First, thanks for the feedback about my questions on ACL to provide internet only access to some devices.
I decided to look at using VLANs to do this since this seems to be the best approach.
I am look to start by having some of my servers in their own vlan and trying to understand how inter-vlan routing works.
I have the following setup
Vlans
Code:
vlan 1 name DEFAULT-VLAN by port
router-interface ve 1
vlan 10 name servers by port
untagged ethe 1/1/18
router-interface ve 10
Virtual Interfaces
Code:
interface ve 1
ip address 192.168.1.80 255.255.255.0
!
interface ve 10
ip address 192.168.10.1 255.255.255.0
ip helper-address 1 192.168.1.1
show ip route
Code:
Total number of IP routes: 3
Type Codes - B:BGP D:Connected O:OSPF R:RIP S:Static; Cost - Dist/Metric
BGP Codes - i:iBGP e:eBGP
OSPF Codes - i:Inter Area 1:External Type 1 2:External Type 2
Destination Gateway Port Cost Type Uptime
1 0.0.0.0/0 192.168.1.1 ve 1 1/1 S 11d16h
2 192.168.1.0/24 DIRECT ve 1 0/0 D 11d16h
3 192.168.10.0/24 DIRECT ve 10 0/0 D 1d15h
I only have one wired client on 1/1/18 with ip 192.168.10.200 with static ip and gateway 192.168.10.1.
The issue I am having right now is that I cannot ping 192.168.10.200 from 192.168.1.143.
My understanding of vlan routing is that I should be able to reach that device on subnet 20 with the above configuration, without having to setup any additional static routes on the switch or on my firewall/router.
Am I missing something or is my understand of L3 routing wrong?
Thanks