IP Route on the cnMatrix

Hi All,

I’m trying to configure a “static route” on the cnMatrix EX2028-P to have internet. I’ve already created VLANs and configured DHCP servers for each VLAN as you can see on the below CLI. The Switch is connected straight to our Main Router. The aim is to have internet connectivity on the VLANs but I failed to do so after many attempts. Does someone have an idea, please? And also, how can change the Management VLAN IP and the Switch default IP in VLAN 1 ?

I appreciate any help on this. Please see the configs below:

             Cambium Networks cnMatrix EX2028-P Ethernet Switch

Conn-SW001-51A0# sh run

# Building configuration ...
# Software version : 4.1.3-r1
# Model Name       : cnMatrix EX2028-P
# Switch Name      : Conn-SW001-51A0
!
service dhcp-server
ip dhcp pool 10 "Public-WiFi"
  network 10.0.0.10 255.0.0.0 10.255.255.254
  default-router 10.0.0.1
dns-server 5.11.11.5 8.8.8.8
!
ip dhcp pool 16 "Dedicated-Clts"
  network 172.16.0.10 255.255.0.0 172.16.255.254
  default-router 172.16.0.1
dns-server 5.11.11.5 8.8.8.8
!
ip dhcp pool 17 "Shared-Clts"
  network 172.17.0.10 255.255.0.0 172.17.255.254
  default-router 172.17.0.1
dns-server 5.11.11.5 8.8.8.8
!
!
interface mgmt0
ip address 192.168.0.1 255.255.255.0
no shutdown
!
interface vlan 1
# ip address dhcp
# ip address 172.18.30.94 255.255.0.0
no shutdown
!
interface vlan 10
no ip address
no shutdown
!
interface vlan 16
no ip address
no shutdown
!
interface vlan 17
no ip address
no shutdown
!
!
vlan 10
 ports gigabitethernet 0/19 untagged gigabitethernet 0/19
 name Public-WiFi
!
vlan 16
 ports gigabitethernet 0/7 untagged gigabitethernet 0/7
 name Dedicated-Clts
!
vlan 17
 ports gigabitethernet 0/13 untagged gigabitethernet 0/13
 name Shared-Clts
!
interface gigabitethernet 0/7
switchport pvid 16
switchport acceptable-frame-type untaggedAndPriorityTagged
!
interface gigabitethernet 0/13
switchport pvid 17
switchport acceptable-frame-type untaggedAndPriorityTagged
!
interface gigabitethernet 0/19
switchport pvid 10
switchport acceptable-frame-type untaggedAndPriorityTagged
!
!
ip route 192.168.0.0  255.255.255.0 172.18.1.1
!
!
hostname "Conn-SW001-51A0"

thanks in advance.

Example of default route (change ip of default gateway)

ip route 0.0.0.0 0.0.0.0 172.31.9.1

Hello,

I notice the switch is configured as dhcp server with dhcp pools 10,16, and 17. However, there are no local interface vlans that match the network addresses in those pools. In your configuration you need to assign the IP address 10.0.0.1 to VLAN 10, 172.16.0.1 to VLAN 16, and 172.17.0.1 to VLAN 17 in order for DHCP server to work properly.

To access the network you need to add a default route/gateway. Assuming the switch is connected to the main router via VLAN 1, the default gateway would look like this:

config terminal
ip route 0.0.0.0 0.0.0.0 172.18.x.x 

where 172.18.x.x is the interface address of the main router.

1 Like

Hello Tam,

thank you for your answer. I’ve done it all as suggested but I’m still do not have the internet on VLANs.
Please check on the CLI below and let me know if I’ve done anything wrong or I’ve to change or add anything. Thanks for your help.

# Building configuration ...
# Software version : 4.2-r5
# Model Name       : cnMatrix EX2028-P
# Switch Name      : Conn-SW001-51A0
!
service dhcp-server
ip dhcp pool 10 "Public-WiFi"
  network 10.0.0.10 255.0.0.0 10.255.255.254
  default-router 10.0.0.1
dns-server 5.11.11.5 8.8.8.8
!
ip dhcp pool 16 "Dedicated-Clts"
  network 172.16.0.10 255.255.0.0 172.16.255.254
  default-router 172.16.0.1
dns-server 5.11.11.5 8.8.8.8
!
ip dhcp pool 17 "Shared-Clts"
  network 172.17.0.10 255.255.0.0 172.17.255.254
  default-router 172.17.0.1
dns-server 5.11.11.5 8.8.8.8
!
!

interface mgmt0
ip address 192.168.0.1 255.255.255.0
no shutdown
!
interface vlan 1
no ip address
ip address 172.18.1.5 255.255.0.0
no shutdown
!
interface vlan 10
no ip address
ip address 10.0.0.1 255.0.0.0
no shutdown
!
interface vlan 16
no ip address
ip address 172.16.0.1 255.255.0.0
no shutdown
!
interface vlan 17
no ip address
ip address 172.17.0.1 255.255.0.0
no shutdown
!
!
vlan 10
 ports gigabitethernet 0/19 untagged gigabitethernet 0/19
 name "Public-WiFi"
!
vlan 16
 ports gigabitethernet 0/7 untagged gigabitethernet 0/7
 name "Dedicated-Clts"
!
vlan 17
 ports gigabitethernet 0/13 untagged gigabitethernet 0/13
 name "Shared-Clts"
!
interface gigabitethernet 0/7
switchport pvid 16
switchport acceptable-frame-type untaggedAndPriorityTagged
!
interface gigabitethernet 0/13
switchport pvid 17
switchport acceptable-frame-type untaggedAndPriorityTagged
!
interface gigabitethernet 0/19
switchport pvid 10
switchport acceptable-frame-type untaggedAndPriorityTagged
!
!
ip route 0.0.0.0  0.0.0.0 172.18.1.1
!
!
ip name-server ipv4 8.8.8.8
!
hostname "Conn-SW001-51A0"
end

Does your gateway knows about that networks on your matrix switch (does it have routes to that networks)?
How did you configure uplink port on matrix and on the gateway device?

As suggested by mixig, please log into your gateway (172.18.1.1) device and ping 10.0.0.1, 172.16.0.1, and 172.17.0.1.

This is how I’ve done configs on the Switch.
The cnMatrix is straight connected to the Router(172.18.1.1/16) which is its gateway.
then the vlan1 on the switch has an IP route (ip route 0.0.0.0 0.0.0.0 172.18.1.1) only.
So VLAN1 is on 172.18.0.0/16
VLAN 16: 172.16.0.0/16
VLAN 17: 172.17.0.0/16
VLAN 10: 10.0.0.0/8

VLAN1 only has internet connectivity and others no, despite the “IP routing” config

Can you ping other addresses from other subnets on the the switch from that gateway? !f not, there is no return route on that gateway.

1 Like

Okay. i see what you mean.
let me try it then. will let you know in case…
thank you

Hi Mixig,

I’ve been able to ping Vlans, 10.0.0.1, 172.16.0.1, and 172.17.0.1 but from those Vlans, I’m still not able to get internet. All the VLANs are able to ping 172.18.1.1 which Is the gateway for vlan 1, but only VLAN 1 has internet.
there must be something I’m missing for sure. DHCP servers provide IPs for each VLAN but no internet connectivity.
I may ask too much but please, is it possible to guide me step by step-by-step if you don’t mind?

thanks.

Hi William,

I can also assist you during a remote session. Please raise a Cambium Support ticket, and send me the ticket number.

Thanks,
Tam

Hi Tam,

thanks for your availability.
Here is the ticket number #292421

Did you manage to solve your issue?

Hi,
unfortunately no. i still have the ip routing issue on VLANs.
i had share my ticket to Tam so that he can assist me on a remote assistance.
I’m still waiting