XGS1930 change management VLAN

nielsscheldeman

I have a setup with 4 XGS1930-52HP switches and 3 GS1900-8HP switches. I want to move them to a separate management VLAN. Created VLAN11 and moved the GS1900 switches to that management VLAN. Created a rule on firewall so that 1 of my servervm's can access that VLAN. Works fine for the GS1900's

But If I add IP-Address with VLAN ID and change default gateway on XGS1930 I'm unable to access the switch from my VM on the new IP. If I set my VM in VLAN11 it works fine. Because the GS1900 series work fine I don't think it's firewall policy problem, but routing problem.

However if I ping from the other network to the switch's new IP it works fine and also telnet 443 works fine.

Zyxel_Melen

Hi @nielsscheldeman

This appears to be a triangular/asymmetric route. May I know if your XGS1930 is still having the original VLAN and IP address? If so, this could be a case of the triangular/asymmetric route. Please try to remove the original VLAN's IP address first. Or, configuring SNAT rules on the firewall.

Zyxel_Melen

Hi @nielsscheldeman

This appears to be a triangular/asymmetric route. May I know if your XGS1930 is still having the original VLAN and IP address? If so, this could be a case of the triangular/asymmetric route. Please try to remove the original VLAN's IP address first. Or, configuring SNAT rules on the firewall.

nielsscheldeman

https://community.zyxel.com/en/discussion/comment/79092#Comment_79092

Yes original IP is still there, I'm doing this remote and wanted to be sure that I'm not shutting myself out…

nielsscheldeman

Indeed If I only use the new IP, it's fine.