At our installation we have a RB3011 with 2 internal LANs and 1 connection to the Internet. Bridge 1 is used to connect to subnet 192.168.0.0/24 and Bridge 2 is used to connecto to subnet 172.16.0.0/20. SFP1 is used to connect to Internet. Subnet 1 is used for administrative work and Subnet 2 is used to connect IP cameras and Network Video Recorders. Attached is the network diagram. Please note that due to physical restrictions, the very last switch is partitioned and connected via tagged VLAN to both subnets. VLAN 100 is used for subnet 192.168.0.0/24 and VLAN 200 is used for subnet 172.16.0.0/20.
Problem:
We can ping the IP cameras connected to VLAN 200 on the very last switch (D-LINK) from any port on subnet 172.16.0.0/20 but we CANNOT PING cameras connected to VLAN 200 on the very last switch from any port on subnet 192.168.0.0/24.
Example:
a) PC connected to port 9 on RB3011 gets DHCP address 172.16.0.90. PC can ping either IP camera on D-LINK switch (IP 172.16.8.135 and 137).
b) Same PC connected to port 5 on RB3011 gets DHCP address 192.168.0.90. PC CANNOT PING either IP camera on D-LINK switch VLAN 200, but CAN PING any other 172.16.0.0/20 IP node that are not connected to the network via VLAN.
Could you please explain why RB3011 is not being able to “route” IP packets to nodes connected after a “remote” VLAN? The VLAN only “exists” on the 3 bottom switches on the diagram.
Thanks an Regards
APOLOM Network Topology.pdf (642 KB)