891 router - no IP on VLAN 2

Hi all!

I am) very new to all this and I have to configure a router cisco 891. So far I was doing ok but I have a problem to connect devices on the vlan 2.

I don't want to assign vlan according to the port, the devices are able to score their own packages.

For the moment, when I connect a 'classic' device, it will on the vlan 1 and get an ip address from my pool vlan 1. Very well. Problems begin when I tell the device to mark his package as belonging to the vlan 2. As soon as I do this, I just can't get any address from my dhcp assigned IP.

Here is my config file, someone has an idea? :)

 Building configuration... Current configuration : 2978 bytes ! ! Last configuration change at 14:20:32 UTC Thu Oct 15 2015 by tchavrier version 15.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Cisco891 ! boot-start-marker boot-end-marker ! aqm-register-fnf ! enable secret 5 XXXXXXXXXXXXXXXXXXXXXXXXX enable password XXXXXXXXXXXXXXXXXXXXXXXXX ! no aaa new-model ! ! ! ! ! ! ! ip dhcp excluded-address 172.26.1.1 172.26.1.49 ip dhcp excluded-address 172.26.1.100 172.26.1.254 ip dhcp excluded-address 10.10.10.1 10.10.10.49 ip dhcp excluded-address 10.10.10.100 10.10.10.254 ip dhcp excluded-address 10.10.20.1 10.10.20.49 ip dhcp excluded-address 10.10.20.100 10.10.20.254 ! ip dhcp pool vlan1pool network 172.26.1.0 255.255.255.0 default-router 172.26.1.254 dns-server 208.67.220.220 ! ip dhcp pool vlan2pool network 10.10.10.0 255.255.255.0 default-router 10.10.10.254 dns-server 208.67.222.222 ! ip dhcp pool vlan3pool network 10.10.20.0 255.255.255.0 default-router 10.10.20.254 dns-server 208.67.222.222 ! ! ! ip cef no ipv6 cef ! ! ! ! ! multilink bundle-name authenticated ! ! ! ! ! ! ! license udi pid C891F-K9 sn FCZ1939917U ! ! username XXXXXXXXXXXXXXXXXXX privilege 15 secret 5 XXXXXXXXXXXXXXXXXXXXXXXXXXXX. ! ! ! ! ! no ip ftp passive ! ! ! ! ! ! ! ! ! ! interface BRI0 no ip address encapsulation hdlc shutdown isdn termination multidrop ! interface FastEthernet0 ip address dhcp ip nat outside ip virtual-reassembly in duplex auto speed auto ! interface GigabitEthernet0 no ip address ! interface GigabitEthernet1 no ip address ! interface GigabitEthernet2 no ip address ! interface GigabitEthernet3 no ip address ! interface GigabitEthernet4 no ip address ! interface GigabitEthernet5 no ip address ! interface GigabitEthernet6 no ip address ! interface GigabitEthernet7 no ip address ! interface GigabitEthernet8 ip address dhcp ip nat outside ip virtual-reassembly in duplex auto speed auto ! interface Vlan1 ip address 172.26.1.254 255.255.255.0 ! interface Vlan2 ip address 10.10.10.254 255.255.255.0 ! interface Vlan3 ip address 10.10.20.254 255.255.255.0 ! interface Async3 no ip address encapsulation slip ! ip forward-protocol nd ip http server ip http authentication local no ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ! ip flow-top-talkers top 10 sort-by bytes cache-timeout 60000 ! ! ! ! control-plane ! ! ! mgcp behavior rsip-range tgcp-only mgcp behavior comedia-role none mgcp behavior comedia-check-media-src disable mgcp behavior comedia-sdp-force disable ! mgcp profile default ! ! ! ! ! line con 0 no modem enable line aux 0 line 3 modem InOut speed 115200 flowcontrol hardware line vty 0 4 privilege level 15 password haricotmarteaulitjaune login local transport input telnet transport output telnet line vty 5 15 password haricotmarteaulitjaune login local transport input telnet transport output telnet ! scheduler allocate 20000 1000 ! end

Thank you!

Hello

If your devices are marking their own packages (IE VLAN2) then the switchport will reject the.

Without any explicit configuration on the switchports, they will be configured with native VLAN1. This means any packet received on that switchport who doesn't have a tag of VLAN is tagged with VLAN ID 1. All packages with tags will be ignored, but since you have not configured for trunking they will be discontinued.

To make it work, you must add the following:

 ! int range gi0-8 switchport trunk native vlan 1 switchport trunk allowed vlan all !

This would allow to the unmarked packages be sent (VLAN1), but would also treat packages that are being scored by connected devices (providing configuring VLANS exist on the router).

Hope that helps.

see you soon,

SEB.

Tags: Cisco Support

Similar Questions

  • Router-on-a-stick VLAN possible with SRP547w & SG200-26?

    According to the title, I need just 3 or 4 VLANS with communication inter - VLAN enabled.

    In the past I used this router with every internal switch set to one VLAN port different with each in turn hooked up to a switch.  This did work for me, but I want to dip my toe in the world of .1q VLAN and acquire additional flexibility and cleanliness.

    Kind regards

    Brandon.

    Hi Brandon,.

    On the RPS, navigate;

    • The interface Setup > LAN > Configuration of VLAN
    • Create the VLAN with the attribute as you want
    • Below are 2 sections, VLAN and added interface, add the interfaces to the port

    The SX200 switch, you will need to assign a port as a vlan native containing the tag VLAN untagged and all others.

    • Connect the SX200 and access management of VLANS
    • Create the desired VLAN
    • Access the belonging to a VLAN ports, change the proposed port connect to the RPS, use the arrow on the slide to add the VLAN to the port as members marked

    * Ensure that connection ports are port trunk allowed several VLANS to be set on the link. An access port allows 1 membership alone a VLAN.

    Hi Andrew! You me before I can submit

    -Tom

    Post edited by: Thomas Watts

  • IP over different WAN, source routing ip range? [cisco 891]

    Hi all!

    Here I am again asking for help! :)

    Here's the goal: I want a set of computers to use a WAN and another using the other WAN based on the IP address range.

    I use a router cisco 891. Fastethernet0 is a WAN, GigabitEthernet8 is the other WAN and gigabitethernet 0 to 7 are 8 switch of the router ports.

    From now on, I have my two internet access works very well, each of them is connected to a WAN port on my router. I have no problem have all my computers using a WAN or the other, or even load balancing between them, but what I want is to fix some computers with internet access and the other computer to use other internet access.

    I don't know how to do this, I looked in the delivery by source IP address, but I don't really know how to do. I saw something on the basis of routing policy, but I can only apply these policies on incoming packets that I seem not to be able to apply these policies to one of the switch port of the router. I would need to use the WAN port to connect my incoming LAN in, but then I would not be enough WAN port for both of my internet connections.

    Internet gateway #1 is 172.26.2.254

    #2 connection gateway is 192.168.1.254

    Here is my current config:
    I understand why I have bad connection whith this config since it is load balancing between the road two default and send only one of my two wan according to the INVESTIGATION period, but I don't know what to do to say precilesy Beach, the beach of IP #2 and IP #1 to go go here.

     Cisco891(config)#do sh run Building configuration... Current configuration : 3833 bytes ! ! Last configuration change at 15:11:43 UTC Tue Oct 20 2015 by *********** ! NVRAM config last updated at 14:58:11 UTC Tue Oct 20 2015 by *************** ! NVRAM config last updated at 14:58:11 UTC Tue Oct 20 2015 by ************** version 15.3 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname Cisco891 ! boot-start-marker boot-end-marker ! aqm-register-fnf ! enable secret 5 ************************/ enable password ************************ ! no aaa new-model ! ! ! ! ! ! ! ip dhcp excluded-address 172.26.1.1 172.26.1.49 ip dhcp excluded-address 172.26.1.100 172.26.1.254 ip dhcp excluded-address 10.10.20.1 10.10.20.49 ip dhcp excluded-address 10.10.20.100 10.10.20.254 ! ip dhcp pool vlan1pool network 172.26.1.0 255.255.255.0 default-router 172.26.1.254 dns-server 208.67.222.222 208.67.220.220 ! ! ! ip domain name lnc360.fr ip name-server 208.67.222.222 ip name-server 208.67.220.220 ip cef no ipv6 cef ! ! ! ! ! multilink bundle-name authenticated ! ! ! ! ! ! ! license udi pid C891F-K9 sn ******************************* ! ! username ******************** privilege 15 secret ************************************* ! ! ! ! ! no ip ftp passive ip ssh time-out 60 ip ssh logging events ip ssh version 2 ! ! ! ! ! ! ! ! ! ! interface BRI0 no ip address encapsulation hdlc shutdown isdn termination multidrop ! interface FastEthernet0 ip address 192.168.1.1 255.255.255.0 ip nat outside ip virtual-reassembly in duplex auto speed auto ! interface GigabitEthernet0 switchport mode trunk no ip address ! interface GigabitEthernet1 switchport mode trunk no ip address ! interface GigabitEthernet2 switchport mode trunk no ip address ! interface GigabitEthernet3 switchport mode trunk no ip address ! interface GigabitEthernet4 switchport mode trunk no ip address ! interface GigabitEthernet5 switchport mode trunk no ip address ! interface GigabitEthernet6 switchport mode trunk no ip address ! interface GigabitEthernet7 switchport mode trunk no ip address ! interface GigabitEthernet8 ip address 172.26.2.10 255.255.255.0 ip nat outside ip virtual-reassembly in duplex auto speed auto ! interface Vlan1 ip address 172.26.1.254 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface Vlan2 ip address 10.10.10.254 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface Async3 no ip address encapsulation slip ! ip forward-protocol nd ip http server ip http authentication local no ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ! ! ip nat inside source list LAN_PCs interface GigabitEthernet8 overload ip nat inside source list LAN_servers interface FastEthernet0 overload ip route 0.0.0.0 0.0.0.0 172.26.2.254 ip route 0.0.0.0 0.0.0.0 192.168.1.254 ! ip access-list extended LAN_PCs deny ip 172.26.1.0 0.0.0.31 any deny ip 172.26.1.112 0.0.0.15 any deny ip 172.26.1.240 0.0.0.15 any permit ip 172.26.1.0 0.0.0.255 any ip access-list extended LAN_servers permit ip 10.10.10.0 0.0.0.255 any permit ip 172.26.1.0 0.0.0.31 any permit ip 172.26.1.112 0.0.0.15 any permit ip 172.26.1.240 0.0.0.15 any ! ! ! control-plane ! ! ! mgcp behavior rsip-range tgcp-only mgcp behavior comedia-role none mgcp behavior comedia-check-media-src disable mgcp behavior comedia-sdp-force disable ! mgcp profile default ! ! ! ! ! line con 0 no modem enable line aux 0 line 3 modem InOut speed 115200 flowcontrol hardware line vty 0 4 privilege level 15 password 7 ****************************************** login local transport input ssh transport output ssh line vty 5 15 password 7 *********************************************** login local transport input telnet transport output telnet ! scheduler allocate 20000 1000 ntp update-calendar ntp server 0.europe.pool.ntp.org ! end

    Thank you!

    Hello

    Apply the ACB on the SVI strategy ' sof the VLAN

    int vlan 1
    intellectual property policy map route ACB

    int vlan 2
    intellectual property policy map route ACB

    RES

    Paul

  • N2048 level 3 - routing only some VLAN?

    Imagine this scenario - simplified our desired mounting

    VLAN 1 - Server vlan 192.168.1.0/24

    VLAN 2 - customer VLANs 192.168.2.0/24

    VLAN 50 - guest wifi vlan 192.168.50.0/24

    We want to move freely between VLANS and VLAN 1 2 but prevents all movement of traffic at VLAN50

    I have read and understand this guide routing VLAN from Dell , but this covers only the scenario when you are happy for everything to flow between all the VLANS.

    I have a few questions that it would be great to have some help with

    (1) global routing - we believe that if we

    IP routing

    This will bring all the VLAN is not what we want - correct?

    (2) However, if there is no IP address defined on the interface VLAN 50, it won't drive, correct? So as not long that no VLAN we want to isolate has an IP address assigned to that VLAN, no routing?

    Thus, we could then issue a command "ip Routing", and we would get what we want, provided never configure us an IP address on the interface VLAN 50. What we'll call "Solution A" - how?

    (3) static routing - if we emit static routes to specific subnets this will allow all the VLANS whose defined on the interface IP address to route their

    for example if I do

    IP route 192.168.1.0 255.255.255.0 192.168.1.1

    then VLAN 2 VLAN 1, but can can 50 VLAN

    Is this fair?

    (4) However, if, I ever create a route to VLAN 50, then although traffic could channel VLAN 50 to VLAN 1, answers could never return once again - right?

    We will call this B - walk-it solution?

    (5) if we wanted to make static routes that only apply in some VLAN it looks as if DNOS has a setting of vlan for the command from road ip - but I can find no explanation of exactly what it means or how it works?

    We will call this solution C - would this work?

    (6) Finally, assuming that all of these solutions work, which is the best solution?

    Thank you.

    The # ip routing command, performs the overall active routing. For routing to occur the VLAN must have an IP address. You are right, if the VLAN is L2 only and does not have an IP assigned to it, deals with this VLAN will not able to reach the other VLANs.

    Static routes will be used to direct traffic to the next network hop. This is usually used to indicate traffic in your firewall. Static routes would not be to direct traffic to a VIRTUAL LAN to another VIRTUAL LAN on the same switch.

    What camera do you use as your firewall? It is not uncommon to set up a similar scenario to your solution A. leave the road to switch between server and client VLAN. Then leave comments VLAN in L2 and the trunk of the VLAN to the firewall. Then let the firewall manage access to resources on the network and internet guests.

    Another option would be to enable routing between all the VLANS, but then apply an ACL to restrict access on the guest VLAN. Page 629 of the user's guide begins detailing ACL, how they work and how they are configured.

    http://Dell.to/1WFiTWT

  • VLAN routing when you use a dell computer 6224

    Hello

    I have a dell switch 6224 with 2 VLANS.

    Management-192.168.1.111/24 Ports 1/g1-1 / g12

    Vlan150-192.168.150.111/24 Ports 1/g13-1 / g24

    I have two ports on the router with the ip address to communicate with the switch (192.168.1.2 and 192.168.150.2). Vlan1 works very well without any problems. I can ping from 192.168.150.2 to 192.168.150.111. I set up the laptop with the ip 192.168.150.113 and plugged in the Vlan150 on port 1/g19. I can not ping to 192.168.150.113 192.168.150.2. The traffic is not going through the Vlan150 in the switch.

    What Miss me? This is my first time setting up a VLAN on these switches. Help, please.

    Config

    console #show running-config

    ! Current configuration:

    ! Description of the system "PowerConnect 6224, 3.3.8.2, VxWorks 6.5.

    ! 3.3.8.2 system software version

    ! Passage mode is configured as disabled

    !

    Configure

    database of VLAN

    VLAN 150

    VLAN 150 1 routing

    subnet of VLAN association 192.168.150.0 255.255.255.0 150

    output

    battery

    1 1 member

    output

    192.168.1.111 IP address 255.255.255.0

    by default-gateway IP 192.168.1.2

    IP routing

    interface vlan 150

    name "VLAN150".

    Routing

    IP 192.168.150.111 255.255.255.0

    output

    level of 00436d6ae2ed27bbe87fa24b73b5a249 user name 'admin' password encrypted 15

    line of AAA authentication login "defaultList".

    the AAA authentication enable line 'enableList '.

    line console

    00436d6ae2ed27bbe87fa24b73b5a249 encrypted password

    output

    line telnet

    connection of authentication defaultList

    00436d6ae2ed27bbe87fa24b73b5a249 encrypted password

    output

    ssh line

    connection of authentication defaultList

    00436d6ae2ed27bbe87fa24b73b5a249 encrypted password

    output

    !

    interface ethernet 1/g1

    switchport mode general

    output

    !

    interface ethernet 1/g2

    switchport mode general

    output

    !

    interface ethernet 1/g3

    switchport mode general

    output

    !

    interface ethernet 1/g4

    switchport mode general

    output

    !

    interface ethernet 1/g5

    switchport mode general

    output

    !

    interface ethernet 1/g6

    switchport mode general

    output

    !

    interface ethernet 1/g7

    switchport mode general

    output

    !

    interface ethernet 1/g8

    switchport mode general

    output

    !

    interface ethernet 1/g9

    switchport mode general

    output

    !

    interface ethernet 1/g10

    switchport mode general

    output

    !

    interface ethernet 1/g11

    switchport mode general

    output

    !

    interface ethernet 1/g12

    switchport mode general

    output

    !

    interface ethernet 1/g13

    switchport mode general

    VLAN allowed switchport General add 150

    switchport vlan allowed General remove 1

    output

    !

    interface ethernet 1/g14

    switchport mode general

    VLAN allowed switchport General add 150

    switchport vlan allowed General remove 1

    output

    !

    interface ethernet 1/g15

    switchport mode general

    VLAN allowed switchport General add 150

    switchport vlan allowed General remove 1

    output

    !

    interface ethernet 1/g16

    switchport mode general

    VLAN allowed switchport General add 150

    switchport vlan allowed General remove 1

    output

    !

    interface ethernet 1/g17

    switchport mode general

    VLAN allowed switchport General add 150

    switchport vlan allowed General remove 1

    output

    !

    interface ethernet 1/g18

    switchport mode general

    VLAN allowed switchport General add 150

    switchport vlan allowed General remove 1

    output

    !

    interface ethernet 1/g19

    switchport mode general

    VLAN allowed switchport General add 150

    switchport vlan allowed General remove 1

    output

    !

    interface ethernet 1/g20

    switchport mode general

    VLAN allowed switchport General add 150

    switchport vlan allowed General remove 1

    output

    !

    interface ethernet 1/g21

    switchport mode general

    VLAN allowed switchport General add 150

    switchport vlan allowed General remove 1

    output

    !

    interface ethernet 1/g22

    switchport mode general

    VLAN allowed switchport General add 150

    switchport vlan allowed General remove 1

    output

    !

    interface ethernet 1/g23

    switchport mode general

    VLAN allowed switchport General add 150

    switchport vlan allowed General remove 1

    output

    !

    interface ethernet 1/g24

    switchport mode general

    VLAN allowed switchport General add 150

    switchport vlan allowed General remove 1

    output

    activate 00436d6ae2ed27bbe87fa24b73b5a249 encrypted password

    output

    Hello

    The laptop is probably sending unmarked packages and so you need to change the PVID on the interface so that the unmarked packages are assigned to 150 of VLAN.

    switchport General pvid 150

    FTP://FTP.Dell.com/manuals/all-products/esuprt_ser_stor_net/esuprt_powerconnect/PowerConnect-6248_Reference%20Guide_en-us.PDF page 600

  • Problem routing VLAN

    Reference Dell 6024

    The switch has several local networks VIRTUAL, including VLAN 1 172.16.0.0 255.255.0.0 and VLAN 50 172.16.8.0 255.255.255.0. In the past, we have not need route between all the VLANS, but now I want to access the VLAN 50 of VLAN 1. All VLANS have a static IP address in the switch. Some configs:

    SH ip route
    Maximum parallel paths: 4 (4 after reboot)

    Code: C - connected, S - static, R - RIP, O - OSPF, E - OSPF external

    C 172.16.0.0/16 is directly connected vlan 1
    C 172.16.5.0/24 is directly connected vlan 2
    C 172.16.8.0/24 is directly connected vlan 50
    C 192.168.7.0/24 is directly connected vlan 40

    SH vlan

    VLAN name Ports type permission
    ---- ----------------- --------------------------- ------------ -------------
    1 1 g (1, 3-12, 17-24), ch(1-7) other required
    2 phone switch g (13, 15-16, 24) permanently required
    40 g (23-24) IDN Vlan permanent required
    50 g (2,14,17) VLAN Voip permanent required

    The router configuration
    -----------------------------

    interface ethernet g18
    Description ConfCtr
    output
    serial interface ethernet g (1-2, 17)
    switchport mode general
    output
    serial interface ethernet g(23-24)
    switchport mode trunk
    output
    database of VLAN
    VLAN 2,40,50
    output
    interface ethernet g2
    pvid switchport General 50
    output
    serial interface ethernet g (13: 15-16)
    switchport access vlan 2
    output
    interface ethernet g24
    switchport trunk allowed vlan add 2
    output
    serial interface ethernet g(23-24)
    switchport trunk allowed vlan add 40
    output
    interface ethernet g2
    VLAN allowed switchport General add 50 unidentified
    output
    interface ethernet g14
    switchport access vlan 50
    output
    interface ethernet g17
    VLAN allowed switchport General add 50
    output
    interface vlan 2
    name 'phone switch '.
    output
    interface vlan 40
    name "Vlan IDN.
    output
    interface vlan 50
    the name "Voip VLAN.
    output
    interface vlan 1
    IP 172.16.0.39 255.255.0.0
    output
    interface vlan 2
    IP 172.16.5.2 255.255.255.0
    output
    interface vlan 40
    IP 192.168.7.43 255.255.255.0
    output
    interface vlan 50
    IP 172.16.8.2 255.255.255.0
    output
    the 172.16.8.2 interface IP
    broadcast-address 0.0.0.0
    directed broadcast to the
    output
    > Gigabit Ethernet ports
    =============================
    > no stop
    > 1000 speed
    > full duplex
    > negotiating
    > flow control to the wide
    > auto mdix
    > no pressure
     
    > interface vlan 1
    > interface port-channel 1-7
     
    > no router RIP
     
    > do not allow no router OSPF
     
    > spanning tree
    > spanning tree mode PLEASE

    > basic qos
     
    > Host OOB Configuration
    -------------------------
     
    > out-of-band-eth interface
    > no stop
    > 100 speed
    > full duplex
    > negotiating
    > flow control to the wide
    > no pressure
    > output

    I can't ping from VLAN 1 to 50 of VLAN. Based on another poster who said that the VLAN 1 is not routable, I configured a port to VLAN 2 and tried to do a ping of 50 VLAN port, without success. I am really puzzled. There seems to be a fairly common config and I'm sure it's something really simple... but what? »


  • Inter routing VLANs with this config

    Hi all

    I'm looking for clarification, I understand two Vlan need a device to layer 3 to enable routing between them.

    I wanted so check if this set up works or not.

    Router - Switch A-SwitchB-SwitchC

    All the link between router and switch are ports of junction and allows said we have VLAN 10 to 20 on switch C

    And two for the router interface to these VLANs.

    Device of two different VLANS on switch C can communicate?

    If this is not why. I guess, I'm rationalizing is traffic belonging to VLAN 10 crossbar router base and scope and is achieved through the trunk even join router

    Please specify.

    Thank you

    L

    Yes they should be able to communicate if done correctly. VLAN 10 and 20 must be resources shared by all switches to the router with the L3 interface.

    So for host on VLAN 10 to get a host on VLAN 20, the package would take VLAN 10 overall of all switches to the router, where it would get "routed" to VLAN 20 and again on the switches to the host to VLAN 20.

  • Catalyst 6500 Inter-VLAN routing

    I have a Cisco 6500 switch and I have a question about routing inter - vlan and the command "IP ROUTING".  I use dial-up virtual interfaces (I.e. int vlan 2, int vlan 3, etc.), but I noticed that I don't have the IP ROUTING enabled on my switch but I can route properly between the VLANS.  I have even a little ports that I have configured with the command "no switchport" and I assigned an IP address to these ports.  On routed ports, there is another switch on the other side configured with an IP address and I am able to ping and route traffic to the other network.

    I did some research on this and all the documentation I am able to find talk of how you must enable IP ROUTING to route between the VLANS.  I guess that this should only be done if you go to the road to other not directly connected networks.

    http://www.ccnpguide.com/CCNP-switch-642-813-inter-VLAN-routing/

    http://www.Cisco.com/c/en/us/TD/docs/iOS-XML/iOS/lanswitch/configuration/12-2Sx/lsw-12-2Sx-book/lsw-VLAN-cfg-RTG.html#GUID-F5181D47-F44E-4F01-92E4-9132097BA333

    Can someone clarify this for me?

    For the 6500 Series, IP routing is enabled by default, that so all VLAN can communicate with each other.  You don't need to activate as you do for other switches (IE 3560, 3750, 3850, etc...)

    HTH

  • I would like to help with what I believe, it is a problem of routing VLANS on a SLM2008 and RVS4000

    Please see attached Word documentfor a full description.  Thank you!

    Hi Michael,

    All those who say the VLANS within the first hour is a person much smarter than me.

    I have to admit with great humility, I think it took me nagging questions for some patients (AR) and weeks and weeks until finally I have a bit of understanding of the functioning of VLAN.

    So don't feel concerned, many people there are in the same "boat" as you.

    But VLAN, when you get the feel for them, are so so helpful.

    I like under 'acceptable frame type' tick 'all '.

    The value PVID tells me basically what VLAN not signposted port is underway.

    This means that in the image below, 3 ports, 6-8 will be I hope, expecting to received and transmit frames Ethernet labeled with a tag VLAN 2.

    But on the diagram above, I can now make room for the following table.

    without tag vlan tagged vlan

    3-1-2 switch port

    6 2 2 switch port can not be marked and unidentified on the same switch port

    7 2 2 switch port can not be marked and unidentified on the same switch port

    8-1-2 switch port

    In the diagram above, I can see that 1 and 2 switch ports are ifor untagged VLAN 3 so the packages roll inside the switch for VLAN 3 will have their VLAN TAGs removed from the Ethernet frame as the traver packets on the switch to an IP host.

    I also see that the switch port 3 unidentified in the VLAN 1, but you have set the acceptable frame on tagged only type.

    Unless I read this all in fact wrong.

    Note: I have to admit that has the big brother to the SG200 SG300 series switch,

    Don't forget about PC / security cameras (except Cisco, hey I'm system engineer have to give my equipment fitted with a plug) in most of the cases do not send frames labeled Ethernet in the switch, which is why I like the idea of accepting all types of frames. I guess that the default VLAN settings are the acceptable frame types = all

    When we add a vlan to a switch port, as the image below, switch to these ports are added as a vlan tagged, because the port if already reside in one VLAN not tagged...  This means that in the case below, 3 ports, 6-8 will be I hope, expecting to received and transmit frames ethernet labeled with a tag VLAN 2.

    You said it, not easy, you need to play and practice with switching and routing

    .  But the general rule that I follow for VLAN's.

    A switch port can be untagged in a single vlan, but at the same time marked on several VLANs.

    With respect to the limitation of the camera, my camera, I have not used my filters. But there is the possibility of limiting access by IP address or network.

    I guess you can find an article on your DLINK camera to filter. Reset the default camera and try to add it again.

    Routing between VLANS will occur at the RVS4000, it routes packets between different VLANs, the SG200 cannot be put in Layer 3 mode like its big brother the 300 series (SRWXXX-K9-NA)...

    Best regards, Dave

  • How VLAN 2 x EA8500

    I'm running a (main) EA8500 with a fiber using LAN and WLAN modem (no comment box) and all is well.

    It's a great piece of equipment.

    I intend to set up an another (secondary) EA8500 for young people and their friends.

    I would like to the secondary image on a second subnet / VLAN to separate entirely from my primary private subnet, only allowing the internet traffic and traffic between the jobs on this subnet.

    As there is no coverage of the main EA8500 in this part of my home, the secondary EA8500 will be wired to a port LAN from the main EA8500.

    I'm aware that separating ports LAN from the main EA8500 is to set up a VLAN, and as I am a novice in Linksys - and VLAN in particular - I need help, set it up and would appreciate any help and suggestions I can get.

    Can someone tell me how to put in place?

    See you soon

    VLAN on the EA8500 is strictly for special configurations of access provider Internet.

    I recommend buying a LRT214 or the LRT224 to do the Routing and isolation of VLAN for this application.

  • VLAN function 6248 switch IP address

    We have a nice and simple class C private address space private on 4 x Dell 6248 switches. We are running out of IP addresses. We could change the netmask (add more bits), but who is to reach each node and potentially finding devices that do not work with anything other than 24. We have a lot of old material that we must keep functioning. In addition, we want to limit emissions, since here we have projects that do a lot of UDP broadcasts. If each project in one VLAN, the load on the switches would be less. Hosts on VLANS must get to the common servers well.

    So I did some reading and thought we would use of VLANS, routing and others to have several C class spaces. We turn the material around the office at an alarming rate so I thought that an IP based VLAN would be an excellent solution. I have problems with the documentation and configuration to make it work.

    We have 2 x 2716 Dell and 2 x Dell 2724 switches in the mix as well. They are connected to the 6248 s switches dumb and all seems to work now.

    I created 2 VLAN and reports the following:

    Curetes #show ip interface vlan 2

    State of the Routing Interface... Down
    Primary IP address... 192.168.3.1/255.255.255.0
    Routing mode... Enable
    Administrative mode... Enable
    NET before realized emissions... Disable
    Proxy ARP...................................... Enable
    Local Proxy ARP... Disable
    Statement of assets... Inactive
    MAC address... 0019.B998. E71E
    Type of encapsulation... Ethernet
    IP MTU......................................... 1500
    Bandwidth...................................... 10000 Kbps
    Destination unreachable... Activated
    ICMP redirects... Activated

    I am running firmware V3.3.3.3. I have improved the switches on the weekend of 2.2.0.3 I read that VLAN does work well with this version.

    I can't find in the documentation "Setup Guide" or "CLI_EN.pdf" how to get the "Routing Interface status" that up to.

    My config running is pretty simple:

    ! Current configuration:
    ! Description of the system "PowerConnect 6248, 3.3.3.3, VxWorks 6.5.
    ! 3.3.3.3 system software version
    ! Passage mode is configured as disabled
    !
    Configure
    database of VLAN
    VLAN 2-3, 10-11
    VLAN 2 1 routing
    VLAN 3 2 routing
    subnet of VLAN association 192.168.3.0 255.255.255.0 2
    output
    hostname "curetes.
    Select the SNTP client distribution
    192.139.238.68 SNTP server
    battery
    1 2 Member
    2 2 Member
    3 2 Member
    4 2 Member
    output

    IP 192.139.238.79 255.255.255.0
    default IP gateway - 192.139.238.27
    IP routing
    interface vlan 2
    name '192-168-3-x-address. "
    Routing
    address 192.168.3.1 IP 255.255.255.0
    output
    interface vlan 3
    Routing
    output
    level XXXXXXXXXXXXXXXXXXX username 'admin' password encrypted 15
    output

    Question (in order of importance):

    What is the best way to go to solve my problem (limit/exhaustion of Ip address space broadcast domain)?

    How to make "Routing Interface Status" on VLAN 2 upward? Do I need it upward?

    How to configure a VLAN to do what I want?

    Thanks in advance.

    Don

    Yes, that's my suggestion.

  • Reference Dell 6248P - VLANS, DHCP, wireless AP

    Hello

    I'm trying to set up a VIRTUAL LAN for wireless comments traffic go through our main switches and on an ADSL router but I'm running into some difficulties.

    We have 3 points of access for model AP - AC Unifi. Each access point has a connection of physical network of 1 of 4 Dell 6248 switches which are currently in a single stack managed as follows.

    AP 1-> Port of the Switch 1 40

    AP 2-> Port of the Switch 2 36

    AP 3-> Port of the Switch 3 17

    The managed pile and AP are currently using the 192.168.1.0/24 on VLAN 1 - default and I created a VLAN 10 - guest.

    The APs have two SSID WLAN, 'corporate', which is also on the 192.168.1.0/24 range and 'guest' that is located on 192.168.99.0/24. I put the "guest" to mark its traffic with VLAN 10 and no DHCP is defined.

    I put the 3 above general Mode ports, allowing all managers and VLAN - 1 that are not marked and VLAN - 10 they are labeled.

    I also put a Zyxell router with a static address of 192.168.99.254 in Switch 4 Port 24 and set to this mode of trunk to VLAN 10.

    The router is configured to provide DHCP for the beach of 192.168.99.0/24.

    Now when I connect a laptop to our 'coporate' WLAN, everything works fine. I get a DHCP address from our server and I can reach everything as usual.

    When I connect to the "guest" WLAN, I don't get a DHCP address. If I put a static address, I can't do a ping to the router.

    Could someone tell me if my configuration is correct?

    Thanks for the additional information and the display to the top of the config.

    A couple of things I noticed the config:

    -I don't see that whatever it is set to Switch 4 Port 24, which is the case the router Zyxell is plugged. If this port is not configured properly, it may not be able to see the communication on the VIRTUAL LAN. A config like this should work on Switch 4 Port 24.

    # interface ethernet 4/g24

    switchport mode access #.

    # switchport VLAN 10 acccess

    -You may need to configure a static route to highlight traffic VLAN to the router.

    # ip route 192.168.99.0 255.255.255.0 192.168.99.254

    I would like to know if any of this helps.

  • InterVLAN routing - N4000

    Let me start by saying that it seems like I'm missing something obvious. I'm trying to add segmentation VLANS in a network that is already in place and run so I keep taking baby steps, and I try to get an end-to-end testing prior to deployment in a greater way.

    We are in a basic configuration collapsed with a N4032F acting as the nucleus and in order to test a 5548 and a trendy on 3524.

    I have a client connected to 1/e7 and set to VLAN 12 the 3524. Another client on the 5548 item in gi1/0/6 and position VLAN 11. Both are subnets single 24 bit (192.168.70.0 and 192.168.50.0 respectively).

    Clients can ping the gateway (192.168.xx.1) and even the opposite gateway ping (192.168.50.10 can ping 192.168.70.1 and vice versa).

    However, the clients cannot ping each other. Something is not properly configured to route packets to the vlan opposed and I'm stumped! I'm new to configurations VLAN, but thought I was about there because I could ping all the gateways for routing.

    Any help would be greatly appreciated.

    This seems to be due to a problem with the switch 3524. If I keep the two clients on the same VLAN (and good subnet) on the 3524 then it is fine. However, if I try to separate them or VLAN can ping gateways or each other. So basically the feature that I have seen above with the 5548, I can't duplicate it onto the 3524.

    UPDATE! : it works! Now my configs are all good. So I can ping every client on different switches. It seems that the 3524 may have limits on the number of VLANS, it can send through a trunk. When I just VLAN1 (for general traffic) and the routing of VLAN12 works correctly.

    However, when I try to put VLAN1, VLAN11 AND VLAN12 on the 3324, I am more able to send anything through the trunk. (Even if the 11 and 12 are identified as being allowed on the trunk)

  • 6248 VLAN do not receive the DHCP scope

    I created two new DHCP scopes in my windows server 2003:

    192.168.2.0 - public, and
    192.168.3.0 - VOIP.

    This DHCP server is connected to a Dell powerconnect 2708, which is connected to our new powerconnect 6248P via fiber point-to-point.

    In the new computers on network on the default 1 VLAN are correctly attributed IPs as they connect.

    I issued the following commands to the 6248 CLI:

    Enable
    Configure
    database of VLAN
    VLAN 20
    VLAN 30
    output

    Configure
    range of interface ethernet 1/1-g1/g2
    switchport mode general
    VLAN allowed switchport General add 20
    switchport General pvid 20
    l2relay DHCP
    output

    Configure
    range of interface ethernet 1/1-g3/g6
    switchport mode general
    VLAN allowed switchport General add 30
    switchport General pvid 30
    l2relay DHCP
    output

    interface ethernet 1/g11
    switchport mode general
    VLAN allowed switchport General add 20
    VLAN allowed switchport General add 30
    l2relay DHCP
    output

    Configure
    interface vlan 20
    name 'PUBLIC '.
    Routing
    IP 192.168.2.1 255.255.255.0
    IP helper 192.168.1.150
    output

    Configure
    interface vlan 30
    name "VOIP."
    Routing
    address 192.168.3.1 255.255.255
    IP helper 192.168.1.150
    output

    IP routing

    I also added all traffic on VLAN 20 and 30 of VLAN on ports 1/g11 (6248) and port 2 (2708). VLAN 1 access was removed from ports 1/1/g1-g6 (6248)

    Everything seems to have been set correctly, but I can't get a response from the DHCP server on all ports attached to VLAN 20. The powerconnect 2708 switch is unable to pass the baton to the server? Is it possible that something falls in the point to point?

    I would greatly appreciate any comments or suggestions, thanks!

    The 6248 has no default gateway. It wont let me put 192.168.1.1 because he does not reside in the same subnet as the 6248 (192.168.99.1)

    The 2708 has listed 192.168.1.1 as its default gateway.

    At this point, the network has too many complexities for me to unravel. I am very happy that at least I solved for DHCP when we finally migrate our server to the new location.

    Once the server is up, and the gateway/firewall are directly connected to the 6248; I will review the correct configuration of this network.

    Some advice to those who might have a similar problem: check your management VLAN. It may not be the same VLAN 1 if you plan to routing to work from VLAN 1 to nowhere else because the VLAN management cannot be routed. Also check static routing of your access point, make sure the front door has a return of the ips of your VLAN, IE: 192.168.2.0 255.255.255.0 gateway_ip

    That's all for now. Thank you to all who have contributed

  • Reference Dell 5548P VLAN

    Just connect a 5548p to our network and I can get on the web interface, I have created several VLANS and put them all access to, I have a (48) port on the vlan 1 as trunk, don't know why, but when I connect a device to one of the ports vlan, I have no access to it, I cannot ping or whatever it is , I read somewhere on another forum I need of vlan routing active but for the life of me I can't find anywhere to enable VLAN routing, or maybe it's another issue that is causing the problem? I also did the switchport mode access for all the VLANS and the trunk allowed vlan add command for all the VLANS.

    Is the connection of your 3448 to your router set as a Trunk port? The router has the same VLAN on it as well as addresses IP attributed to them?

    For example the router will have 160 VLAN on it with an IP address of 10.21.162.1

    Set the printer to 10.21.162.86 with a gateway of 10.21.162.1.

Maybe you are looking for

  • How can I open a Web site in html mode

    I used to insert a meta tag, but I don't know how to open a Web site in HTML so that it can be edited.

  • Problem with HD external Toshiba PX1267E - 1 32

    Hi all. I had an external hard drive Toshiba PX1267E - 1 32 for awhile now and its fantastic. I normally run on Windows XP, and recently, I started using Windows 7. When I plug in the external hard drive in, the password box opens, I get the password

  • Management of switch software

    Hello I am trying to develop a system to monitor the components on the cards of PCB in the oven, it s essentially has a failure analysis of components such as C, resistors and capacitors. Here are some of my test system The test system must monitor t

  • HP Officejet 4680 says paper jam after paper jam was cleared

    I 13 elements in the print queue shows on my laptop LenovaZ580 like "paper jam in jet4680 desktop printer HP all in one '... I cleared the jam in the printer, but laptop keeps showing paper jam and will not print the elements... All solutions please

  • HP Officejet 7500 E910 won't print black

    My Officejet 7500 E910 won't print black. I changed the cartridge HP, turned the printer market, printed a unique emblem of color, and my black printed pages are still blank.