Implementation of VLAN and QoS for VOIP on SG200-18

Similar Questions

• Implementation of VLAN / QoS for VOIP on RV180

  I posted earlier about setting up VLAN / QoS for VOIP on the SG200-18 (see: https://supportforums.cisco.com/discussion/12193666/setting-vlan-and-qos...).

  I did go ahead and buy the RV180. I connected to SG200-18.

  I wish to proceed with the implementation of VLAN / QoS on the RV180 so my phone (Grandstream VOIP wireless phone) VOIP is on its own VLAN separate from the rest of the network, so make sure that all QoS settings are optimized to give the first priority of VOIP network telephone.

  Currently I still have the VOIP phone connected to SG200-18 as stated in the previous post.

  Here are my questions:

  1 should I leave the VOIP phone connected to the SG200-18 and config all the VLANS, VLANS and VLAN Switch voice settings down to the VOIP phone, or should I plugged the phone VOIP in the RV180? Which would give me better performance and easier to do?

  2. How can I place the VOIP phone on its own VIRTUAL LAN, in addition to optimizing QoS settings so it gets a top priority for the network?

  3. I currently have set VOIP telephone in order to reserve a DHCP address in the 192.168.x range. When you move to the VLAN, should I set the DHCP reservation and/or my firewall settings (I through the firewall as well)

  4. I also get a beta-test VOIP Grandstream office phone. Time of its installation, what I have to plug directly into the RV180 or the SG200-18, and I have to put it on the same VLAN as the phone VOIP without wire Grandstream or VLAN different? It also supports PoE, but the RV180 or SG200-18 model I does not work. If I use an external power supply, connect each device will be OK or might that it became fried?

  Thank you!

  Hello

  1 should I leave the VOIP phone connected to the SG200-18 and config all the VLANS, VLANS and VLAN Switch voice settings down to the VOIP phone, or should I plugged the phone VOIP in the RV180? Which would give me better performance and easier to do?

  It will not be much difference between being on the switch or on the router, so it is for the most part to the simplicity of configuration performance.  If you plug the phone directly on the router, you will really not disturb trunking VLAN or none of this switch.

  This is really what is more convenient, but if you are able to plug into the RV directly I wouldn't worry QoS on the switch.

  So let's talk about implementation of the RV180.

  First go to network > LAN > belonging to a VLAN.  Enable VLANs, and add a new VLAN for voice (most people use 100 for voice for a reason, but it does not matter).  You will take care to set the port that the phone is plugged in not tagged to the new voice VLAN, and you can exclude the data VLAN of the port.

  Then go to several VIRTUAL local network subnets and configure the address range for it configuration DHCP / new subnet (for example 192.168.100.0) If you do not want to use it (makes things a bit easier)

  Finally, to enable QoS on the RV go to QoS > QoS WAN profiles.  Activate the WAN QoS, make sure that it is set to the priority mode and add a new entry to the table.  You can name it anything you want (I used VoiP), then set it high priority.

  Then go down on the link profile page and add a new entry here. Select the profile you just created in the drop-down menu, set the service to one, select traffic selector VLAN and make sure the drop-down menu for VLAN is the VoIP VLAN.

  At this point, we have a configuration where the voice traffic (or basically anything on the VLAN voice) will have priority when it comes out the WAN interface.

  3. I currently have set VOIP telephone in order to reserve a DHCP address in the 192.168.x range. When you move to the VLAN, should I set the DHCP reservation and/or my firewall settings (I through the firewall as well)

  The second VIRTUAL LAN should have a configuration of different subnet for him, because I spoke up.  During this process you will place the DHCP server for the new VLAN as well.  You can adjust your reservations for the phones, but it does not really matter what IP they get, since we are prioritizing voice any VLAN, so you don't have set up a reserve, unless you really want to.

  4. the Grandstream phone.

  I would put the Grandstream (and all the other VoIP phones that you could get) in the voice VLAN so that he would get the same priority treatment.  At this point with multiple devices, you can indeed install a trunk to the switch (VLAN normal unidentified and voice VLAN Tag) and configure the ports to the voice VLAN for these phones.  Who will ensure that the switch gives priority to the traffic of voice, even if it is probably not as important in their own country on the WAN.

  Regarding the PoE device connected to a non PoE switch or a router, there will be no problems.  I'm guessing that the phone also comes with an AC adapter.  It will not feed this power in the thread just because it's PoE, it's pretty much a one-way circuit.

  Hope that helps,

  Christopher Ebert - Advanced Network Support Engineer

  Cisco Small Business Support Center

  * Please note the useful messages *.

• SGE2000p QoS for VoIP

  I am trying to increase our quality of telephone problems. Things like backup tapes, download heavy etc. are originally phones get all cracked. I don't know where to start. Everyone says of VLANS, but I don't know if this is the best choice. I don't know anything about QoS in the SGE2000P switches. I keep reading, but he gets no more clear. I need a little help direction. I see things on the VLAN, basic QoS, QoS advanced and do not know which route to go.

  I have 3 batteries of the total of 8 switches switches network segment all the same SGE2000P. The main chimney is connected to smaller piles by a fibre optic cable. Some computers are connected to the voip phones due to the absence of inside wiring of the building, but a lot of phones have a line dedicated to the switches.

  Consider phones like three switches of ports (because that's what they are).  A port is the phone, going to a single port and a port goes to a PC.  A switch when you set a port as a trunk you can tag the traffic for VLANs, create separate virtual local networks on a single physical link.  Similarly, on the side of the phone when you configure an IP to use phone a VLAN you say the switch to have a trunk port to your switch and the telephone to communicate on this VLAN tagged.

  The VLAN native is the VLAN untagged.  Computers don't understand VLAN and just send the traffic untagged so when you connect the PC to the back of the phone it will operate the same as it does now.  the difference will be that the phone will be on a different subnet and VLAN.

  Taking example of VLAN 100 for voice, you need to change the IP address of your IP PBX for something in a new subnet as 192.168.100.1/24 and create a port on a switch, a put in VLAN 100.  Connect to your firewall for routing inter - vlan.  Then find a way to get the phones IP address in the subnet and configs updated to use VLAN 100 and enter 192.168.100.1.  If you configure inter - vlan routing properly advance, you should be able to have a reboot of the phone, coming up on the data VLAN, get a new configuration that specifies the use of VLAN 100, reset again and this time come on VLAN 100 with the new address and function properly.

• The CBAC and CEF for VoIP

  Hallo

  I have a cisco router from 1721 to LAN-to-LAN and Internet access.

  The WAN link is EN PVC two one for LAN-to-LAN and Internet.

  On the LAN-to-LAN PVC we must apply the VoIP so I would use LLQ, other features QoS and CEF (Cisco Express Forwarding).

  On Internet in PVC, we would have IOS Firewall with CBAC.

  Can I use the CBAC and CEF at the same time?

  Not only should you use CEF, but you must. Such LLQ implemented only with CBWFQ requires that the router has enalbed CEF. CEF will not affect the functionality of the CBAC. CEF is simply analogous to fast switching switching method, except that it has the information previously stored in a table for quick access. It is the most effective method of switching your router can use.

• Questions of VLAN and configuration for Cisco AIR-CT2504-25-K9 Controller

  Hello

  It's my first time thanks to the Cisco wireless solutions, so I was hopping someone could help me with the following:

  We just bought the AIR-CT2504-25-K9 controller with some points of access for the AIR-CAP1702I-E-K9.

  The network is as follows:

  Peripheral layer 3 (managed by third parties): it's on the domain network. (VLAN by default, 1 - unidentified)

  ADSL router - it's the network without comment thread. (Default Vlan 4 - tagged).

  VOIP: VLAN 5.

  Both fittings go into a switch Cisco SG500 52 (Layer 2). There is a port to shared resources on the switch SG500 with VLAN 1 (Tagged) and VLAN 4 (with tag). The WLAN controller is plugged into this port trunking.

  The data and management network are in the same subnet and on the same VLAN (1).

  I used the wizard on the controller setup.

  There are three interfaces:

  management VLAN ID 1 IP 192.168.1.2 Port 1 (configured with a gateway domain network, DHCP, etc.).

  VLAN wireless identifier 4 IP 192.168.5.1 Port 1 comments (configured with modem router ADSL, DHCP, etc.).

  Virtual IP 192.0.2.1

  Proxy DHCP active overall.

  There are two wlan networks:

  (1) area - management Interface - SSID abc.

  (2) comments - comments Wireless Interface - SSID xyz (the wizard put to management, but I changed it to the wireless).

  Are the AP connected to another SG500 switch which is shared resources to the switch with the controller.

  Ports of the APs are connected to have only 1 VLAN unidentified. They don't have 4 VLAN Tag or not identified. However, everything seems to work as expected.

  When I join the guest network (SSID xyz), I get an IP address from the router ADSL and all Internet traffic goes through him. When I connect to the domain network (SSID abc), I get an IP address from the DHCP in Windows Server and all traffic goes through the device of layer 3 (I checked the public IP address in my browser). I can't ping anything from one network to the other.

  My questions are the following:

  (1) how the guest network traffic (VLAN 4) headed the APs controller when they are connected to the ports on VLAN1? Is it because the traffic is encapsulated?

  (2) is set up correctly? After you configure the controller, I saw a note in the forums, this State I can simply enter 0 for the management of VLANS to let it not identified. However, in my case, I kept it as 1, which is the same as the switches and then the tag VLAN on the switch. In addition, the set Wizard wlan of comments to use the management interface but I changed it to use the comments interface.

  (3) when I connect to the APs of the controller, I see several options that can be configured manually. Is it necessary for this? For example, there is an option of data encryption.

  Thank you

  A

  Hello

  (1) how the guest network traffic (VLAN 4) headed the APs controller when they are connected to the ports on VLAN1? Is it because the traffic is encapsulated?

  Yes, I'm with CAPWAP:

  More information: http://lets-start-to-learn.blogspot.de/2014/08/cisco-wireless-understand...

  (2) is set up correctly? After you configure the controller, I saw a note in the forums, this State I can simply enter 0 for the management of VLANS to let it not identified. However, in my case, I kept it as 1, which is the same as the switches and then the tag VLAN on the switch. In addition, the set Wizard wlan of comments to use the management interface but I changed it to use the comments interface.

  If you want that mgmt interface must be unmarked and then put 0 otherwise you can use vlan 1.

  I do not have what is configured under mgmt and comments interface, but according to the name I'll say yes, you must set the comments under comments wlan interface.

  (3) when I connect to the APs of the controller, I see several options that can be configured manually. Is it necessary for this? For example, there is an option of data encryption.

  Yes, there are many things that you can configure, but I'll leave most of the default of things unless you really need to change!

  The following best practices: http://www.borderlessccie.net/?p=270

  Concerning

  Remember messages useful rates

• Cisco QoS for VoIP 300

  I have a question about best practices for packages of priority voice on the LAN side.

  We have everything configured on the firewall/edge device for the prioritization of voice, however I'm not sure of the exact to take sideways steps LAN to make sure that the LAN traffic will not affect voice quality.

  A very basic configurations: vlan 1 (the default) for data and vlan 100 (voice) - the ports are configured as general (1untagged, 10tagged).

  At this point, the phones are manually set with a vlan, but form read these forums I see that I can accomplish this by creating LLDP and automatically assigned to him the vlan instead, manual setting

  My main concern, however, as mentioned above, is QoS.

  Does anyone have a good practice or advice on how to Setup QoS specially for the voice.

  I found this pdf file, but I didn't know where they came up with the EIF and CBS values.

  https://supportforums.Cisco.com/docs/doc-13461

  This is my first post on the forums; Thanks in advance for any help provided.

  Hi Thomas, this is done automatically through the QoS of Basic. Within a bunch of tag VLAN, it is a value of CFP (3 bits). When the switch receives such framework it will honor the value based on this value of CFP.

  -Tom
  Please mark replied messages useful
  http://blogs.Cisco.com/smallbusiness/

• Configuration of SRW series QoS for VoIP

  Hello experts from Cisco.

  I SRW224G4 switch in an office connected to the internet through port1, Asterisk server via port 9, computers internal through ports 16-24.

  Currently, the voice is cut in the inbound direction when computer users use the Internet. I'm doing a configuration QoS in which IAX2 phone remotely, using the port UDP 4569, suffer no Internet usage by internal computers.

  I connected to the switch management Web site, I found a section (QoS), but I need help to specify what setting should I set up.

  Internet connection speed is DL 1 Mbps / 512 kbps UL. I can configure Asterisk to mark packest with a team of specialists as needed.

  

  One way to do this would be to configure Asterisk to assign a DSCP 46 value to voice packets.

  Then on the SRW224G4, use:

  CoS settings tab / QoS mode: basic

  Basic tab / Trust mode: DSCP

  That would give priority to voice inside your network packets.

  Possible problems:

  • your ISP will probably erase DSCP marking on packages coming out of the network
  • rare case: your ISP may charge you more for packets marked with the DSCP 46 (probably not on an ADSL connection)
  • bottleneck will be the ADSL router, so if possible, you should implement QoS DSCP-based on this device
  • If on some PC software uses the DSCP marking, it will also have priority

  I hope this helps!

  See you soon,.

  Tamas

• delegation of security of VLAN and LUN for the isolation of customer

  Does anyone know if vSphere will provide the delegation based AD of LUN security and VLANS?  I need prevent clients in pools of resources to access other customer networks and paid virtual disks.  Lack of permissions on Mon and VLAN has forced me to build groups isolated in a data center in order to provide safe limits.

  Any info is greatly appreciated as I'm about to buy new equipment for yet another cluster.

  Thank you

  -Chris

  Hello

  If you allow your customers to use vCenter, so you already have quite a few problems, but in general you can use roles and perms to deny access to certain things. Delegation is however NOT supported. You can also look into

  So in general, delegation no. AD Network/LUN is NOT supported. You can configure a virtual network to a client cannot access any other virtual network. You can have a unit logic or LUN by customer number. But if you need to grant access vCenter (I would never do this) then you may wan to watch the HyTrust appliance.

  For the moment, you have physical constraints with LUN and design of virtual networking that will protect your networks. Note You can include in this VMware vShield Zones design that helps protect one network from another. etc. That is, it's like a packet filtering firewall.

  Best regards
  Edward L. Haletky
  VMware communities user moderator, VMware vExpert 2009, Analyst of DABCC
  ====
  Author of the books ' VMware vSphere (TM) and Virtual Infrastructure Security: ESX security and virtual environment ' available for pre-order now
  "VMWare ESX in the Enterprise Server: planning and securing virtualization servers, Copyright 2008 Pearson Education."
  SearchVMware Pro| Blue gears. Top virtualization security links| Security Round Table Podcast virtualization

• VoIP QoS for Tunnel from Site to Site

  Hi all

  I need help to configure QoS for VoIP between two Cisco ASA 5505 with VPN Site to Site.

  There is no need for bandwidth reservation, only 46 (EF) DSCP should be higher and DSCP 26 second queue higher and rules apply only to a site to site VPN.

  Usually, I try to configure the ASAs via ASDM and discovered in the documentation Cisco how configure QoS DSCP bits with a Service policy and how to configure QoS for a VPN from Site to Site (rule Service-> Match traffic strategy). But how to configure QoS for a bit DSCP applies to Tunnel from Site to Site? And how configure different priorities for both DSCP bits, this is defined by the order of political Service?

  The quality of service must be activated on the two ASAs to inside interface?

  Thanks in advance

  Tobias

  Like most-

  class-map voice_traffic
  match dscp ef
  match dscp 26

• Setup of QoS for Whatsapp and VOIP application

  Hello guys,.

  I have a modem WAG320N. I have wasnted to configure the QoS priority for 2 applications 'Whatsapp' and a VOIP application that allows me to call from a computer to a mobile phone. I use torrent applications and that they take all the bandwidth. That's why I was looking for to configure QoS for these two applications.

   

  I went to the page of QoS and they are wondering about the details of the application as the range of ports etc.. I don't know what value to be filled. I posted a screenshot below of his request. Can someone help me fill out these details for both applications.

  Thanks in advance

  Image: http://i40.tinypic.com/2qi02z5.jpg

  You can add essentially Viber on QoS. Under the games and Applications, QoS, click on enable priority access Internet. On the category, find the Applications > add a new Application. You can enter the name of the Application. You can now add the port numbers. And since it is a specific port and no beach, do you this way;

  5242 - 5242 TCP (for Protocol)
  4244 4244 TCP
  5243 5243 UDP
  9785 9785 UDP

  I hope this helps.

• Implementation of QOS for on multiple switches for two VLAN

  afternoon all that I was looking for a little help in configuring QOS for two local area networks VIRTUAL, I created. These will be for voice traffic vlan 22 and traffic video vlan23. I also have three other VLAN for pc, wireless devices and our cnc machines. We have 5 switches which are all SG30028P with a single switch making the intervlan routing (Layer 3-powered). all switches are resources shared by the main switch and ive been through the guide written on how to do it on a single switch, which I think is layer 3.

  could someone help me with what I want the video and voice to take precedence over the rest of the traffic

  best regards Patrick

  Right, this way, you can give priority to IP or MAC address.

  No, there is nothing different, only one review of the routing. As the L3 switch can make local routing decisions, the placement of the ACL can vary. In an L2 environment, all packages are transferred to the router, then back down the network to the local destination, so you can clear an ACL on the uplink.

  Since you have a L3 switch, you can practice the same, empty an ACL on the link downstream for L2 switches for all traffic subject to the ACL. Any connection to the L3 switch, you can of course apply an ACL to the uplink router to get all notice of incoming traffic correctly. You can also apply a policy on port source interface to get the note as soon as traffic hits the switch.

  QoS policy is the concept of an ACL, you want it is the closest to the resource. If you apply a QoS policy an uplink upward, QoS will be marked up when it hits this port. Not before. So it should be applied closest to the device as possible. Many times, local QoS is not as important, until it starts to get to the router. As most Cat 6 environments can generally manage all local traffic. So, depending on the number of devices and the amount of traffic, a decently robust network can handle all traffic local then you just give priority to the uplink remarks to ensure that what is important is first.

• Implementation of VLAN for wireless AP with two SSID

  I am trying to install a RV180 and 3 wireless access points. I want that the AP is having 2 SSID isolated from each other. IE comments network and core network. I have setup a VLAN and my AP support 802. 1 q and ssid matching of VID. I could get this background work, but things seem to have gotten confused when I plug a POE switch instead of directly in the rv180 of the AP. At this point I don't know exactly what to ask. Perhaps start by providing information based on how I'm supposed to do. I was under the impression that since both devices are supported 802. 1 q I could configure the VLAN on the router and tell the AP to apply a VID of the SSID and thing would work. This is not the case unfortunately. Any help would be appreciated.

  Aaron Hi, depends what's this switch. If it's a unmanage switch, it cannot process tags vlan so the switch will only be a member of the vlan native who is connect from the router.

  If it is a switch to manage, you must configure the same as the router, a vlan native UNTAG, tag vlan for the connection to the AP and router port.

  -Tom
  Please mark replied messages useful

• Hello Experts, I would use only Lightroom but current implemented by Adobe will force me to get Photoshop and Lightroom. Is there a way where I can get only Lightroom and pay for the same thing.

  In the present implementation by Adobe if you need Lightroom alone, they must obtain and pay for Photoshop also which I'm not interested. Is it possible I can get only Lightroom. ? Help, please.

  Just for clarity, the strict answer to your question is 'no': you can't just Lightroom for the same price as the bundle Lr/Photoshop Creative Cloud (CC).

  You can buy a stand-alone license for Lightroom only - that's what Don and Elijah helped you to find - but the terms of pricing (and licenses) are entirely different from those that make up the whole of the CC.

  Also note, it is likely that Lightroom 6 will come before long (although how long is not known): almost certainly, you will pay for the upgrade to Lr 6 If you are on a stand-alone license, then just 5 to 6 (7 and to...) is included in the price of the set.

• Is it possible to implement a login and a password for viewers to have access to a site of generated muse?

  A customer asked if we could implement a login and a password (login owner) for their potential customers visit their Web site. They don't want the entire site to be public, but wishes to offer a login and a password for customers to be able to check their site for a period of time. Is it possible within the MUSE?

  Hello

  Please check the following discussion

  Re: How to create an entry page protected password for a site of muse?

• QoS for tenant

  I rent a small apartment next to my house.  The tenant use the internet a lot and when I try to use it, it becomes very slow. I don't want to limit bandwidth, when I'm not home that he can use all he wants, but I want a way to give priority to my use of the internet.  My main router is a 1841 and I have already setup QoS for voice.  I just want to apply the QoS policy on his particular IP.  I give him a public IP address and it connects his router.

  So, basically, I want to have him use internet at full speed, until I decide to use it, at that time my stuff will prevail on his stuff.  It will always be unless it is VoIP, then VoIP stuff will always take precedence over everything.

  The 1841 has two interfaces Fa0/0 is my WAN and fa/0/1 my LAN.

  How can I do this?

  Bandwidth control is what is used to establish the value of percentage Yes.

  Queues of traffic is only really makes sense when you let the router not load Rx is already received over your WAN interface.i.e. entry.

  Then apply the policy to output interfaces (output) and that should do the job.