INTER-VLAN ROUTING

Hi,
I have created two vlans (600 and 601). Clients of VLAN 600 has static IP address, Clients of VLAN 601 are DHCP assigned.
I want clients in both VLAN to communicate with each other.
From any of the two VLANs I can ping the VLAN addresses 172.16.30.1 and 172.16.28.1 but the clients cannot be accessed.


On the switch side

Sir, you can implement this function based on Dot1q.

Router> enable
Router# configure terminal
#Enable physical interface (no need to configure IP)
Router(config)# interface gigabitEthernet 0/0
Router(config-if-GigabitEthernet 0/0)# no shutdown
Router(config-if-GigabitEthernet 0/0)# exit
#Configure the sub interface of VLAN 10 (encapsulate 802.1Q tags)
Router(config)# interface gigabitEthernet 0/0.10
Router (config subif) # encapsulation dot1Q 10 # associating VLAN 10 tags
Router (config subif) # IP address 192.168.10.1 255.255.255.0 # VLAN 10 gateway
Router(config-subif)# exit
#Configure sub interfaces for VLAN 20
Router(config)# interface gigabitEthernet 0/0.20
Router (config subif) # encapsulation dot1Q 20 # associated VLAN 20 tagReply
Router (config subif) # IP address 192.168.20.1 255.255.255.0 # VLAN 20 gateway
Router(config-subif)# exit

GTAC-Morning replied at 2025-8-19 02:45
Sir, you can implement this function based on Dot1q.

Router> enable

That would be a great solution but the switch does not support CLI Configuration as confirmed in one of my other posts:

Kurt Salvador replied at 2025-8-19 08:44
That would be a great solution but the switch does not support CLI Configuration as confirmed in o ...

Yes sir, I noticed that this is an RG-NBS5100-24GT4SFP switch. I would like to know if we have tested whether the terminals in VLAN 600 and VLAN 601 can access the gateway device respectively?

GTAC-Eric replied at 2025-8-19 08:55
Yes sir, I noticed that this is an RG-NBS5100-24GT4SFP switch. I would like to know if we have tes ...

Yes they do.
All terminals in VLAN 600 and VLAN 601 can
a. Surf the Internet; and
b. Ping the SVI addresses of each other
For a more detailed setup see below. Thank you in advance for the help.

And this is a tracert check:


172.16.30.1 is the address of VLAN 600
172.16.30.2 is the address of a Terminal connected to the VLAN600

Kurt Salvador replied at 2025-8-19 09:09
GTAC-Eric replied at 2025-8-19 08:55
Yes sir, I noticed that this is an RG-NBS5100-24GT4SFP switch.  ...

This has been resolved.
Issue was with my original ACLs
Thank you