Hot Downloads

Welcome, Guest
Username: Password: Remember me
  • Page:
  • 1

TOPIC: VLAN routing

VLAN routing 10 years 5 months ago #24768

I am currently in the process of testing my new Watchguard firewall and I need anyone's assistance in configuring my Cisco 4006 with sup II/III engine. I have two firewalls connected, one test and one production. I have 5 VLANs (,,,, and would like to know how to configure one of the vlan to go out to the internet using the test firewall ( The gateway of last resort is currently configured to go out of the production firewall (

Thanks you for any advice or assistance.

Please Log in to join the conversation.

Re: VLAN routing 10 years 5 months ago #24784

  • Chris
  • Chris's Avatar
  • Offline
  • Administrator
  • Administrator
  • Posts: 1447
  • Karma: 8
  • Thank you received: 13

Configuring interVlan routing is quite simple.

1) Assign an IP address for every VLAN interface you've configured on your 4006.
2) in global configuration mode (config#) enable ip routing by entering the command "ip routing"
3) Assign a the ports required, to each VLAN you've created.
4) Each host must have as a 'gateway', the ip address of the vlan interface belonging on the 4006.

If you require specific commands e.t.c, please let us know.


Please Log in to join the conversation.

Chris Partsenidis.
Founder & Editor-in-Chief

Re: VLAN routing 10 years 5 months ago #24787

Thanks for the Reply Chris. All the VLAN was already assigned an IP and gateway and IP routing was also enabled. I did not explain my current configuration but, here it is. I have a Cisco 29xx and Cisco 35xx layer 2 switch connected to a CISCO Catalyst 4006 router. I have 10 VLANs not 5 with two firewall, test ( and production ( connected directly to my 4006. Here is my current route:

S 2xx.153.217.0/24 [1/0] via 1xx.175.1.39
S 2xx.1.126.0/24 [1/0] via
C 1xx.175.0.0/16 is directly connected, Vlan175
S 2xx.153.216.0/24 [1/0] via 1xx.175.1.39
S 1xx.168.10.0/24 [1/0] via is variably subnetted, 10 subnets, 2 masks
C is directly connected, Vlan80
C is directly connected, Vlan175
C is directly connected, Vlan30
C is directly connected, Vlan20
C is directly connected, Vlan1
C is directly connected, Vlan10
C is directly connected, Vlan70
C is directly connected, Vlan50
C is directly connected, Vlan40
C is directly connected, Vlan175
S 2xx.166.193.0/24 [1/0] via 1xx.175.1.39
S 2xx.146.91.0/24 [1/0] via 1xx.175.1.39
S* [1/0] via

Chris, are you suggesting that I changed my vlan gateway from to Here is the current VLAN30 settings:

ip dhcp pool vlan30
netbios-node-type p-node

What are the steps and command so I can set VLAN30 internet traffic to go out of the test firewall and not break routes to all other VLAN's? Thanks in advance for your assistance and direction.


Please Log in to join the conversation.

  • Page:
  • 1
Time to create page: 0.147 seconds


Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V


  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup