HP Procurve vlan voice with trunks

Similar Questions

• VLAN voice ISE with MAB

  Hi all

  I just configured the ISE and the switch to make authentication for my phones of vlan voice.

  Authentication and authorization works well with ISE.

  #show TEST-CONTACT authentication sessions

  Interface MAC address method field status Fg Session ID
  Item in gi1/0/1 001a.e867.4c1a mab VOICE Auth 0A0B1050000000250136CED3

  But, I've only one ip phone connected to the switchport mode multi-domain, I don't have any pc connected to the phone yet, but the command 'show mac - add table int xx' show me the telephone ip and two local area networks virtual, 316(voice vlan) mac and vlan 1.

  The question is, why vlan 1? is it good?

  I have only the VLANs voice 316 configured policy result with the VLAN TAG = 316 and permission of field voice check box selected.

  SWITCH-TEST mac address-table interface gigabitEthernet 0/1/1 #show

  Mac address table
  -------------------------------------------

  VLAN Mac Address Type Ports
  ----    -----------       --------    -----
  316 001a.e867.4c1a STATIC item in gi1/0/1
  1 001a.e867.4c1a STATIC item in gi1/0/1

  Thank you

  Rafael

  I would recommend that you keep the command ' switchport voice vlan "because it is what allows the port to be a port" multi - vlan "without set it up as a trunk. If you remove this command and you always want to spend two VLANS (one per voice) and other data, then you will need to configure the port as 'trunk '. Unfortunately, it won't only 802. 1 x is not supported on the trunk ports :)

  I hope this helps!

  Thank you for evaluating useful messages!

• Question about the implementation of VLAN automatic voice with Polycom phones on a SF 300 - 24 p

  Someone at - it Setup successfully a SF 300 - 24 p to automatically assign a VLAN voice for traffic from an IP of Polycom phone? We have activated with LLDP-MED policy assigned to the port, as well as the interface configured as a trunk with the PVID defined on the VLAN data and Auto VLAN enabled.

  Hello

  Thank you for using the Cisco support community. My name is Nico Muselle and I work for Cisco Small Business Support Center.

  In response to your question, the only additional thing required on your switch is the choice of one of the below configurations:

  1. Affect the phone VLAN statically to ports connection of phones.

     or

  2. Turn them on Vlan voice (and change CoS affecting 5), and add telephony YES Polycom phones (the first 3 bytes of the MAC). You may need to add a few different Yes. This way the switch detects the phone YES and add the switchport to the Vlan voice.

  LLDP-MED network strategy as you have defined it, on the other hand, will be used to assign the VLAN on the phone automatically if you do not have to configure it manually on all phones.

  In short, you can choose one of the methods above, in combination with the LLDP-MED policy so everythings should work just fine. If it is not, please let me know.

  Kind regards

  Nico glacier
  Cisco Small Business Support Center.

• SG300 voice vlan problem with UC520

  Salvation of the Forumers

  My problem statement:

  -Secretary referred to topology.png, this is how my network like structure look

  -the IP phone after startup can not connect, so it cannot download the XML of UC520 configuration file. problem switching suspects.

  -my configuration illustrated in topology.png and my config show vlan as the voice setting.png voice vlan

  -My requirement is switch SG300 unique switchport to carry data VLANs and vlan voice.

  -What is the mode of connection for voice siwth VLAN an IP phone + data must be set up? is it switchport voice vlan vvid switchport voice vlan dot1p, switchport voice vlan unidentified or vlan switchport voice no further action over requirement?

  Thank you

  Noel

  Christmas morning,

  Sorry for the late reply, things have been very hectic in here lately

  1. Why use trunk? the UC520 don't have voice vlan (vlan 20)

  Do you mean that data THAT VLAN is handled by another device? Again I would like to leave as a trunk in order to manage the CPU through the data VLAN. (Except for security or other reasons you would choose differently of course)

  2. the UC520 got CUE (voicemail), how should I design the uplink service for the main switch module?

  Nothing in particular needs to be done for this, CUE is processed and routed inside the UC520, the vlan (default ID = 90) CUE is used if you have another LANDMARK in the network

  1. I guess I did: swithcport the tag vlan vlan unlabelled 20, 10. is it ok for this setting?

  If the Vlan on the switch and the UC520 voice has been defined as VLAN 20 (default value = VLAN 100) it's perfect. Check if the CPU and the switch, the voice VLAN ID is set to 20.

  1 so if I have just the phone to vlan 20 (vlan voice), create the policy of network LLDP?

  If you are ready to configure the VLANS manually on the phone, you don't need politics LLDP, thats right.

  Politics LLDP is used to having phones automatically choose the VLAN you set, so you do not need to set it manually.

  I hope that answers your questions?

  Best regards

  Nico glacier

  Senior Network Engineer - CCNA

• Catch 22 - Port Trunk Configurations: how to combine identifiers VLAN native with DHCP (but allows traffic of VM)

  Catch 22 - Port Network Configurations: how to combine identifiers VLAN native with DHCP (but allow the virtual computer)

  I came across a Catch 22.  Maybe someone can restore the directly here.  I found a "witch hunt" for sure.

  It comes with the Ports of junction on the side of the switch of the ESX host network.

  Context:

  Ok. The Setup is a HP Blade C7000 enclosure.  I try to configure ports for switching to the blades.  ESX 3.5 U4 will be installed the BL460cs.  Installation is preferred method: revive unattended.  No problem with the syntax of Kick-Start,

  I am here, it's the side network.

  The problem:

  I find a major complication in that the switch ports must be configured for both traffic Service Console and VMkernel, more Virtual Machine since only two NICs by blade. Not best practices, but we have only two switches Cisco 3020 inside.  The two uplink physical NIC is paired in the same vSwitch.  (No iSCSI does fortunately).

  So the Catch 22 question is as follows:

  If the id VLAN native set up on the switch port, DHCP works of course and the VMware boot loader is able to grasp a binary / packets on the network (FTP Site) and install OK.  But after no installation, no communication with SC unless I set the VLAN id of the SC to '0 '.  The value "4" 0 does not communication, but "40" is the VLAN native.

  If id configuring VLAN native retired from the Switch port, DHCP will not work and host does not have IP address during the VMware boot process.  This is as expected as traffic without label is not assigned an eligible

  VLAN, so no comms.

  The Port of the Switch configuration:

  interface GigabitEthernet0/16

  SERVERNAME description

  switchport trunk encapsulation dot1q

  switchport trunk vlan native 40

  switchport trunk allowed vlan 40-254

  switchport mode trunk

  switchport nonegotiate

  Speed 1000

  No cdp enable

  spanning tree portfast trunk

  end

  Summary

  OK, let's summarize where things are and if possible please attach responses to their digital identity.

  (1) is there a way to delete the VLAN tagging altogether side ESX host? Not only the id '0 '. The problem is with clearly with the VLAN native defined as "40".  If "40" IDs specified on the Group of ports for the Service Console, no joy, no comms. If the id of '0' value, capable of ping gateway and communicate on the network.

  (2) what is the problem with the definition of VLAN native as "40" when the config for the switch port is set as VLAN native "40"?  Or if it was a problem?  Both parameters clearly do not work together.

  (3) a switch receiving a unmarked frame it will assign to the VLAN Trunk native. Ok. Trunking bases and why I need a VLAN specified on the port for DHCP native work.  But it seems that since the id VLAN is set manually even as VLAN native, closed communications and no traffic as possible.

  (4) executives made tag 802. 1 q VLAN native?  I think that it is not and this could well be the problem. Since the id VLAN "40" is not labeled, but try to score the side host vSwitch port group.

  Please let me know your thoughts, community and how in general, we are approaching 2 NIC ESX configurations.

  When trunking multiple VLANs, you either have a default VLAN is nothing is tagged, or you don't.  That's what the vlan native to you, it defines which VLAN would be used if no tag is visible on the packets traversing the network.  For servers, if you are marking, then everything has to tag, if you're not marking at the server level, then the port must be either an access port or a VLAN native or default must be set.  I also don't keep your service console the same network as your vm.  Keep this isolated for the security of the network.  If you isolate this VLAN, you can separate and use a single IP address for installation and one for post construction.

  Or, you can provide an IP address during the build.

  -KjB

  VMware vExpert

• Subject of the vlan voice SRW224G4P

  Hello

  I have configured the SRW as vlan, use vlan for voice 212, 348 for data and communicate with cisco IP Phone.

  database of VLAN
  VLAN, 210-216 345-348
  output
  ID of the vlan voice 212

  !

  !
  interface fastethernet1
  activate the storm control
  Storm-control broadcast level 10
  Storm-control include multicast
  maximum port security by 10 points
  port security mode max-addresses
  port security throw trap 60
  spanning tree portfast
  switchport trunk allowed vlan add 212
  switchport trunk vlan native 348
  macro description ip_phone_desktop
  ! next order is internal.
  macro auto smartport dynamic_type ip_phone_desktop
  !

  but when I show vlan voice,.

  It shows:

  =====================================

  1ASW01 #show voice vlan
  Manage the VLAN voice State is automatically triggered
  Operational status of VoIP VLAN is enabled in auto
  Best Local Voice VLAN ID is 212
  Best Local VPT is 5 (default)
  Best Local DSCP is (by default) 46
  Concerted VLAN voice is received from the 34:62:88:73:05:c9 switch
  Concerted VLAN voice priority is 0 (static source active)
  Concerted Voice VLAN ID is 216
  Agreed VPT is 5
  Agreed DSCP is 46
  Voice VLAN agreed last change is 3 May 13 05:06:31

  =====================================

  I don't know why the vlan 216 became the vlan voice?

  I tried changed the build-in macro settings,

  auto macro of the built-in parameters ip_phone $native_vlan 348
  auto macro of the built-in parameters ip_phone_desktop $native_vlan 348

  but the system could not change the value of $voice_vlan.

  How to fix?

  Hi Skywings,

  So I think the above output is after the change, right? If this is true, it seems that something was wrong during the configuration process. Process of VLAN automatic voice has two main phases where one is related to communication between the switches and other Cisco infrastructure devices and synchronization of voice VLAN ID. The second phase is related to the identification of the end device as phone. What I see in your case that the first phase has failed somehow the voice VLAN ID is different from locally configured. Can you share with me your race and also start-up config more CDP neighbors? You can use private message.

  Kind regards

  Aleksandra

• Configure the VLAN voice and data in CISCO SF 300 8 P

  I have a couple of Cisco SF 300 8 P and P 24 switches. I have voice and data VLANS configured as:

  Data VLAN: default 145.17.59.0/24

  Voice VLANS: VLAN 20 172.22.20.0/24

  I have different DHCP servers regarding the data VLAN, we have a physical server that is configured for 145.17.59 * extended IP and Voice VLAN DHCP Server is configured as a router gateway with option 150.

  This configuration works very well with other cisco 2960 switches and 3750 etc. except CISCO SF 300 8 P and 24 p. I tried to set up the voice and data VLAN in these CISCO switches so that phone CISCO (model 6941) should get IP of the VLAN voice and PC should get the IP address of the DHCP server on the data VLAN. I tried several techniques such as LLDP, Port-to-VLAN Config etc.

  Can anyone please guide me / help on this.

  Kind regards
  A K.M.Sayeed

  Hi A.K.M., with Cisco phones you should be able to define simply automatic voice VLAN to be VLAN20.

  ID of the vlan 20 voices

  You must ensure CDP or LLDP is enabled as well. I would check in the web GUI. DHCP for phones can come from a DHCP server on a port access VLAN20 switch, or you can use dhcp for assistance to redirect DHCP server elsewhere.

  If you prefer or you have problems with the CDP or LLDP, you can also program the ports as trunks and add the tag VLAN 20 for them.  In this scenario, you need to ensure inter - vlan routing works and phones that download the file config with corrrect VLAN config.

  These switches do not run ios, so they are similar, but different from the catalyst switches that you mentioned.

  -remember messages useful rate.

• VLAN voice N3048P and DHCP issues

  Hello

  I just received several switches for our N3048P and 2 x 4048 access layer - WE for our base layer. Are the N3048P VLT'd between two of 4048. There are 4 x N3048P of one on the other. The 4048 possess all gateways via VRRP.

  I have 802. 1 x works with my Windows client test, and I can get the phone (Cisco 7941) to acquire a DHCP address if I put it on a port "switchport mode access. However, if I change the port to a general port with vlan enabled voice and 802. 1 x, the phone does not have a DHCP address, but the PC attached to the phone Gets a DHCP address in the VLAN correct.

  I see CDP and LLDP messages exchanged via Wireshark, and it seems that the phone and the switch are to exchange the VLAN voice correctly.

  My question is, why the phone can't one address DHCP?

  Here's the relevant config of switch below. I know that some of the config can be duplicated for troubleshooting steps:

  VLAN 75
  the name 'Test '.
  output
  VLAN 76
  name "Test_Phones".
  output

  IP helper-address 1.1.1.3 dhcp
  IP helper-address 1.1.1.4 dhcp

  interface vlan 75
  IP 172.16.75.4 255.255.255.0
  IP helper 1.1.1.3
  IP helper 1.1.1.4
  output
  interface vlan 76
  IP 172.16.76.4 255.255.255.0
  IP helper 1.1.1.3
  IP helper 1.1.1.4

  AAA authentication local connection to "defaultList".
  radius of start-stop AAA accounting dot1x default
  control-dot1x system-auth
  radius AAA dot1x default authentication service
  AAA authorization network default RADIUS

  VLAN, VoIP

  source-ip 172.16.75.4 RADIUS server
  Server RADIUS 'key' key
  RADIUS-server host 1.1.1.1 auth
  primary
  name "rad1.
  use of 802. 1 x
  key 'key '.
  output
  RADIUS-server host 1.1.1.2 auth
  name "rad2.
  use of 802. 1 x
  key 'key '.
  output
  Server RADIUS acct 1.1.1.1 host
  name "rad1.
  output
  host server RADIUS acct 1.1.1.2
  name "rad2.
  output

  Gi2/0/1 interface

  Description '802. 1 x client port.
  spanning tree portfast
  spanning tree guard root
  switchport mode general
  switchport general allowed vlan add 75-76 the tag
  dot1x re-authentication
  dot1x quiet-period 5
  dot1x tx-period 5
  dot1x comments - vlan 20
  dot1x Informati-vlan 20
  LLDP transmit tlv ESCR-sys sys - cap
  LLDP transmit-mgmt
  notification of LLDP
  LLDP-med confignotification
  VLAN voice 76
  disable voice vlan auth
  output

  Thanks for any input you may have. I would like to know if there is any other information, I can provide.

  -Jason

  That ends up being the correct port configuration:

  Gi2/0/1 interface

  Description '802. 1 x client port.

  spanning tree portfast

  switchport mode general

  switchport General pvid 75

  VLAN allowed switchport General add 75

  switchport general allowed vlan add 76 tag

  dot1x port-control on mac

  dot1x re-authentication

  dot1x quiet-period 5

  dot1x timeout supp-timeout 15

  dot1x tx-period 5

  dot1x comments-vlan-deadline 15

  dot1x comments - vlan 20

  dot1x Informati-vlan 20

  VLAN voice 76

  disable voice vlan auth

  The most important line here is «the dot1x port-control on mac» I got 'auto control by port dot1x' configured, but it does not work as expected. In addition, defining the comments-vlan-period and supp-timeout were necessary. If the port was shot, the switch would not necessarily reauth port.

• VLAN voice and data on a single port

  Hello

  I have some 5548 P Dell switches, but I just Cisco environment.

  I find a lot of information on this but most of it relevant to the VLAN marked and unmarked on a port in general. Some articles suggest to put the port in trunk mode...

  anyway (without taking into account the QoS) how you would accomplish this example Cisco on a Dell switch:

  Switch (config) #interface g0/1

  Switch(Config-if) #switchport mode access

  Switch(Config-if) #Switchport access vlan 50

  Switch(Config-if) #voice switchport vlan 10

  Thank you!

  For general mode, commands would be present as follows.

  Console (config) # interface gigabitethernet 0/1/1

  Console # switchport mode general

  Console # switchport general allowed vlan remove 10

  Console # switchport General allowed vlan add 2,3,4,50 tag

  Activate console # vlan VoIP

  Trunk mode:

  Console (config) # interface gigabitethernet 0/1/1

  Console # switchport mode Trunk

  Console # switchport Trunk allowed to remove vlan 10

  Console # switchport Trunk allowed vlan add 2,3,4,50

  Activate console # vlan VoIP

• Get some VLAN voice to work on 5548P

  Hello

  I was wondering if there is a way to accomplish the following. I want the passage to the tag the traffic on its own based on the YES Table and pass it up to the Sonicwall (DHCP server/router) without going through the phone itself do the marking. Is this possible? Currently, the installation so I put manually the VLAN ID on the phone itself, but these phones can work anywhere there is a sense of internet connection if I manually add the tag VLAN, the phone will not work outside of the corporate network.

  Thank you

  If your phone supports LLDP-MED, you can install the switch with a VLAN voice. This wiki covers the implementation of the VLAN voice.

  http://en.community.Dell.com/TechCenter/networking/w/wiki/configuring-Dell-PowerConnect-55xx-series-switch-voice-VLAN.aspx

  Do not have to configure phones that you configure LLDP-MED. The VLAN ID information are passed with LLDP-MED configured on the VoIP phone using the LLDP-MED mechanism. By this method, the voice from the VoIP phone data are tagged with the VLAN ID exchanged and the usual traffic would go to the PVID.

  Here is the link to the user guide. LLDP-MED configuration begins at page 540.

  FTP://FTP.Dell.com/ Manuals /Cccomplis /powerconnect-5524_User%27s%20Guide_en-us.pdf

  Once the phone is in the voice VLAN it can still receive an IP address by the DHCP server using the DHCP relay. The switch acts as a DHCP relay agent that listens for DHCP messages,

  and passes between DHCP servers and clients, residing in IP or VLAN different subnets.

  Relay DHCP and espionage begins on page 563 of the user guide.

  I hope this helps.

• ESXi 5.0.0 623860 and HP Procurve 2810 - 48G grouping/Trunk

  Hello

  I have a VMware ESXi 5.0.0 623860 host running two Windows VM well enough. The host material is an HP Proliant DL 380 G5 server.

  This host is Gbit Ethernet connected to a HP Procurve 2810 - 48G (J9022A) switch via two cables UTP Cat 5e.

  I want to configure an ethernet trunk using the two ports of the switch for fault tolerance and failover disaster link.

  I have telnet switch and configure ports like Trunk3 with TRUNK (not LACP) option as shown in this picture:

  

  To the ESXi side I'll to the vSphere Clent to Configuration-> networking-> vSwitch0-> properties-> Edit-> grouping of NETWORK cards, then set the option Load Balancing on "Route based on the IP hash" as shown in the following image:

  

  At that time, with or without restarting the software Procurve or ESXi host I ping the host and two virtual machines in it, but after about 10-15 minutes, I lose connectivity to the host (ping stops). So if I disconnect one of the UTP cables connect it again.

  I don't know if these are the good configurations for my goal, so any help would be much appreciated.

  Thaks a lot.

  OLIVEIRAS

  Hi Kamen (and oliveiras - in case you have not found a solution for this yet).

  I had the same problem recently with ESXi 5.1 and a HP switch and I fixed it by following this link:

  http://KB.VMware.com/selfservice/documentLinkInt.do?micrositeID=&popup=true&LanguageID=&externalID=1022751

• Assignment of the ACS 5.2 VLAN dynamic - problem of vlan voice

  Hello

  When I want to configure the VoIP VLAN through ACS, I go to elements of strategy > permissions and permissions > network profiles and then on the common task page select Voice VLAN > static according to the picture below

  

  Configure then configure the VLAN ID > static > VLAN_number

  But this only allows the VLAN voice and set it to VLAN_number, the VLAN DATABASE will remain unchanged and not configured.

  So my question is, is there a way to configure both the voice (and him) AND the VLAN DATABASE?

  I tried to manually add RADIUS attributes to a second VIRTUAL LAN, but it is not allowed.

  Any idea?

  Kind regards

  Thibault.

  Hi Thibault,

  Why you want to configure the voice and data on the same permission profile?

  If this configuration should be used for an MDA (multi-domain) config on the switch, then take account of the fact that the IP phone and the customer of data must go through separate authentication sessions.

  This being said, you should instead set up two profiles different autz and configure different rules in the authorization policy that apply "voice" for IP phones profile and the profile of 'data' for data clients.

  I hope that answers your question.

  Kind regards

  Federico

  --

  If this answers your question please mark the question as "answered" and write it down, so other users can easily find it.

• How to add a VLAN on a trunk port and channal port

  Hi all

  I need to set up a configuration details below.

  1 how to add several VLANs on Cisco 4500 switch trunk port. (vlan existing also will be there)

  2. I have also 2 4500 switch to shared resources and channel ports.

  So my question is should I add new VLANs on the trunk port and port also channel?

  Looking for an answer

  It depends on your existing configuration.  If you have not specified WHAT VLAN is allowed, they would be by default.  If this isn't the case, you need to add the VLAN again to the definition of trunk.

  Too far again go to that VLAN, that also depends.  IF you have VTP really set up, you have to create the new vlan on one of the master switches in VTP (probably your 4500) and the definition spread to other switches.   If this isn't the case, then you declare new VLANs on each switch that would need them.

• HP ProCurve 2920 - 48G: HP ProCurve 2920 - 48G with the issue of SFP

  Question: With copper connected between the two baskets on 20 Port (VLAN2), I have was ping another basket. But when we restart the switches with fiber Port 45 (VLAN2) instead of the cooper between two baskets, I cannot not ping another basket. Both switches HP report their 45 Port "Port State" as UP. Also tried combinations of the trunk (with Trk1) and flow control to the two switches, but no change.

   

  Rack A Rack & B;

  HP ProCurve J7928A SFP J4858C equipped port in port 45-48

  -VLAN1 untagged 1-15

  -VLAN2 untagged 16-30 & 45

  -VLAN3 untagged 31-44

  -Ports 1-44;

  -Type: 100/1000 t

  -Mode: Auto

  -Frother: disabled

  -Distribution limited: 0

  -LACP Status: Disabled

  -Type safe: no

  -Group master: no

  -Port45;

  -Type: 1000SX

  -Mode: Auto

  -Frother: enabled

  -Distribution limited: 0

  -LACP Status: Disabled

  -Type safe: no

  -Group master: no

  Cable;

  -2 x Orange fiber Multimode

  Hi, I made a household of VLAN and put 45-48 ports in the same VLAN, and it pings another grid very well now. Weird why SFP ports needed to be together.

• Priority of VLAN on a Trunk port

  What is the easiest way to give a single VLAN a higher priority than the other on a trunk port?  I have two VLANS, VLAN 10 and by default.  I want to VLAN 10 to have a 802 .1p priority 6 and I want the default VLAN priority of 2.  Is it possible in basic QOS mode, or do I need access to advanced mode?

  Thank you!

  This networking wiki has lots of good information and follow. Looking at what you have planned, everything looks good to me. Let us know how it goes with the implementation.