Multiple Layer 3 switch routing

L4d1k
Here to help

Multiple Layer 3 switch routing

Hello,

 

I am trying to utilize our Layer 3 switches for VLAN routing.
Can I get some assistance with this configuration:
VLAN 1 Default (transport)

 192.168.2.0/22
VLAN 10 VoIP

 192.168.2.0/24
VLAN 20 Staff

192.168.3.0/22
VLAN 30 Guest

192.168.4.0/22
Local DHCP (not Meraki)
192.168.2.30
Local DNS
192.168.2.30


Firewall MX250
MS350 L3 switches 5x
MS220 L2 Switches 5x

 

Not sure in which order or if I am missing anything but it looks like it takes 3 different places to set it up:

1. under switches/ configure/ DHCP & routing

  Interfaces

2. under switches/ configure/ DHCP & routing

  Static routes

3. Security & SD-Wan/ configure/ Addressing & VLANs

  Static Routes

 

Thank you!

5 Replies 5
KarstenI
Kind of a big deal
Kind of a big deal

You are right.

 

1: All your VLANs that you want to route internally.

2: typically a default route is fine here.

3: Routes to all VLANs that you configured in Step 1. But also all VLANs that you need to segment for security. For example your DMZs. Depending on the environment, I have all my VLANs here and not on the L3-switch.

PhilipDAth
Kind of a big deal
Kind of a big deal

Hi,

Yes that is the document I was using.

I just wish there was one with more details and included more pictures or videos with the Meraki interface and what was configured.

Ideally with multiple L3 switches and multiple VLANs

cmr
Kind of a big deal
Kind of a big deal

You need non overlapping subnets:

 

VLAN 1 Default (transport)

 192.168.2.0/22 - this includes IP addresses 192.168.0.1 to 192.168.3.254


VLAN 10 VoIP

 192.168.2.0/24 - overlaps with the above /22


VLAN 20 Staff

192.168.3.0/22 - this is the same as the first subnet


VLAN 30 Guest

192.168.4.0/22 - this is also the same.

 

You need unique subnets.

L4d1k
Here to help

Yes, the subnets are unique.

I didn't put the subnets in use I only used it as an example and didn't do the right subnet mask.

For test purposes/24 on all subnets should be ok.

 

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels