Hot!multiple subnet routing via single interface

Author
Vishalv16
Bronze Member
  • Total Posts : 22
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/08/15 06:31:18
  • Status: offline
2019/10/10 02:34:49 (permalink)
0

multiple subnet routing via single interface

Currently we have setup as L3 have Vlan with multiple subnet 
subnet 1 :10.x.x.x
subnet 2 :172.20.x.x

now currently all system from 172.20.x.x can ping to 10.x.x.x but only 10.x.x.230 ip is not able to ping or access
but from same subnet 10.x.x.x it's pinging & accessible.
no access list is there , IP routing is enable

now setup is that L3(192.168.10.2) is connected to firewall port 7 (192.168.10.1) and ip default route is there for all L3 traffic to targeted to firewall.

now my qu is if i want to pass traffic from firewall of 172.20.x.5 ( a particular ip) to  10.x.x.230  both share the same interface  will it be possible.
if not can any  have information why i am not able to ping 10.x.x.230 from 172.20.x.x ( its A cisco swtich)
note: nothing is block on the system as we are able to access form IP sec tunnel from different location
add-on info : I did tracert 10.x.x.230 its hitting to 172.20.x.253 then packet is dropped which is 172.20.x.x vlan getway
 for other ip like 10.x.x.245 tracert is successful from 172.20.x.x series

Thanks in advance
 
#1

6 Replies Related Threads

    Toshi Esumi
    Expert Member
    • Total Posts : 1929
    • Scores: 168
    • Reward points: 0
    • Joined: 2014/11/06 09:56:42
    • Status: offline
    Re: multiple subnet routing via single interface 2019/10/10 08:52:45 (permalink)
    0
    First, what are the subnet masks /8 and /16? How about port7? /24?
    Then do all GWs of the subnets exist on the FGT? If so 10.x.x.230 should be reachable from all other subnets as long as proper policies exist.
    #2
    Vishalv16
    Bronze Member
    • Total Posts : 22
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/08/15 06:31:18
    • Status: offline
    Re: multiple subnet routing via single interface 2019/10/18 05:15:16 (permalink)
    0
    First, what are the subnet masks /8 and /16? How about port7? /24?
    both have /24 subnet mask

    Then do all GWs of the subnets exist on the FGT? GW are in L3 switch Vlan


    #3
    Toshi Esumi
    Expert Member
    • Total Posts : 1929
    • Scores: 168
    • Reward points: 0
    • Joined: 2014/11/06 09:56:42
    • Status: offline
    Re: multiple subnet routing via single interface 2019/10/18 09:00:56 (permalink)
    0
    So you meant L3 as L3 switch that has two vlans and the GW IPs for all other devices in those vlans, and the FGT is just connecting them to the internet. And you have 172.20.x.5/24 on the FGT, right? Then the FGT doesn't need any other IP and it can get back to all devices not only in 172.20.x.x/24 but also 10.x.x.x/24 as long as you have a static route on the FGT 10.x.x.x/24->172.20.x.1 (on the L3 switch/GW) because all routing/switching is done by the L3 switch.
     
     
     
    #4
    Vishalv16
    Bronze Member
    • Total Posts : 22
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/08/15 06:31:18
    • Status: offline
    Re: multiple subnet routing via single interface 2019/10/21 01:33:49 (permalink)
    0
    none of these are  connected to Fortigate directly L3 has default route  IP route 0.0.0.0 0.0.0.0 192.168.20.2 (which is on L3 switch) & 192.168.20.1 on port connected to firewall.
    so in this case can i route traffic back to same port from which request is coming from  i.e. port7 on  L3 switch & port 3 on FGT now what am trying to do is the traffic of 10.x.x.x coming from L3 to port 3 firewall will go back to port 3 to Access 172.20.x.x.
    #5
    Toshi Esumi
    Expert Member
    • Total Posts : 1929
    • Scores: 168
    • Reward points: 0
    • Joined: 2014/11/06 09:56:42
    • Status: offline
    Re: multiple subnet routing via single interface 2019/10/21 08:58:46 (permalink)
    0
    Just think your FGT as a router. You don't need two physical connections route from the L3 switch through the FGT to get to the internet. You original post said Port7 on FGT has 192.168.20.1/?? and connected to the switch. Use that connection to route all other vlans/subnets to get to/get back from the internet.
    #6
    Vishalv16
    Bronze Member
    • Total Posts : 22
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/08/15 06:31:18
    • Status: offline
    Re: multiple subnet routing via single interface 2019/10/23 03:14:30 (permalink)
    0
    ok i will give it try will let you know the result
    #7
    Jump to:
    © 2020 APG vNext Commercial Version 5.5