Configuration of VLAN Cisco SG 300-10

Similar Questions

• Configure the vlan with SG 300 - 10 p and 520 SA

  Hi all

  Forgive my ignorance, but I need help with the basic configuration.

  For a small office, I bought an appliance of security SA520 (for future VPN with another remote desktop) and a switch of SG 300 - 10 p to connect 3 PCs and 3 IP PHONE. The SA 520 is the router. I have to configure 2 VLANS on the switch:

  VLAN2: DATA (for PC)

  VLAN3: VOICE (for IP PHONE)

  VLAN1: BY DEFAULT.

  How can I configure simply all ports?

  I would like to configure ports 1-4 on 5 to 8 ports and VLAN2, VLAN3 and G10 port is reserved for the SA520 router.

  I want to split VOICE and DATA network.

  I think I need to create a trunk on G10 to SA520...

  Can someone help me?

  Hi Julien,

  OK sounds like you use it vlan by default for network management and the vlan 2 for vlan3 for voice and data.

  I use a calculator for this, my SA520 is ready at the present time.

  Step 1   On the SA520 add vlan 2 and vlan 3 and label them voice and data respectively.

  

  Step 2. Allows you to use the switch port 4 on the SA520 as a port to shared resources to the SG-300.

  (my intent is to use vlan1 not tagged vlan tagged 2 and vlan tagged 3 on the uplink of the switch and the SA500.)

  To do this, I have to say the SA520 port 4 of the switch will be in trunking and not access mode.

  

  You will need to check the membership of vlan 2 and vlan 3 on switch port 4.

  Step 3.  Now add a few IPS to VLAN2 and VLAN3

  Step 4.  Create DHCP scopes if that is what is needed on the SA520

  

  So now I hope that we have the SA520 with the associated IPS VLAN1, VLAN2 and VLAN3

  We also have the switch port 4 as a network interface

  We are vlan1 reproducing unidentified and vlan2 tag and tag to the SG-300 switch vlan3.

  We do the opposite on the SG-300 switch.

  If you use G10 as the uplink to the SA520 you'll notice of default port 10 must already be in trunk mode.

  Switch ports G10 should be marked for vlan 2 and labelled for vlan3.  It will be, default Gi10 untagged for vlan1.

  Make sure you keep ports switch is correctly set up.

  Best regards, Dave

• Configure the VLAN voice and data in CISCO SF 300 8 P

  I have a couple of Cisco SF 300 8 P and P 24 switches. I have voice and data VLANS configured as:

  Data VLAN: default 145.17.59.0/24

  Voice VLANS: VLAN 20 172.22.20.0/24

  I have different DHCP servers regarding the data VLAN, we have a physical server that is configured for 145.17.59 * extended IP and Voice VLAN DHCP Server is configured as a router gateway with option 150.

  This configuration works very well with other cisco 2960 switches and 3750 etc. except CISCO SF 300 8 P and 24 p. I tried to set up the voice and data VLAN in these CISCO switches so that phone CISCO (model 6941) should get IP of the VLAN voice and PC should get the IP address of the DHCP server on the data VLAN. I tried several techniques such as LLDP, Port-to-VLAN Config etc.

  Can anyone please guide me / help on this.

  Kind regards
  A K.M.Sayeed

  Hi A.K.M., with Cisco phones you should be able to define simply automatic voice VLAN to be VLAN20.

  ID of the vlan 20 voices

  You must ensure CDP or LLDP is enabled as well. I would check in the web GUI. DHCP for phones can come from a DHCP server on a port access VLAN20 switch, or you can use dhcp for assistance to redirect DHCP server elsewhere.

  If you prefer or you have problems with the CDP or LLDP, you can also program the ports as trunks and add the tag VLAN 20 for them.  In this scenario, you need to ensure inter - vlan routing works and phones that download the file config with corrrect VLAN config.

  These switches do not run ios, so they are similar, but different from the catalyst switches that you mentioned.

  -remember messages useful rate.

• Problems of implementation of VLANS on Cisco SG 300-28 comments

  Hello

  I'm mainly curious if the configuration that I explained below is actually possible, and if so how do I implement. I know that this isn't the easiest configuration and I need to put in place without buying any equipment more if possible.

  I have a SG Cisco 300-28 with three Setup VLAN

  Vlan1 (company) - 192.168.10.0 - switch IP 192.168.10.254

  VLAN2 (VOIP) - 192.168.20.0 - switch IP - 192.168.20.1

  VLAN3 (guest) - 192.168.30.0 - switch IP - 192.168.30.1

  Default gateway is 192.168.10.1 (Netgear router)

  I have a wireless network setup (Netgear WMS and WAP 2) configured with TWO VIRTUAL (1 and 3) networks. They enter ports on the Cisco SG 300 - 28 which are marked on the two VIRTUAL networks. The wireless carriers has worked well, but the guest network is not reout on the Internet.

  After some troubleshooting I realized that the reason wasn't the guest was because there was no path routing of the internet to the router.

  The router I have is not really ideal, it is a Netgear DGN2200, but I managed to create a static route to 192.168.30.1 with a metric of 2, 192,168,10.254 being the jump.

  Success, the connection worked, the only problem is that now my guest network can see my business network because the corporate network uses the static route on my router to router on the guest network (due to the limitations of this device I can't do anything about it)

  So basically, what I have is

  Network Guest can connect to Business VLAN switch. I guess that's because the router is on the VLAN of Business and the default gateway is the router. As they are on the same network the Guest inevetably network can see the network and the server of the company.

  The network of the company can return to the network invited through the router using my static route, I created. The static route is really basic and I can't create a firewall on the router rule to prevent the business network addressing network comments because there is only one LAN - WAN firewall and this connection is LAN - LAN.

  What I need, is...

  somehow stop all traffic from the 192.168.30.0 network routing to what anyone on the 192.168.10.0 network, apart from the router to 192.168.10.1.

  Is this possible? I have this setup at several different site, the only difference is that I have a router from CIsco security on the latter with the VLANS configured so that I don't have this problem. Because I have a Netgear DGN2200 rather limited, I cannot configure the VLAN correctly, and as such, I need to see if I can do this on the switch somehow.

  Any help would be appreciated.

  It is my first post says in the way, so if I missed something that anyone would help then please let me know.

  Kind regards

  David

  Hi David,

  Why not apply an access list to filter incoming traffic in the SG300 switch such as, via the command line or GUI.

  Here is an example below, certainly not comprehensive, just an example

  ,

  Remember, we use the reverse masking of the ACE;

  config

  restrictGuest extended IP access list

  deny ip 192.168.30.0 0.0.0.255 192.168.20.0 0.0.0.255
  deny tcp 192.168.30.0 0.0.0.255 any 192.168.30.1 0.0.0.0 www
  deny tcp 192.168.30.0 0.0.0.255 any 192.168.30.1 0.0.0.0 telnet
  deny ip 192.168.30.0 0.0.0.255 192.168.10.0 0.0.0.255

  allow an ip

  output

  interface gigabitethernet1

  Service-acl input restrictGuest

  output

  Don't forget to save the configuration with the following command and respond to the prompt.

  To write

  or do it via the GUI method

  Step 1.  Create an ACL name

  

  step 2, add the ACE base port which is the list of filters.

  

  step 3.   Apply or binding the list to a port so that the port can watch and filter pattern matches to detect traffic in the switch.  I gave you an example of an ACE list above, you can be more creative in what you refuse.

  

  step 4. Now add or copy the entry in other ports on the switch.

  Be sure to save your changes to the configuration.

  I hope this helps.

  Best regards, Dave

• Cisco asa active multiple interfaces on a single switch without configuration of vlan switch.

  I was wondering if there is a work around on cisco asa to have 2 interfaces vlan on a switch. The reason I ask I have a cisco asa 5505 and a dell switch that does not support the configuration of VLANs. I set up 2 interface vlan on a cisco asa and when two interfaces are active my internet drops frequently. I was wondering if there is nothing to configure the asa cisco to make this thing work. Thanks in advance...

  Assuming that Dell switch at least linking several interfaces of the ASA to the Dell should translate all media spanning tree protocols, but a bet covering the tree blocking State to avoid a tree covering loop.

  If the Dell does not support tree covering weight then you would be in very bad shape each broadcast packet would be will loop indefinitely and cause what we call a 'broadcast storm. "

  One way is not good and the other real harm.

• How to configure the VLAN-access plan on Cisco 3650

  Hello

  I would like to configure the VLan-access plan to filter some of the traffic VLAN, but I am unable to run vlan-map command on the cisco L3 3650 v03.06.00E

  Hello ahmed,.

  According to the command search tool, 3650 v03.06.00E does not support the vlan-access plan.

  You will need to catalyst 3650, 3SE to configure "vlan access map.

  https://Tools.Cisco.com/support/CLILookup/cltSearchAction.do

  Show vlan-plan of access (catalyst 3650, 3SE)

  VLAN-access plan (catalyst 3650, 3SE)

  I hope this helps.

  Please evaluate the useful messages.

  Thank you.

• Configuration of vlan SG 300 - 28 p

  Hello

  I tried to Setup VLAN on a SG300 - 28 p, but they do not work.

  This is my setup:

  

  I want to Switch1 to have 1-10 ports to access the area demilitarized and 11-24 the LAN.

  Then I wan to add switch2-4 to expand access to the local network.

  Is this possible?

  I tested with cisco 2960 switches by saying just what ports forge have access to

  DMZ and LAN, but small business switches are different...

  I really appreciate the help!

  Hi Francisco, assuming that the 2960 worked and there was no difference in configuration then the problem would be that you have not added the VLAN to the trunk.  On a catalyst you do not configure the VLANS on a trunk, since all VLAN pass them. On SB switches, that you need to configure the VLANS on the trunk, otherwise only the VLANs native / default works.

  -Tom
  Please mark replied messages useful

• SG 300 - 28 p - configuration of VLAN Simple

  Hi all

  I would like to create 3 x VLAN on a 300-28 P of: SG and get them completely isolated from each other, for example 1-12 on the VLAN 1, VLAN 2 13-24 and 25-28 on VLAN 3 ports. No communication between all the VLANS.

  Can anyone advise me on the best way to achieve this?

  Thank you

  Andrew

  Andrew, imagine this scenario. You have 1 switch, 2 computers like so. If you connect a computer to a member of a VLAN, it will communicate only to members of the same vlan. The switch does not allow a VLAN to communicate without a router (Layer 3 device).

  

  To create VLAN try the following

  1.) make the VLAN you want, the number can be anything from 1 to 4094. The vlan 1 is created by default

  

  2.) assign the ID vlan and a description

  

  3.) associate the ports you want to be a member of the VLAN 1

  

  4.) associate the ports you want to be a member of VLAN additional

  

  When you assign a port to a vlan, make sure it is not marked one. By default, only 1 vlan without tag can be by port.

  Don't forget not to save the configuration on the icon flashing in top right, be sure to save the configuration running on the boot configuration.

  -Tom
  Please evaluate the useful messages

• A bet with the network team - configure the VLANs on Teddy does not work against Cisco?

  Hello

  We have a great place of Esx and I have a bet with one of the network Admins.

  I configured a vSwitch to work with 1 bear. On this vSwitch I configured 1 vlan with a Vlan ID 100

  I told the guy from the network to set up the bear side here and he said he has set up 'Access' and not trunk as normally I ask because it's only 1 Vlan.

  I said ok and we tried and nothing works, when I configured the Vlan 0 in the Esx, it started working.

  Of course we cannot leave it like that and need to Config the Vlan on the Esx.

  I told them that once I configured the Vlan on my side there is nothing to do there, and they need to do the thing here.

  they say the same thing.

  Who is right? It is something they need to configure side here if she's 'access' and not 'trunk '?

  or is it something at my side?

  This mayble help your network http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004074 management team

  and

  http://KB.VMware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalID=1003806

  Please, do not forget the points of call of the "useful" or "correct" answers

  Mauro Bonder - moderator

• How to connect Cisco SG-300-10 L3 switch selector mode in Mode of L2 SG-300-20

  Ladies and gentlemen, please forgive me if you find my question too basic. But, I would really appreciate your help. I have two Cisco switches (SG-300-10 and SG-300-20) and I am struggling to connect with each other.

  Requirements: Switch Cisco SG-300-10 which is in needs of L3 mode to send the traffic of VLAN tagged to the switch Cisco SG-300-20, which is the mode of L2

  What I've done so now

  1 Cisco SG-300-10 (Mode L3) to the router directly connected and configured IP addresses, 192.168.0.21. The GVRP is configured for Port 5. Created the VLAN 1000 with interface IP (192.168.100.1) and configured the Port 5 trunk mode (1U, 1000 t)

  2 connected Cisco SG-300-20 (L2 Mode) to the router and set up the IP address management, 192.168.0.22. The GVRP is configured for Port 5. 1000 of VLANS created and configured the Port 5 trunk mode (1U, 1000 t)

  What does not work

  I can't access the address of management of the L2 (192.168.0.22) switch. Note that the L2 switch only on the uplink, which is to the L3 switch. Since the Port 5 also receives no marked traffic of VLAN1 (192.168.1.1), I'm assuming that he would receive the network management of VLAN1.

  Other Observations

  When I connect the cable between the two switches Port5, I expect to exchange information of VLAN, by documentation. But the lights flash at all.

  I tried other things

  I tried to connect Port 2 (1U) L3 Switch switch 2 L3 Port (1U). Yet, I can't access to the management of the L2 switch port. However, when I connect 2-Port L3 switch to my laptop, I get an IP address. That tells me that I have to solve the problem of management network pair before the switches.

  Hi Späti,

  I think the confusion is the use of the address IP address to you and how you manage your computer.

  VLAN 1 = 192.168.1.1

  VLAN 1000 = 192.168.0.21

  How I read that you connect layer 2 VLAN 1 on 192.168.0.21 switch to layer 3 of the same VLAN 1 interface to 192.168.1.1. It's confusing.

  So first thing to do is this - change layer 2 switch network 192.168.1.x IP and confirm management works on VLAN 1.

  If you want to layer 2 switch works on VLAN 1000, then you need to change the default VLAN 1000, then you can configure your uplink either as the way which you have 1u, 1000 t, or you can use 1000u.

  Your management VLAN on the layer 2 switch is VLAN 1 still unless you changed it (which did you not?)

  A next important thing for the layer 2 switch is going to be the default gateway. The switch of level 3, you need to specify the address IP of the VLAN 1000, which I think you did to 192.168.0.21/24. This 192.168.0.21 must be the default gateway for the layer 2 switch.

  Finally, the computer you connect to layer 3 switch, what that either VLAN that you choose to connect to (1 unidentified), you need to set the IP and default gateway appropriate. So if you're going to VLAN 1 then your computer is 192.168.1.x with gateway 192.168.1.1

  And for the comment extra, GVRP is a horrible Protocol and very pitiful, I don't recommend to use.

• How to console Access of Cisco SG 300 - 28 P

  Hi Experts,

  We have just a cisco SG 300 - 28 P switch. We tried the initial installation according to the manual, but we are not able access the switch to configure. Suite of methods we tried:

  1. connected a lan cable from a computer to an ethernet port on the switch, statically assigned 192.168.1.100 IP address to the computer and attempted to access switch with default IP address: http://192.168.1.254

  2 connected the serial cable that was awarded with the switch on a machine a I tried to access through terminal tera. I have seen cables serial that has RS 32 port to be connected to the machine and RJ45 adapter to the switch console port. But for this switch, it is opposite, IE the RS 32 port switch and RJ 45/machine.

  It would be great if we can access the switch through the console port. Please help me on this.

  Kind regards

  Martin

  Hello

  The correct console cable type is null-modem cable DB9 R232 has "Female DB9" connectors at both ends of the cable.

  Kay Lee Yiu

  Concentrix at Cisco

  .:|:.:|:. CISCO | Kay Lee Yiu | Pre-sales SMB | [email protected] / * / | Phone + 1 (855) 354-7776

  

• Cisco SG-300 52 QoS default DSCP to queue mapping

  I am setting up QoS (Advanced mode) switch Cisco SG - 300 52.

  I decided to go with DSCP to manage the priority of the packet. While the implementation I found a configuration page (see the attachment for screenshot) where it is possible to map DSCP values in a particular queue. I did not quite understand the default settings of this mapping.

  The assignment of the queue increases from 1 to 4 for 0 to 47 DSCP values. Well, the 48-63 DSCP values were assigned #3 queue. In this way the package with value DSCP 56 will have lower priority than package with value DSCP 40. It makes no sense to me. Should not increase the priority (and thus the queue) that the increase of DSCP values?

  Why the 48-63 DSCP values were assigned #3 as default file?

  DSCP - default.png

  

  I think that the answer to this direct request found in RFC 2475

  Here is the link to the RFC.

  https://www.ietf.org/RFC/rfc2475.txt

  I think the info you're looking for are under classifiers. I deny not that under any normal logic to increment just respectively. For some reason, it was the standard/normal values agreed.

  I don't know with the first 6 bits in binary has something to do with the decimal value (expressed in a number which is not binary DSCP).  Also, I think it has to do with how the cycle increments of 8 values.

  By RFC 791, here are the priority values.

  https://www.ietf.org/RFC/RFC791.txt

  Example:

  000 = Best Effort

  001 = priority

  010 = immediate

  011 = audio/video.

  100 = flash on Ride

• Configuration of VLAN 'Wi - Fi comments' on ASA 5512

  I'm trying to configure a new vlan on my Cisco ASA 5512 running version 8.6 (1) 2.  This vlan will give access to AP Wireless 'invited' into my network.  I have the configuration of vlan comments through my switches, I am able to devote a switch port to 40 VLANS and acquire an IP address in the network 10.40.10.0/24.  Below is an extract from what I think is relevent to the config information.  I try to carry the traffic of comments on my ' outside' interface.

  Obvious to me miss me another command here.  Any help would be appreciated to greatling. If more running-config is required please advise.  Thanks in advance!

  _________________________________________________________

  interface GigabitEthernet0/1.40

  Description comments Wireless Network

  VLAN 40

  nameif guestwireless

  security-level 50

  IP 10.40.10.5 255.255.255.0

  Route outside 0.0.0.0 0.0.0.0 X.X.X.X 1 (public IP address to X.X.X.X)

  access extensive list ip 10.40.10.0 guestwireless_access_in allow 255.255.255.0 interface outside

  guestwireless MTU 1500

  Access-group guestwireless_access_in in the guestwireless interface

  dhcpd address 10.40.10.50 - 10.40.10.250 guestwireless

  dhcpd dns 8.8.8.8 interface guestwireless

  guestwireless enable dhcpd

  ________________________________________________________

  Here is the part of the killing

  interface GigabitEthernet0/0

  ISP Interface Description

  nameif outside

  security-level 100

  To take

  interface GigabitEthernet0/0

  security level 0

  You do not want the more precarious with the higher level hehe safety interface

  Looking for a Networking Assistance?
  Contact me directly to [email protected] / * /

  I will fix your problem as soon as POSSIBLE.

  See you soon,.

  Julio Segura Carvajal
  http://laguiadelnetworking.com

• Issue of configuration of VLAN

  We have ESX Server 3.5.0 110181 and VIC version 2.5.0. Each of our ESX host has 4 NICs for use in our LANs, 2 more for each Port of the Console of Service VMKernel Port. Physical network adapters to connect to a stack of 5500 Nortel ethernet Routing switches.

  I am trying configure 4 NICs in each ESX host to be able to view the two VLANS separated. I am trying to configure these VLANS on the Nortel switches. The problem is I'm new on the VLAN and can't do network cards in the ESX host to always see the two VLANS. Right now I have an ESX host with two network cards that see both VLAN and two network cards who don't see a VLAN. I'm pulling my hair out trying to figure out what I did wrong.

  First and I realize maybe this isn't the best place to ask this question, but in the Nortel VLAN config, there are four choices of marking and I have not been able to understand that it is appropriate to use for the ESX host. The choices are; Removes all brand, removes the brand only PVID, Tag all or only Tag PVID.  Can someone help me with this?

  Also should I do at VIC or on the ESX host to see systematically the VLAN? The NICs appear to periodically just drag one of VLAN, generally the VLAN the DMZ.

  Any help much appreciated. This VLAN is new to me and I could not find very clear or basic info. on the configuration of VLANS.

  Thank you.

  Hi danzbassman, the best would be to put each of the 4 corresponding ports on your Nortel 'Tag All' or "UNTAG PVID." switch only

  If you use 'UNTAG PVID Only' on the switch, this means that all executives EXCEPT those on the VLAN "primary" assigned to the port should have tags on them. Then, on the side of ESX vSwitch, you want to create your virtual machine with the many groups entered the VLAN ID field for each VLAN "secondary" on the ports of Nortel and the VLAN ID field blank for the VLAN "primary". For example, suppose that your four NICs (attributed to vSwitch1) were connected to ports 1, 2, 3 and 4 on the side of Nortel and you had three VLANS, 100, 200, and 300, with VLAN 100 defined as the PVID on each of the four ports. If you want your virtual machines to be able to properly access to all three of these VLANs, to put in place three groups of virtual computer on vSwitch1 ports, one with the VLAN ID set to nothing (for VLAN 100 traffic, because it is not marked), one with the VLAN ID value of 200 and another with the VLAN ID value 300.

  If you use 'Tag All', then you would follow the same procedure, except your first port group (one for traffic VLAN 100) should also have its VLAN ID set to 100.

  Please, help me by awarding points for a 'useful' or 'proper' response if you think it is useful!

  -Amit

• Need help setting up a configuration of VLAN special using WRVS4400N

  Hi guys,.

   

  I need your help on how to implement a configuration of VLAN somehow non-standard.

  The situation is the following:

  The customer wants a WLAN set up for the company and the other for guests. Now, wouldn't that be not so difficult if we'd be using the internal internet connection. But the WRVS4400N will be used to implement wireless LANs / VLAN only.

  The company uses the DHCP protocol on both of their subnets, provided by a Watchguard Firebox XTM510.

  

  Now, what we would do is set up the back door #1 for the connection to the subnet of the client and the #2 for the connection to the optional subnet for the guests. The first problem is that we were not able to configure DHCP forwards to the VLAN2. It works very well on the 1st but the 2nd doesn't allow that either ENabled or disabled, grayed out DHCP.

  To work around the problem that he would be allowed to set up DHCP WRVS4400N providing in itself for the subnet invited, but try that didn't work at all.

  Is it possible? Thanks in advance!

  Best,

  Ralph.