VLANs routed with C3560 and Proxy ARP
Bookmark this page:
 Yahoo!
 Google
 Windows Live
 del.icio.us
 digg
 Netscape
|
|
||||||||||||||||
|
Posted by Morph on August 10, 2008, 1:08 pm
Please log in for more thread options We have several offices and use a provider to route betwean the private networks. At one of the offices we have the network 192.168.2.0/24 that is routed and accessible from the other offices. Now we want to use VLANS in that office. We are planing to use C2960G-48TC-L as access switch and have a C3560G-24TS-S to route between the VLANs. The address of the provider router is 192.168.2.254. We are planing to create several VLANs: 192.168.2.1-62 /255.255.255.192 192.168.2.65-94 /255.255.255.224 etc... The routed port of the catalyst 3560 connected to the router will have the address 192.168.2.253 and the C3560 and C2960 will be connected through a trunk. All the VLANs will use their own default gateways set on the Catalyst 3560. So the diagram will be: ROUTER---C3560---C2960---VLANS When the router will try to connect to any of the addresses in the VLANs it will do so in a way that C3560 will answer through proxy ARP. Will this work or are we missing something? | ||||||||||||||||
|
Posted by Martin Bilgrav on August 12, 2008, 3:06 pm
Please log in for more thread options you can do VLAN routing in two setups: 1. SVI 2. Routed interface with sub-interface. to answer your Q: > When the router will try to connect to any of the addresses in the VLANs
The router do not want to connect, more likely it wants to forward some
> it will do so in a way that C3560 will answer through proxy ARP. packets to the VLANs. when the router forwards packets, it looks up its own routetable and forward accordingly. so the router will most likely only have the C3560 in its ARP table, as it will forward packets to the c3560, inorder to reach the VLANs. Hope this answers your Q. btw - you should disable Proxy ARP anyhow. Regards Martin | ||||||||||||||||
|
Posted by Morph on August 12, 2008, 5:47 pm
Please log in for more thread options
Martin Bilgrav wrote: | > We have several offices and use a provider to route betwean the private
|
| > networks. | > At one of the offices we have the network 192.168.2.0/24 that is routed | > and accessible from the other offices. | > | > Now we want to use VLANS in that office. We are planing to use | > C2960G-48TC-L as access switch and have a C3560G-24TS-S to route between | > the VLANs. | > | > The address of the provider router is 192.168.2.254. | > | > We are planing to create several VLANs: | > 192.168.2.1-62 /255.255.255.192 | > 192.168.2.65-94 /255.255.255.224 | > etc... | > | > The routed port of the catalyst 3560 connected to the router will have | > the address 192.168.2.253 and the C3560 and C2960 will be connected | > through a trunk. | > | > All the VLANs will use their own default gateways set on the Catalyst | > 3560. | > | > So the diagram will be: | > | > ROUTER---C3560---C2960---VLANS | > | > When the router will try to connect to any of the addresses in the VLANs | > it will do so in a way that C3560 will answer through proxy ARP. | > | > Will this work or are we missing something? | | you can do VLAN routing in two setups: | 1. SVI | 2. Routed interface with sub-interface. I used SVI. | to answer your Q: | > When the router will try to connect to any of the addresses in the VLANs
| The router do not want to connect, more likely it wants to forward some
| > it will do so in a way that C3560 will answer through proxy ARP. | packets to the VLANs. Yes :) I'm not native english speaker so the wording i used wasn't appropriate. | when the router forwards packets, it looks up its own routetable and forward | accordingly. | so the router will most likely only have the C3560 in its ARP table, as it | will forward packets to the c3560, inorder to reach the VLANs. | | Hope this answers your Q. | btw - you should disable Proxy ARP anyhow. The router has an address 192.168.2.254/24 so it thinks that all the hosts are in the same subnet as the router. I segmented 192.168.2.0/24 into several segments with a SVI as default gateway for every VLAN (like 192.168.2.0/26, 192.168.2.64/26, 192.168.2.128/27 etc.). The port of the 3560 connected with the router is 192.168.2.253/30. If I disable Proxy ARP then the router won't be able to send packets to all the hosts since they are all in different subnets. With Proxy ARP enabled the 3560 will forward the packets to the hosts. Regards. | ||||||||||||||||
|
Posted by Merv on August 12, 2008, 8:45 pm
Please log in for more thread options
Any particular reason the provider is not providing you with a dynamic routing protocol so that you can address subnets at any of your sites the way you want without having to use kludges like proxy-ARP? What is the backbone transport technology used by your provider ? | ||||||||||||||||
|
Posted by Morph on August 13, 2008, 3:02 am
Please log in for more thread options
In the message wrote: | Any particular reason the provider is not providing you with a dynamic | routing protocol so that you can address subnets at any of your sites | the way you want without having to use kludges like proxy-ARP? | What is the backbone transport technology used by your provider ? It's MPLS. | ||||||||||||||||
| Similar Threads | Posted |
| VLANs routed with C3560 and Proxy ARP | August 10, 2008, 1:08 pm |
| Symantec Ghost across VLANS routed by cisco router | April 30, 2006, 3:50 am |
| Files on a C3560? | March 1, 2006, 6:48 am |
| C3560 vs C3750 switches | July 13, 2005, 3:31 pm |
| I have strange routing problem with my C3560 switch. | March 7, 2007, 7:20 am |
| flow/packet loss through L3 C3560, pings OK | May 1, 2008, 12:59 am |
| Windows - Browsing across vlans and also DC's on separate vlans | November 16, 2005, 9:26 pm |
| routed interfaces | April 20, 2007, 2:35 am |
| ntp requests routed wrong | December 21, 2005, 12:36 pm |
| Swiched vs routed Ethernet | January 4, 2006, 1:32 pm |
| Routed interface redundancy | May 21, 2006, 12:21 am |
| is mac address changed when being routed? | August 26, 2006, 9:37 pm |
| routed port and SVI difference | March 30, 2007, 4:51 am |
| VLAN across a routed connection? | September 15, 2007, 3:13 am |
| Cisco VPN Client through PIX and routed network | November 2, 2005, 1:03 pm |
> networks.
> At one of the offices we have the network 192.168.2.0/24 that is routed
> and accessible from the other offices.
>
> Now we want to use VLANS in that office. We are planing to use
> C2960G-48TC-L as access switch and have a C3560G-24TS-S to route between
> the VLANs.
>
> The address of the provider router is 192.168.2.254.
>
> We are planing to create several VLANs:
> 192.168.2.1-62 /255.255.255.192
> 192.168.2.65-94 /255.255.255.224
> etc...
>
> The routed port of the catalyst 3560 connected to the router will have
> the address 192.168.2.253 and the C3560 and C2960 will be connected
> through a trunk.
>
> All the VLANs will use their own default gateways set on the Catalyst
> 3560.
>
> So the diagram will be:
>
> ROUTER---C3560---C2960---VLANS
>
> When the router will try to connect to any of the addresses in the VLANs
> it will do so in a way that C3560 will answer through proxy ARP.
>
> Will this work or are we missing something?