LB4M Not forwarding L3 packets to default gateway

Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.

Regis

New Member
Jul 29, 2017
3
0
1
43
Hello!

I've been up all night trying to get the LB4M to do something as simple as have multiple virtual routing interfaces (SVI's aka VLANs that perform layer 3 routing between other SVI's and the default gateway) be able to reach my default gateway.

From the switch, I can ping any WAN IP and I can ping my default gateway, but inside of a vlan, I CANNOT PING MY DEFAULT GATEWAY. My default gateway is PFsense and it was easy to setup as i've been using a Mikrotik cloud router switch just fine WITH XOR load balancing. Here is my running configuration:


!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!Current Configuration:
!
!System Description "FASTPATH Routing"
!System Software Version "5.13.12.14"
!System Up Time "0 days 0 hrs 18 mins 45 secs"
!Additional Packages FASTPATH QOS,FASTPATH Multicast
!Current SNTP Synchronized Time: Not Synchronized
!
network parms 192.168.254.1 255.255.255.240 192.168.254.2
network mgmt_vlan 254
vlan database
vlan 100,200,254-255,300
vlan routing 200
vlan routing 300
vlan routing 100
vlan routing 255
exit
no ip http java
ip ssh server enable
ip ssh protocol 2
no ip telnet server enable
configure
!
ip routing
ip route 0.0.0.0 0.0.0.0 172.16.253.1
lineconfig
no transport input telnet
exit
no spanning-tree
spanning-tree configuration name "60-EB-69-A9-14-A9"
interface 0/1
no shutdown
bandwidth 1000000
routing
ip address 172.16.253.2 255.255.255.252
ip mtu 1500
exit
interface 0/2
no shutdown
no spanning-tree port mode
vlan pvid 200
vlan participation exclude 1
vlan participation include 200
vlan tagging 200
exit
interface 0/6
no shutdown
spanning-tree edgeport
no spanning-tree port mode
ip dhcp filtering trust
vlan pvid 300
vlan participation exclude 1
vlan participation include 300
exit
interface 0/7
no port lacpmode
no shutdown
set igmp
spanning-tree edgeport
vlan pvid 255
vlan participation exclude 1
vlan participation include 255
exit
interface 0/47
no shutdown
set igmp
spanning-tree edgeport
vlan pvid 300
vlan participation exclude 1
vlan participation include 300
exit
interface 0/48
no shutdown
spanning-tree edgeport
vlan pvid 254
vlan participation exclude 1
vlan participation include 254
exit
interface 4/1
no shutdown
bandwidth 10000
routing
ip address 172.16.2.1 255.255.255.248
ip mtu 1500
exit
interface 4/2
no shutdown
bandwidth 10000
routing
ip address 172.16.3.1 255.255.255.0
ip mtu 1500
exit
interface 4/3
no shutdown
routing
exit
interface 4/4
no shutdown
bandwidth 10000
routing
ip address 172.16.255.1 255.255.255.248
ip mtu 1500
exit
router rip
exit
router ospf
exit
service dhcp
ip dhcp excluded-address 172.16.3.1 172.16.3.1
ip dhcp pool "wlan"
dns-server 8.8.8.8 8.8.4.4
network 172.16.3.0 255.255.255.0
exit
exit
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!



Ignore the DHCP items. I can't get that to work at ALL. I've been dealing with Mikrotik, Cisco, and Brocade and after using this switch I feel spoiled...

Does anyone have any idea as to why, from the switch, I can ping all addresses including WAN addresses, but from a client with a static IP set I can only ping hosts and default gateways of only LOCAL vlans but I cannot ping my globally set default gateway?

10 extra points if you can tell me how to get the DHCP server working.

Edit: I hooked my modem directly up to the LB4M (I have business internet with static IP). Again, from the switch I can hit ANYTHING. Communication between vlans is ok, but no vlan can access the Layer 3 interface (o/1) distant end IP. Same behavior as my setup above! This tells me it has to be the switch.

Guys please help. I really don't want to spend 500$ on a Cisco 4948E-F (a switch that I could have had up and running in under half an hour). Thank you!!!
 
Last edited:

Regis

New Member
Jul 29, 2017
3
0
1
43
Actually I have it working, but it's temporary. Apparently, this switch does not support NAT which really surprises me, because even switches on the lo-lo have NAT functionality...anywho

My intention was to redeploy pfsense transparently (filtering via bridge interface where pfsense sits between this switch and my business gateway modem). With this switch, that's not possible (at least without some crazy workaround). The GUI isn't *absolutely* terrible, but leaves a few things to be desired.

I'll post my running config tomorrow.

I wound up creating SVI's where pfsense was the default gateway. That was the only way I could get this switch to route vlan router interface (SVI) subnets.

If anyone has any input, please feel free to share. If someone from google finds this, I suggest you head on over to eBay and spend the extra 60 dollars and get a juniper EX series switch.