Hi, hopefully someone will read this and go 'Ah ha, you are missing something obvious - do this..' and I'll be on my way. :) I have an issue whereby a Win 2K server running DHCP which resides on a 192.168.10.x network will issue DHCP to any hosts on the same subnet, but not on any other routed VLAN subnets. Eg. 192.168.0.x or 192.168.20.x networks. The L3 switch I have is set up for inter-VLAN routing with virtual interfaces set - and hosts can reach each other on any of the VLANs to any of the other VLANs currently. They all can access the firewall and and onwards to the net. Outside of the 192.168.10.x network the other hosts work when I set static IP details. Interestingly, if I have a host on the same subnet as the DHCP server (eg with 192.168.10.10 address) it is pingable from any other VLAN (eg from a host at 192.168.20.10) BUT my W2K DHCP server (at 192.168.10.1 for example) is not able to be pinged from that 20.10 machine. The server can be pinged on the same subnet though. This is in a home network lab that I've set up for testing / learning and the 'Server' is actually an old desktop with an old Realtek GB NIC installed and I'm wondering if the issues I'm having come down to the NIC somehow dropping the frames from other VLANs or something like that? I'm no expert so I am sure I am overlooking something really basic here. By the way, the switch is set up to relay the DHCP using IP Helper addresses on each of the VE's, so I'm fairly certain that config is OK (famous last words). Also, I've tried doing the relay through the firewall (placing the server on a DMZ and setting rules between that and the internal lan) - all things point to being a communication problem from 1 VLAN to the specific server address when on another. The only problem is, I don't currently have any other network cards to test in the machine - but if it would solve the issue (assuming that is the issue) then I will buy a new NIC. Can't stretch to a proper server just yet :) Obviously looking for any hints or tips or things to try. Its not a production network obviously so I can break or reconfig anything to solve.TIA.
↧
