Moved Vlans from switch to FW - now they dont work

Bred_85
Conversationalist

Moved Vlans from switch to FW - now they dont work

Hello,

 

I have a MX FW which only had one vlan on it. It as connected to a Meraki switch, which had all the vlans configured on it. As part of a security audit I was told to move the vlans to the FW. 

 

I have now moved the vlans to the FW. I allowed 'all' vlans on the trunk hich has a native vlan 200. The two ends of the trunk have IPs so it acts like a layer 3 device, in that there is a default route on the switch which points to the FW end of the trunk. The FW has no routes other than local subnets that it detected itself. 

 

I am connected to a port on the switch - I have picked up a DHCP IP in the correct vlan but I get no internet on my laptop now and I cant ping the DG despite the FW being wide open rule wise. 

 

What am I missing? Is it better to just have the subnet configured on the switch and point everything else to the FW as before? 


Thanks in advance

1 Reply 1
Bred_85
Conversationalist

I figured it out - the switch moved its own uplink when I bounced the MX so it was blackholing the traffic

Get notified when there are additional replies to this discussion.