Thursday, February 28, 2019

Configuring a Static Route over a VLAN (nxos)

hi,

apologies in advance, i need some assistance with putting static routes on svis on a nexus switch.

the intention is to have some inter vlan routing for a handful of vlans, but traffic involving vms on the dmz routed on a sonicwall. all the vm hosts are connected only to the nexus.

at the moment i have a router on a stick setup with the nexus acting purely as a switch for dmz traffic, it looks ok, vms connected to the switch, on different dmz vlans, can ping each other.

i'd like now to have static routes on the (non-dmz) svi vlans so they pass vm traffic destined for the dmz and beyond to the router, and i'm not even certain that is possible, or if instead, i should be physically connecting the vm hosts to the sonicwall as well as just the nexus, and present dmz vlans from the sonicwall, and the internal vlans from the nexus.

anyway, looking at this document:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/unicast/configuration/guide/l3_cli_nxos/l3_route.html#pgfId-1102964

gives me this example:

switch# configure terminal

switch(config)# feature interface-vlan

swicth(config)# interface vlan 10

switch(config-if)# ip address 192.0.2.1/8

switch(config-if)# ip route 209.165.200.224/27 vlan 10 <===209,165.200.224 is the IPaddress of the interface that is configured on the interface that is directly connected to the switch.

with this explanation:

"Adds an interface static route without a next hop on the switch virtual interface (SVI).

The IP address is the address that is configured on the interface that is connected to the switch"

does this mean the IP address/mask in the last command is that of the routers interface to the switch, with the router interface to the switch (or one of its sub interfaces) being 209.265.200.224/27?



No comments:

Post a Comment