InterVlan Routing not working

[DscRafael]

Could you help me understand why I can't have internal communication between my VLANS, I have an mx64.

The situation is as follows, I have a desktop directly connected to the meraki that is on vlan 1 and has the ip 192.168.1.2 if on that desktop I use a VM that is on the same network (192.168.1.0/24) I can have normal communication.

However, if I put this VM on the VLAN 30 LABS network (192.168.30.0/24) I cannot have any type of communication, not even with the gateway (MX IP 192.168.30.1). However, from the desktop (ip 192.168.1.2) I can ping the gateway, but no other ip from the VLAN 30 range.

Below is how the VLANs are configured:

Meraki is currently with Client tracking in IP Address mode, even in Mac Address mode, the communication does not work:

There are no firewall rules or group policies blocking communication:

Group policies

ARP VLAN 30:

Tests vlan 30 not working

Test vlan 1 working

[alemabrahao]

Are you using VMware on a Windows desktop? It's probably a Hypervisor problem, not the MX. You can test it by setting up two physical machines on a different VLAN.

I'm saying this because I've come across the same situation running Hypervisor installed on a Windows machine.

[DscRafael]

Hello,
I'm using VMware. I've already tried to do the tests by tagging the vlan or leaving it without tagging, but I wasn't successful anyway.

[alemabrahao]

Forget it, VMware running directly on Windows will not work, only with VMware ESXI.

[DscRafael]

But why not?
This to me is simple routing on L3.
If I connect the windows desktop to the ISP's router (a very simple router, by the way) the communication works normally...

[alemabrahao]

It'  VMware limitation. 😕

[Sarv]

Not sure about the VMware on Windows (Im assuming you are using VMWare workstation?). Did you try changing the MX Port settings for the port connected to this VM? Change it from Trunk port to Access Port (VLAN 30).  Im assuming you are changing the virtual machine (the same one) from VLAN 1 to VLAN 30. If that is not the case and you have a switch port uplinked to the Meraki make sure you have presented VLAN 30 over that.

[DscRafael]

I am using VMware workstation. With the use of vmware workstation, there is no point in changing the trunk port to access, as that would be one more reason for the connection not to work between the vlans.
I don't have any switches between the MX and the desktop, it's directly connected to the MX.

[alemabrahao]

@DscRafael it's a VMware limitation, on Microsoft hyperv it works well 

[DscRafael]

VMware limitation? Are you sure what you're talking about? If I replicate the same vlans connected to an ASA 5505 it works correctly. It's a limitation of MX

[alemabrahao]

Yep, I'm sure. 😉

[alemabrahao]

So use a Cisco ASA, or open a support case. ✌🏼

[alemabrahao]

And just so you know, I'm talking about VMware Workstation, okay? I've already performed several network migrations with virtualized environments (VMware EXI, Microsoft HyperV, Xen, etc) and never had any problems.

[Ryan_Miles]

This sounds like a VM issue and not a MX problem. Everything appears fine on your MX from the screenshots and inter VLAN routing should work fine. If you put standard (not VM) clients on each VLAN and test I assume everything is ok?

I have a slightly different setup than you. But I run VM Fusion on a Mac here with two CSR1000Vs on different VLANs. Routing works fine through my MX. My Mac is on a native VLAN 172 and the two VMs are tagged to use VLAN 85 & 86. I did have to mess around with a few configs to get it working, but it's fine now.

[DscRafael · Accepted solution]

I found the problem.

[alemabrahao]

What was the issue?