our data center. It is going to be a closed network with no internet access , so it will be isolated from our production environment. I have a cisco 3550 that will be the core and on the other end we have a cisco 2950. it will be a windows 2008 test environment too, but we have to get the infrastructure in place first. We are going to set routing up on the 3550 (4 different vlans) and will have some servers and some clients on this switch. There will be no gateway out to the internet, totally closed network. I know you have to turn on IP Routing and set a default route, but where do I set up the routable network interface? As a vlan? For instance: Switch(config)# int vlan 100 Description routable network Ip address 192.168.1.1 255.255.255.0 Then route ip 0.0.0.0 0.0.0.0.0 192.168.1.1 Is this right? The switch doesn't seem to like it. Thanks..i have the advanced ip services image on the 3550. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Quick Cisco test network question..
Looks (Outstanding) Aaron :-) Z Edward E. Ziots Network Engineer Lifespan Organization Email: [EMAIL PROTECTED] Phone: 401-639-3505 MCSE, MCP+I, ME, CCA, Security +, Network + From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:52 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Not a dumb question at all. Yes you *would* need something in the interface to make the port live and establish it as a connected interface in the switch's routing table. L2 ports configured as L3 Routed interfaces are nice when you only have 1 subnet and aren't trunking any VLANs - in other words, you'd have to setup separate ports for each subnet you have. Essentially, imagine this scenario as having an actual router (not a switch) with 24 independent interfaces that are *routed* (NOT switched) at L3. This is not to say, however, that you can't have both routed interfaces and SVIs (VLAN Interfaces) running parallel - with multiple hosts (in multiple VLANs) communicating with the SVI through L2 ports. In your situation - I'd go w/ the VLAN interfaces as you're probably trunking more than 1 VLAN across that fiber and will want multiple L2 ports on the 3550 and 2950 to have connectivity to the gateway address. I probably shouldn't have mentioned option 1 as it doesn't necessarily fit your scenario. HTH, Aaron Rohyans, CCIE #21945 (How's this look Z? :-)) IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:04 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Sorry to sound dumb... if I use option #2 then nothing gets plugged into the actual f0/1 port right? It is just a routable interface? From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:01 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Two options - VLAN interfaces, or turning your Layer2 ports into Routed interfaces: 1. Switch(config)# ip routing Switch(config)# int vlan 100 Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 2. Switch(config)# ip routing Switch(config)# int fa0/1 Switch(config-if)# no switchport Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 HTH, Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 2:55 PM To: NT System Admin Issues Subject: Quick Cisco test network question.. We are setting up a test network between 2 buildings. We have 2 strands of fiber that go from the one building into our data center. It is going to be a closed network with no internet access , so it will be isolated from our production environment. I have a cisco 3550 that will be the core and on the other end we have a cisco 2950. it will be a windows 2008 test environment too, but we have to get the infrastructure in place first. We are going to set routing up on the 3550 (4 different vlans) and will have some servers and some clients on this switch. There will be no gateway out to the internet, totally closed network. I know you have to turn on IP Routing and set a default route, but where do I set up the routable network interface? As a vlan? For instance: Switch(config)# int vlan 100 Description routable network Ip address 192.168.1.1 255.255.255.0 Then route ip 0.0.0.0 0.0.0.0.0 192.168.1.1 Is this right? The switch doesn't seem to like it. Thanks..i have the advanced ip services image on the 3550. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: Quick Cisco test network question..
Not a dumb question at all. Yes you *would* need something in the interface to make the port live and establish it as a connected interface in the switch's routing table. L2 ports configured as L3 Routed interfaces are nice when you only have 1 subnet and aren't trunking any VLANs - in other words, you'd have to setup separate ports for each subnet you have. Essentially, imagine this scenario as having an actual router (not a switch) with 24 independent interfaces that are *routed* (NOT switched) at L3. This is not to say, however, that you can't have both routed interfaces and SVIs (VLAN Interfaces) running parallel - with multiple hosts (in multiple VLANs) communicating with the SVI through L2 ports. In your situation - I'd go w/ the VLAN interfaces as you're probably trunking more than 1 VLAN across that fiber and will want multiple L2 ports on the 3550 and 2950 to have connectivity to the gateway address. I probably shouldn't have mentioned option 1 as it doesn't necessarily fit your scenario. HTH, Aaron Rohyans, CCIE #21945 (How's this look Z? :-)) IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:04 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Sorry to sound dumb... if I use option #2 then nothing gets plugged into the actual f0/1 port right? It is just a routable interface? From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 3:01 PM To: NT System Admin Issues Subject: RE: Quick Cisco test network question.. Two options - VLAN interfaces, or turning your Layer2 ports into Routed interfaces: 1. Switch(config)# ip routing Switch(config)# int vlan 100 Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 2. Switch(config)# ip routing Switch(config)# int fa0/1 Switch(config-if)# no switchport Switch(config-if)# ip add 1.1.1.1 255.255.255.0 Switch(config-if)# exit Switch(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.254 HTH, Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 317.244.8307 (V) 317.244.4600 (F) From: Chyka, Robert [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2008 2:55 PM To: NT System Admin Issues Subject: Quick Cisco test network question.. We are setting up a test network between 2 buildings. We have 2 strands of fiber that go from the one building into our data center. It is going to be a closed network with no internet access , so it will be isolated from our production environment. I have a cisco 3550 that will be the core and on the other end we have a cisco 2950. it will be a windows 2008 test environment too, but we have to get the infrastructure in place first. We are going to set routing up on the 3550 (4 different vlans) and will have some servers and some clients on this switch. There will be no gateway out to the internet, totally closed network. I know you have to turn on IP Routing and set a default route, but where do I set up the routable network interface? As a vlan? For instance: Switch(config)# int vlan 100 Description routable network Ip address 192.168.1.1 255.255.255.0 Then route ip 0.0.0.0 0.0.0.0.0 192.168.1.1 Is this right? The switch doesn't seem to like it. Thanks..i have the advanced ip services image on the 3550. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~