Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 16 replies
  • Answers 2 answers
  • Subscribers 41 subscribers
  • Views 4495 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to enable gateway on XGS 2100

Poddy

I have a small ICMS network to deploy. There are several VLANs involved. Devices in some VLANs are to be allowed talking to devices in other VLANs, but not all devices are allowed to talk to all other devices. 

I am expecting all routing to be done by the XGS 2100. 

This is my current bench setup. 

The 2 computers can ping each other. But neither can ping the GW. 

So, the config I have on the XGS 2100 unit so far: 

The Network section:

I have assigned the ip address of the F1 interface on the XGS unit to be 10.88.100.254. 

And this is where I can't seem to get it right, I tried it every which way, but the closest I got to having the Gateway up and running is with this setup:

I created a VLAN interface to participate, and assigned it an IP of the GW, 10.88.100.1, and also the VLAN interface has got the VLAN tag of 1100 enabled - I am guessing this allows the XGS unit to tag the traffic(?)

The Routing section: 

Under "Gateways" section, I created the Gateway, and that seems to be "up" and "running" 

And I assigned it the following settings: 

But I am obviously missing some fundamental piece of puzzle. 

Would anyone be able to give me a working example of the settings that are needed to have the XGS 2100 unit provide gateway services (among others) to the local networks? 

Some addtional information: 

I created the rules to basically alloow the traffic to flow: 

I am allowing the ping to be used in the custom zone that I created: 

I created a simple route for the 1 subnet I have to test it with, even though it shouldn't be required at this stage... 

I am starting to run out of ideas. If anyone could kindly throw some pointers my way, it would be greatly appreciated. Thank you in advance, 



This thread was automatically locked due to age.
Parents
  • 0

    Ok, after a short session of hair-pulling, here is what I got. 

    1.) Leave the F1 interface on XGS2100 alone, don't assign any IP to it just yet. 

    2.) Creare a virtual interface (Network > Add Interface > Add VLAN)

     - fill out the details, I used 10.xxx.xxx.2 for the virtual IP in this particualr instance. 

     - I just used the physical "Port 1" interface while creating this virtual interface

    3.) Create a Bridge interface (Network > Add Interface > Add Bridge)

    - and use the VLAN and the Fiber F1 ports to create a bridge. 

    - using the GW IP address 10.xxx.xxx.1

    - in my mind, the "Bridged interface" becomes the "Gateway"

    - there is a "VLAN" section inside the "Add bridge" config, where it allows for VLAN ID be added - not too sure what this does yet, but I will update this section once I figure it out. 

    4.) Lastly, add an "Alias" interface to the Gateway "bridge" to allow for the particular VLAN GW IP to be reachable on the network. 

    - Network > Add Interface > Add Alias

    - and use the 10.xxx.xxx.1 IP

    This can be repeated for a lot of VLANs. My current assignment has got exatly 35 VLANs that will need a GW, so there is a lot of clicking involved. I wonder if there is a CLI command to create/modify this bridge relatiosnhip. 

  • 0 in reply to Poddy

    Hi,

    I have reviewed your thread and I am having trouble understanding what you are trying to achieve. In my opinion you are being overly complex.

    Setting up a gateway, create your VLAN, then create a dhcp server for your desired address range then set the gateway in the dhip server settings tab.

    Or if you require a bridge create the bridge then set up a dhcp server and gateway.

    ian

    XG115W - v20.0.3 MR-3 - on holiday

    XGS118 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

Reply
  • 0 in reply to Poddy

    Hi,

    I have reviewed your thread and I am having trouble understanding what you are trying to achieve. In my opinion you are being overly complex.

    Setting up a gateway, create your VLAN, then create a dhcp server for your desired address range then set the gateway in the dhip server settings tab.

    Or if you require a bridge create the bridge then set up a dhcp server and gateway.

    ian

    XG115W - v20.0.3 MR-3 - on holiday

    XGS118 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

Children
Unfiltered HTML