Dear All,

I am trying to create VLAN on CentOS 7.6 (by following from: https://www.thegeekdiary.com/centos-...g-using-nmcli/)


nmcli connection already gave me the following:

[root@fw ~]# nmcli connection
NAME UUID TYPE DEVICE
bond0 3fdcf27d-988e-44c0-b682-0cf313d48f29 bond bond0
enp1s0 c0ab6b8c-0eac-a1b4-1c47-efe4b2d1191f ethernet enp1s0
enp6s0 2fb7580e-2f2b-429f-b588-508160ffa70b ethernet enp6s0
enp9s0 5e89013d-2d51-bf83-62f4-c19cb7b1f5c1 ethernet enp9s0
NIC #1 56e9ae2f-6ef1-4fb4-ab6e-d4f6983647b2 ethernet enp7s0
vlan-enp8s0.100 65795c9a-6919-4496-b988-e0e4e325753c vlan enp8s0.100
Wired connection 1 5b3136bd-36bf-3e2e-a201-61b23a30e2e1 ethernet enp8s0

[root@fw ~]#

vlan is on 192.168.100.1 tagged to Managed Switch with VLAN ID 100 (port 3)

my vlan client is on 192.168.100.188 Untagged to Managed Switch with PVID Set to 100

from client still unable to ping

what I missed?

please help..

many thanks in advance

Regards

This could be due to your network configuration outside of this server, e.g. switch config. Use tcpdump to check if packets arrive at enp8s0 at all.

Hi..
now vlan clients are able to ping each other..

now, I need to allow access to some servers on LAN (ie 10.100.100.5 and 10.100.100.6)
my vlan users is on 192.168.100.0/24

where should I put the routing rules? .. (on switch or on centos)?

need help

thanks

Do you mean you have two subnets 10.100.100.0/24 (I am guessing the prefix) and 192.168.100.0/24 on the same network or VLAN, and you want to access 10.100.100.0/24 from the Centos host?

If so, just add an address from the 10.100.100.0/24 subnet to the Centos host.

If not, provide more detail, such as your network topology and from where you want to acess 10.100.100.0/24.

@berndbausch,

thanks..

Q: do you mean you have two subnets 10.100.100.0/24 (I am guessing the prefix) and 192.168.100.0/24 on the same network or VLAN, and you want to access 10.100.100.0/24 from the Centos host?

my VLAN is 192.168.100.0/24
and my LAN is 10.100.100.0/24

I want to access 10.100.100.24 from VLAN (192.168.100.0/24)

== ip address ==

9: enp8s0.100@enp8s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 50:3e:aa:04:e9:e9 brd ff:ff:ff:ff:ff:ff
inet 192.168.100.1/24 brd 192.168.100.255 scope global noprefixroute enp8s0.100
valid_lft forever preferred_lft forever
inet6 fe80::7fe5:411a:7cfb:c07e/64 scope link noprefixroute
valid_lft forever preferred_lft forever

16: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 50:3e:aa:04:f3:e0 brd ff:ff:ff:ff:ff:ff
inet 10.100.100.1/24 brd 10.100.100.255 scope global noprefixroute bond0
valid_lft forever preferred_lft forever
inet6 fe80::eb36:96d2:fbe9:abe1/64 scope link noprefixroute
valid_lft forever preferred_lft forever


== ip route ==
default via 10.100.100.6 dev bond0 proto static metric 300
10.100.100.0/24 dev bond0 proto kernel scope link src 10.100.100.1 metric 300
10.100.100.0/24 via 10.100.100.1 dev enp8s0.100 proto static metric 400
10.100.100.1 dev enp8s0.100 proto static scope link metric 400
192.168.100.0/24 dev enp8s0.100 proto kernel scope link src 192.168.100.1 metric 400
==

bond0 is 10.100.100.1 with gateway 10.100.100.6 --> connected to LAN
enp8s0.100 is VLAN100 192.168.100.1

please help

thanks a lot in advance
Win

Please close this thread, since your problem (unable to ping) is solved and the discussion continues at https://www.linuxquestions.org/quest...rs-4175651763/.