Hot Downloads



The forum is in read only mode.
Welcome, Guest
Username: Password: Remember me
  • Page:
  • 1

TOPIC: VLAN routing

VLAN routing 11 years 1 month ago #24768

I am currently in the process of testing my new Watchguard firewall and I need anyone's assistance in configuring my Cisco 4006 with sup II/III engine. I have two firewalls connected, one test and one production. I have 5 VLANs (,,,, and would like to know how to configure one of the vlan to go out to the internet using the test firewall ( The gateway of last resort is currently configured to go out of the production firewall (

Thanks you for any advice or assistance.

Re: VLAN routing 11 years 1 month ago #24784

  • Chris
  • Chris's Avatar
  • Offline
  • Administrator
  • Administrator
  • Posts: 1447
  • Karma: 8
  • Thank you received: 13

Configuring interVlan routing is quite simple.

1) Assign an IP address for every VLAN interface you've configured on your 4006.
2) in global configuration mode (config#) enable ip routing by entering the command "ip routing"
3) Assign a the ports required, to each VLAN you've created.
4) Each host must have as a 'gateway', the ip address of the vlan interface belonging on the 4006.

If you require specific commands e.t.c, please let us know.

Chris Partsenidis.
Founder & Editor-in-Chief

Re: VLAN routing 11 years 1 month ago #24787

Thanks for the Reply Chris. All the VLAN was already assigned an IP and gateway and IP routing was also enabled. I did not explain my current configuration but, here it is. I have a Cisco 29xx and Cisco 35xx layer 2 switch connected to a CISCO Catalyst 4006 router. I have 10 VLANs not 5 with two firewall, test ( and production ( connected directly to my 4006. Here is my current route:

S 2xx.153.217.0/24 [1/0] via 1xx.175.1.39
S 2xx.1.126.0/24 [1/0] via
C 1xx.175.0.0/16 is directly connected, Vlan175
S 2xx.153.216.0/24 [1/0] via 1xx.175.1.39
S 1xx.168.10.0/24 [1/0] via is variably subnetted, 10 subnets, 2 masks
C is directly connected, Vlan80
C is directly connected, Vlan175
C is directly connected, Vlan30
C is directly connected, Vlan20
C is directly connected, Vlan1
C is directly connected, Vlan10
C is directly connected, Vlan70
C is directly connected, Vlan50
C is directly connected, Vlan40
C is directly connected, Vlan175
S 2xx.166.193.0/24 [1/0] via 1xx.175.1.39
S 2xx.146.91.0/24 [1/0] via 1xx.175.1.39
S* [1/0] via

Chris, are you suggesting that I changed my vlan gateway from to Here is the current VLAN30 settings:

ip dhcp pool vlan30
netbios-node-type p-node

What are the steps and command so I can set VLAN30 internet traffic to go out of the test firewall and not break routes to all other VLAN's? Thanks in advance for your assistance and direction.

  • Page:
  • 1
Time to create page: 0.109 seconds


Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V


  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup