Restricted Inter-VLAN with SG200-26 and SG300-10 routing

Similar Questions

• Help with the VLAN on SG200-18 and two switches SG200-08

  Hello world. My apologies, but I'm only average at best with my CISCO skills. I have simple installation running some network devices connected via 3 CISCO switches. It is small office and two bedrooms - one with the servers and the other with the printer and pc. Each room has 8 ports SG200-08 pass.

  Router / firewall is Sonicwall TZ215 and manages the internal routing between VIRTUAL networks. Each SG200-08 was directly connected to TZ215 (no SG200-18 again) and VLAN worked perfectly. Please see diagram below...

  Problems started when I added in the Center SG200-18 more to handle additional devices. Everything that I'm doing wrong, but I can't do VLAN longer works. Something I won't set up correctly in SG200-18.

  Please help me to Setup VLAN here - tag, unidentified, PVID, trunk... I am completely lost and already had to reset SG200-18 twice.

  My work without port switch 18 Setup was like that.

  SG200-08 (1)
  G1 1 trunk 1U, 100 t
  G2 1 trunk 1U
  G3 1 trunk 1U
  G4 1 trunk 1U
  G5 1 trunk 1U
  G6 1 trunk 1U SERVER3
  G7 trunk 100 100U SERVER1
  G8 trunk 100 100U Server2

  SG200-08 (2)
  G1 1 trunk 1U, 50 t, 200 t
  G2 1 trunk 1U
  G3 1 trunk 1U
  G4 1 trunk 1U PC1A
  G5 1 trunk 1U PC1B
  G6 trunk 50 50U PC2A
  Trunk PC2B 50 50U G7
  NETWORK PRINTER for the 200 trunk 200U G8

  Thank you in advance.

  VLAN.jpg

  

  Hello

  Oh I'm sorry. I understand that you have 3xSG200-08 and 2 of them with the same configuration :-). So no need to use this port for now.

  Kind regards

  Aleksandra

• Problems with AirPort Extreme and Qwest Modem/Router.

  I have a Qwest ActionTec 1000 DSL VDSL2 gateway and want to disable the functions of router wireless and those through direct AirPort Extreme. I know that in the Modem I have to disable the functions of addressing and turn them in the AirPort Extreme to avoid address conflicts, but what are the settings I need to change in both devices? And what is "A Transparent bridging" on the side of the modem?

  But what are the settings I need to change in both devices?

  Sorry, we can't help on the settings for the modem/router, because it would be a question of Qwest as to if this is even possible and if so, if Qwest will support this type of installation. Sometimes the ISP lock modem/router settings, and although it seems as if you can change the basic configuration of the unit, you can really.

  Yes, it is possible that another user of Qwest has done with the same modem/router you have and an AirPort Extreme... and may know the answer... but the chances of the person who holds this information also to see this post are slightly above zero. But, I guess it's possible.

  If the modem/router can be configured to operate only as a simple modem, then the next step would be to get your Mac connected directly to the modem to test the connection in this way. If Qwest is going to help you, they will do it no doubt with your Mac connected directly to the "modem" as well.

  Once you know the exact details of the PPPoE authentication to establish a connection, these parameters can be transferred to the AirPort Extreme and removed from your Mac. To do this, you reset the AirPort Extreme back to default and then put settings in place again. The installer should detect the PPPoE connection and then ask for your login information.  After this, the correct settings apply to AirPort Extreme during the installation.  You can still use the same wireless network name and password you used before if you wish, or set up a new network name and password.

  PPPoE on the routers of the airport, at least in my experience, was not a reliable way to connect when I tried this in the past, but you don't really know how well... or even if... it will work until try you it. Unless you really want the airport to distribute IP addresses to devices on your network, things would be a lot more simple if you went ahead and used the modem/router "such what" and then let the airport works in Bridge Mode to transfer information in connection with network devices.

  When you have the modem/router converted to act as a simple modem and made a successful connection using your Mac connected directly to the "modem", post back and we can help with the configuration of the AirPort Extreme if you need more advice.

• SG200 - 50 p, SG300 - 28 p phone YES Voice VLAN

  Hey guys,.

  I'm having a problem with the YES voice of VLANS on SG200 - 50 p, SG300 - 28 p, layer 2 Mode. Firmware 1.3.7.18.

  Enabled on a port all the ports PVID unlabeled said no marked traffic is blocked.

  Example:

  Data VLAN 10 - 192.168.10.0/24

  Voice VLAN 100 - 192.168.100.0/24

  Configuration of Vlan voice and YES added and enabled on ports.

  All Ports configured as trunk Type.

  Example 1:

  Members Table shows that:

  Port 1 - 10UP

  2 port - 10UP

  YES disabled: 2 laptops connected to ports 1, 2, traffic passes.

  YES Enabled: 2 laptops connected to ports 1, 2, traffic blocked on VLAN10.

  Example 2:

  1 - 10UP, 100 tons of port

  2 port - 10UP

  Port 3 - 10UP

  YES Enabled: 2 laptops connected to the ports 2,3, blocked traffic on VLAN10.

  1 phone connected to channel 1, the phone connects.

  So it's using, but for some reason any the vlan untagged on that port is blocked when the YES is enabled.

  I have installation this scenario on many switches cisco small business before and it works very well, so I wonder is this a firmware issue? or am I just being stupid and something wrong?

  Thanks for any help you can provide! :)

  Hi Vladimir,.

  It's something about Cisco still working. You are more than welcome to open the ticket with us and contribute actively. At this point, the only solution is to sue 1.3.5 firmware which does not show this problem.

  http://www.Cisco.com/c/en/us/support/Web/TSD-Cisco-small-business-suppor...

  Kind regards

  Aleksandra

• DMVPN with digital ceritificates and Hub acts as a CA server

  Hello guys,.

  is there anyway to configure the DMVPN with digital certificates and change the router Hub to act as a CA server?

  Thank you

  Yes, you can do it, go ahead and set up your router, Hub, with the normal DMVPN configuration so that it becomes the hub. After doing that follow the link below to add public key infrastructure server features:

  http://www.Cisco.com/en/us/docs/iOS/12_3t/12_3t4/feature/guide/gt_ioscs.html

  And to register for the rays on the hub, use this link:

  http://www.Cisco.com/en/us/Tech/tk583/TK372/technologies_configuration_example09186a0080210cdc.shtml

  Remember that regardless of the router Hub being the authority of CA, you must sign up for itself to allow the IKE PKI authentication.

• Problem with VLAN between Cisco Catalyst (3560G) and SG300-52

  I am having trouble with the creation of a trunk of vlan between a SG300-52 and a Cisco Catalyst 3560 G.  I have 4 VLANS (1, 2, 10 and 11) on the 3650 and I need ports on the SG300 to be able to communicate with them.

  On the 3560, port 14 is defined as:

  interface GigabitEthernet0/14

  switchport trunk encapsulation dot1q

  switchport mode trunk

  spanning tree portfast

  On the Sg300 port 52 is defined as:

  interface GigabitEthernet52

  point to point link type spanningtree

  switchport trunk allowed vlan add 1,2,10,11

  description macro switch

  Try to understand what the problem... Any help would be appreciated.

  Thank you

  Chris

  Hi Chris, the first problem is the spanning tree portfast, it shouldn't be on an interconnection network switch. You may have a mismatch of vlan native as well, but that shouldn't matter.

  A suggestion, however, the value of the port SG300 general mode and disable the input filter.

  -Tom
  Please mark replied messages useful

• No SG300-52 routing inter - VLAN

  Hello

  I have a base on this SG300-52 configuration:

  • L3 is enabled
  • Latest Firmware is installed (1.4.0.88)
  • Vlan1 IP is 10.0.0.1/24
  • A PC is connected to port 1 (with IP 10.0.0.3)
  • VLAN99 IP is 192.168.0.2/29
  • A router is connected to the 49 port (with the 192.168.0.1 IP address and Internet access to the router is OK)
  • On SG300-52 default gateway is 192.168.0.1

  The SG-300:

  • I can ping the default gateway (192.168.0.1) and any Internet address, using 192.168.0.2 as address IP Source
  • I can't ping the default gateway (192.168.0.1) or any Internet address, using 10.0.0.1 as address IP Source
  • I can ping my PC (10.0.0.3), using 10.0.0.1 as the IP Source address
  • I can't ping my PC (10.0.0.3), using 192.168.0.2 as address IP Source

  There is no routing inter - VLAN, but I can't find how to activate...

  The complete configuration is the following:

  #show run SG300-52
  config-file-header
  SG300-52
  v1.4.0.88 / R800_NIK_1_4_194_194
  CLI v1.0
  router adjustment system mode

  SSD of encrypted file indicator
  @
  SSD-control-start
  config of SSD
  control of password file unrestricted SSD
  no control of the integrity of the file ssd
  SSD-control-end cb0a3fdb1f3a1af4e4430033719968c0
  !
  database of VLAN
  VLAN 99
  output
  Add a voice vlan Yes-table 0001e3 Siemens_AG_phone___
  Add a voice vlan Yes-table 00036 b Cisco_phone___
  Add a voice vlan Yes-table 00096e Avaya___
  Add a voice vlan Yes-table 000fe2 H3C_Aolynk___
  Add a voice vlan Yes-table 0060 b 9 Philips_and_NEC_AG_phone
  Add a voice vlan Yes-table 00d01e Pingtel_phone___
  VLAN voice Yes-table add Polycom/Veritel_phone___ 00e075
  Add a voice vlan Yes-table 00e0bb 3Com_phone___
  Hello interface range vlan 1
  hostname SG300-52
  username privilege 15 c464af817287343305cbd6493c593885695df531 encrypted password cisco
  property intellectual ssh server
  Server SNMP Server
  The telnet server IP
  !
  interface vlan 1
  the IP 10.0.0.1 255.255.255.0
  no ip address dhcp
  !
  interface vlan 99
  name WAN
  IP 192.168.0.2 255.255.255.248
  !
  interface gigabitethernet49
  switchport mode general
  VLAN allowed switchport General add 99 unidentified
  switchport General pvid 99
  !
  output
  Default IP gateway 192.168.0.1

  You have an idea on the issue?

  Thanks in advance for your help.

  Hi Anthena1390

  My email is [email protected] / * /. When you reply to the email can let me know which devices need to communicate on VLAN 99. Is there a major reason for SG300 happen DHCP assumes that your router? Well I would like to add a few screenshots, they will show you how to properly set up a P2p link, assign DHCP pools, how to correctly add default routes. Send an email and lets get your problem is resolved.

• I would like to help with what I believe, it is a problem of routing VLANS on a SLM2008 and RVS4000

  Please see attached Word documentfor a full description.  Thank you!

  Hi Michael,

  All those who say the VLANS within the first hour is a person much smarter than me.

  I have to admit with great humility, I think it took me nagging questions for some patients (AR) and weeks and weeks until finally I have a bit of understanding of the functioning of VLAN.

  So don't feel concerned, many people there are in the same "boat" as you.

  But VLAN, when you get the feel for them, are so so helpful.

  I like under 'acceptable frame type' tick 'all '.

  

  The value PVID tells me basically what VLAN not signposted port is underway.

  This means that in the image below, 3 ports, 6-8 will be I hope, expecting to received and transmit frames Ethernet labeled with a tag VLAN 2.

  But on the diagram above, I can now make room for the following table.

  without tag vlan tagged vlan

  3-1-2 switch port

  6 2 2 switch port can not be marked and unidentified on the same switch port

  7 2 2 switch port can not be marked and unidentified on the same switch port

  8-1-2 switch port

  In the diagram above, I can see that 1 and 2 switch ports are ifor untagged VLAN 3 so the packages roll inside the switch for VLAN 3 will have their VLAN TAGs removed from the Ethernet frame as the traver packets on the switch to an IP host.

  I also see that the switch port 3 unidentified in the VLAN 1, but you have set the acceptable frame on tagged only type.

  Unless I read this all in fact wrong.

  Note: I have to admit that has the big brother to the SG200 SG300 series switch,

  Don't forget about PC / security cameras (except Cisco, hey I'm system engineer have to give my equipment fitted with a plug) in most of the cases do not send frames labeled Ethernet in the switch, which is why I like the idea of accepting all types of frames. I guess that the default VLAN settings are the acceptable frame types = all

  When we add a vlan to a switch port, as the image below, switch to these ports are added as a vlan tagged, because the port if already reside in one VLAN not tagged...  This means that in the case below, 3 ports, 6-8 will be I hope, expecting to received and transmit frames ethernet labeled with a tag VLAN 2.

  

  You said it, not easy, you need to play and practice with switching and routing

  .  But the general rule that I follow for VLAN's.

  A switch port can be untagged in a single vlan, but at the same time marked on several VLANs.

  With respect to the limitation of the camera, my camera, I have not used my filters. But there is the possibility of limiting access by IP address or network.

  I guess you can find an article on your DLINK camera to filter. Reset the default camera and try to add it again.

  Routing between VLANS will occur at the RVS4000, it routes packets between different VLANs, the SG200 cannot be put in Layer 3 mode like its big brother the 300 series (SRWXXX-K9-NA)...

  

  Best regards, Dave

• Problem with routing inter - VLAN... How to solve it?

  Hi all.

  I have a WRVS4400N in my office to have a VPN with our main customer and also to manage the entire network of small size.

  In two weeks, more or less we will change our office somewhere else, merge two in one.

  At its new location, we will have two different ADSL connections, and we will keep our separate LAN to the other LAN.

  The goal is to interconnect the two local networks in order to 'see' the machines on one local network to another, but keep the two local networks with their current configuration, subnet, etc..

  To achieve this, I created a new VLAN on the router and I have attached only port4 to this VLAN.

  

  

  As you can see, VLAN main has its own/24 subnet (10.148.145.0/24) and dhcp enabled (for addresses on my LAN) while the new VIRTUAL local network has its own 24 subnet too (10.0.0.0/24) but with the disabled dhcp (is a different LAN with its own DHCP server).

  

  

  

  

  VLAN 1 use ports 1-3 and VLAN 2 use the single port 4.

  Of course, I enabled routing inter - VLAN:

  

  To emulate the future scenario, I connected a router with an Internet port 4 with IP:10.0.0.2, and I therefore two different local networks.

  Well, the reality is this:

  -From my PC connected to the VLAN1 I have an IP address (assigned by my Cisco) and I see all my VLAN and I see 10.0.0.1 too (IP of the router on VLAN2), but I don't see any more (pings to 10.0.0.2 didn't answer). I can access Cisco router to 10.0.0.1 and 10.148.145.97.

  -My PC connected to the VLAN2 I have an IP address (assigned by the other router on 10.0.0.2), I see only my VLAN (10.0.0.0/24 IPs). I can access only Cisco router to 10.0.0.1.

  How can I do to enable these two VLANS to 'see' each other?

  How can I control access to the WAN port? I don't want machines to VLAN2 accessing internet through our router.

  Thank you and best regards!

  Hello Francisco,.

  In router mode gateway mode switch will turn off the NAT on the router. Which will allow to the vlan 2 does not to get out to the internet but also vlan 1 and which is not what you want. You may be able to create access rules and deny rules for not being able to get out of the internet... may create some default of the rules of the road as 0.0.0.0. Also, you may be able to create internet air to stop a certain subnet that it is able to get out of the internet as well.

  Regarding the VLAN talk to each other, everything looks good, routing inter - vlan, it is allowing the two VLAN to talk to each other and which is activated. What your default gateways are installed on devices you are testing? As long as default gateways on your PC and devices are pointing to the routers ip/gateway address, you should be good to go at this point.

  VLAN 1: default gateway should be 10.148.145.97

  VLAN 2: default gateway must be 10.0.0.1

  Other than that everything seems to be implemented correctly based on the images. The VLANs that you put in place on the ports are correct.

  Let me know your devices are configured on the rise and will go from there.

  Hope this helps,

  Thank you

  Clayton Sill

• WAP321 VLAN and SG300 routing problem

  Hello

  I have a SG300 - 28 p as a main switch. Three WAP321 APs are connected with two SSID. A primary SSID is served on VLAN 1 and a guest THAT SSID is on VLAN 2.

  The SG300, I have three ports of junction for the WAP321s because they carry VLAN 1 and VLAN 2. 25 on the switch port is a port of access for VLAN 2 since the guest network is served by its own router and WAN access. The main LAN and Wireless is on the 192.168.101.x network and the network of comments (including cable) is on 192.168.24.x.

  Wireless connection to the WAP321, obtain the appropriate IP addresses (DHCP is served by routers - both are RV042s). On the main network (101), I am able to ping, access to the network. On the network of comments, I'm not able to ping to the router (192.168.24.222) or the 192.168.24.254 switch. However, it is not a problem if I'm on a wired connection to the router reviews.

  This makes me suspect that I missed certain routing or configuration on the SG300 for this configuration. Any advice? See the attached diagram below:

  Eugene

  Eugene, I think the problem is with the AP.  This is a clear indication of the fact you are wired in and have no problems.

  One thing that may be a scenario is external causes. Your computer is exclusively wireless or you have tested while wired + wireless? Have you tried with a second computer is wireless only?

  If you use a computer (s) strictly wireless, the problem is with the AP and can be somehow "mask" the network devices either.

  I know things like characteristic of guest network and captive portal has some mechanisms of protection because it is not about the guest to access the network devices. How is the configured access point? Everything just with 2 SSID and a username/password?

  I think that it is perhaps a good idea to look at how this Approach is implemented if there is any interference from external factors.

  -Tom
  Please mark replied messages useful

• Inter vlan routing on a Cisco SF 300-24 port switch only no internet except when scanning with wireshark

  Hello

  I'm get inter vlan routing to work on a 300-24 ports switch DF.    I have a network of business existing on 192.168.111.0 and want to create a vlan on 192.168.1.1 which can talk to 192.168.111.0.    I activated the layer 3 routing on the switch through the console and also provided ip routing commands. I have the following VIRTUAL networks:

  Vlan1 - default 192.168.111.0

  VLAN2 - 192.168.1.0

  I turned on DNS and provided my two servers DNS 192.168.111.82 & 192.168.111.212.

  I updated the VLAN1 interface 192.168.111.217 and VLAN2 interface 192.168.1.1.

  The FE1 - FE15 ports are access ports and assigned to VLAN1 (unidentified)

  FE16 - FE24 ports are access ports and assigned to VLAN2 (unidentified)

  I put a default route for the switch to 0.0.0.0 0.0.0.0 192.168.111.254 (router Draytek 2600). I have connected a computer (A) at the port of VLAN1 FE3 and a computer (B) to VLAN2 FE16 port.   I put its IP address and computer default gateway has to 192.168.111.217 to 192.168.111.94.    I updated computer B default gateway 192.168.1.1 and 192.168.1.2 IP.

  Computer A has access to the Mdaemon Server files via the network grows but no internet (cannot ping google) and can ping computer B and RDP on computer B.

  Computer B can ping computer A and RDP on A computer but do not have access to the company network i.e. MDaemon, file server etc.   It can also access the internet.

  The console I can ping www.google.co.uk and all the ip addresses in the network of the company i.e. 192.168.111.82 (DNS server).   I do not understand what I am doing wrong and have been banging my head for staretd a few days a new job and desperately need to work so any help would be greatly appreciated

  If I have computer scanner a wireshark wirh internet starts working wheird!

  Show the configuration below:

  switch7c0a71 #show run

  database of VLAN

  VLAN 2

  output

  Add a voice vlan Yes-table 0001e3 Siemens_AG_phone___

  Add a voice vlan Yes-table 00036 b Cisco_phone___

  Add a voice vlan Yes-table 00096e Avaya___

  Add a voice vlan Yes-table 000fe2 H3C_Aolynk___

  Add a voice vlan Yes-table 0060 b 9 Philips_and_NEC_AG_phone

  Add a voice vlan Yes-table 00d01e Pingtel_phone___

  VLAN voice Yes-table add Polycom/Veritel_phone___ 00e075

  Add a voice vlan Yes-table 00e0bb 3Com_phone___

  interface vlan 2

  IP 192.168.1.1 255.255.255.0

  output

  interface vlan 1

  IP 192.168.111.217 255.255.255.0

  output

  IP route 0.0.0.0 0.0.0.0 192.168.111.254

  interface vlan 1

  no ip address dhcp

  output

  Hello interface range vlan 1

  hostname switch7c0a71

  No complexity of passwords allow

  No server snmp Server

  interface fastethernet1

  switchport mode access

  output

  interface fastethernet2

  switchport mode access

  output

  interface fastethernet3

  switchport mode access

  output

  interface fastethernet4

  switchport mode access

  output

  interface fastethernet5

  switchport mode access

  output

  fastethernet6 interface

  switchport mode access

  output

  interface fastethernet7

  switchport mode access

  output

  interface fastethernet8

  switchport mode access

  output

  interface fastethernet9

  switchport mode access

  output

  interface fastethernet10

  switchport mode access

  output

  interface fastethernet11

  switchport mode access

  output

  interface fastethernet12

  switchport mode access

  output

  interface fastethernet13

  switchport mode access

  output

  interface fastethernet14

  switchport mode access

  output

  interface fastethernet15

  switchport mode access

  output

  interface fastethernet16

  switchport mode general

  VLAN allowed switchport General add 2 unidentified

  output

  interface fastethernet17

  switchport mode general

  VLAN allowed switchport General add 2 unidentified

  output

  interface fastethernet18

  switchport mode general

  VLAN allowed switchport General add 2 unidentified

  output

  interface fastethernet19

  switchport mode general

  VLAN allowed switchport General add 2 unidentified

  output

  interface fastethernet20

  switchport mode general

  VLAN allowed switchport General add 2 unidentified

  output

  interface fastethernet21

  switchport mode general

  VLAN allowed switchport General add 2 unidentified

  output

  interface fastethernet22

  switchport mode general

  VLAN allowed switchport General add 2 unidentified

  output

  interface fastethernet23

  switchport mode general

  VLAN allowed switchport General add 2 unidentified

  output

  interface fastethernet24

  switchport mode general

  VLAN allowed switchport General add 2 unidentified

  output

  interface vlan 2

  name of development

  output

  Hi Richard,

  43 - permit Protocol: any / all

  42 - Protocol deny EVERYTHING 192.168.2.0 0.0.0.255-> to 192.168.111.0 0.0.0.255

  41 - Protocol to deny ALL 192.168.111.0 0.0.0.255-> to 192.168.2.0 0.0.0.255

  40 allow the RDP Protocol TO ALL

  etc.

  To block everything, including MSSQL, with the exception of the RDP and other ports that you defined above.  The other defined are simply not the RDP Protocol and service work?

  Richard, do note useful messages and identify the right answers.

  Best,

  David

• Problem with MAC pinning and new VLAN

  [Cross Announces nexus 1000V and forums of the UCS]

  Hi all, I have a working of the UCS 1.4 configuration (3i) and the Nexus 1000V 1.4 and according to best practices guide uses "channel-group auto on mac - pinning mode" on the uplink of Nexus. I have a problem when you add a new VLAN in this environment, and it is a reproducible problem in two different facilities.

  I pass by the VLAN usual creation process on the Nexus, the network upstream and within the UCS himself. I create new port vethernet profile and set it as an access port in the new VIRTUAL LAN. However when I join a VM (existing or new) to this new port vethernet profile in vCentre virtual machine cannot communicate with anything. However, if I disable MAC pinning with 'no channel-group auto on mac - pinning mode', the virtual machine will start instantly talk to the outside world and the new VIRTUAL LAN is running. Can I turn MAC pinning back once again, and everything continues to work.

  So the question is, is this normal or is there a problem? MAC the Θtiquetage has a brief interruption of the uplink, so is not a viable long-term customer solution when they want to add new VLAN. Is it possible to add new VLANS in this scenario without any unavailability of the network, but brief?

  Thank you

  Close the loop on this.  You tap the CSCto00715bug.

  Symptom: New MAC address is not learn on vem in the l2 table even though the mac address table is not overflow yet. vemcmd show l2-emergency-aging-stats | grep "Number of entries that could not be inserted:" will show extreme large number. Conditions: Nexus1000v VEM running on SV1.4 release. There are two CPU cores on the host. This issue may happen at race condition. Workaround: Reboot the ESX/ESXi host. 

  This problem is corrected in the 1. 4A release.

  Kind regards

  Robert

• Trouble with the voice and data Vlan vlan translate between CT3905 and SF300 - 24 p

  Hey actually, we have the solution to monitoring of implementation with CT3905 phone, SF300 - switches 24 p cameras and AIR-AP1041N Access Points

  

  We have the problem with the vlan tag in SF300 switch ports - 24 p we can´t tag vlan of the voice and data VLANs on the same port on SF300 - 24 p it is Possible or we must dedicate a port for each VLAN or ussing the same data segment of VLANs and vlan voice?

  Someone has an answer or technical documentation that can help us

  Best regards

  First of all,

  Please disable lldp transmit in SF 300 switch.

  The command is "no lldp transmitted."

  After you disable check the following steps.

  https://supportforums.Cisco.com/docs/doc-27005

  facing the same problem with cisco SG 300 and 3905 ip phone switch.

  And nested thing was my 7945 and 6941 phones use to work properly, without above configuration.

  Cisco 3905 became not vlan Ip address votes and even if I put static, it did not work.

  After a long struggle, I was able to solve the problem. Now both phone and system work fine in the same port.

  Samantha

• SG 300 - Inter VLAN

  Salvation of the forumers

  My problem statement

  a. how to let a single switchport to transport the vlan voice and data of vlan?

  say I had create and configure the vlan (20) voice and data of vlan (10)

  first of all, I do like this (join the voice vlan.png)

  What should I do

  A1. Management port for VLAN, VLAN

  (define the interface as General, but then should I check PVID, tag or remove the brand?)

  A2. Management VLAN-VLAN to the Port

  (is it leaves vlan 10 and vlan 20 to join the switchport?)  (Attach it VLAN to Port.png)

  b. is this done switch "ip Routing" for inter routing VLAN?

  say I create him VLAN, assign the IP address of the virtual interface for it. Have to do to activate routing inter - VLAN?

  I have check the static route only switch IPv4, is that it need a manual to create the static route to reach subnet each VLAN?

  can c. that be NTP server?

  Thank you

  Noel

  Hello!

  a. create a vlan 10 (data) and vlan 20 (voice). Set the switchport where you have an IP phone that is attached to the Trunk mode (management of Vlan-> settings of the Interface). Administrative PVID of the port should be 10. Go to the management of VLAN-> a Port VLAN membership, select the switchport and click Join VLANS. In the right column, you should have '10UP' (VLAN 10 Untagged, PVID: 10). In the left column select 20, labelling must be tagged, click the right arrow button to add 20 VLAN Tag to the port and click on apply.

  These settings will make switchport transfer VLAN10 traffic (data) as non-identified and VLAN20 traffic as added to the phone the voice. In each case, your phone, if it has a PC in the Appendix must be configured for voice traffic with the tag VLAN20 tag and move unidentified to the PC data traffic. Voice of preserve settings VLAN as shown on the screenshot - he let the switch to assign the optimal settings of QoS for traffic vlan voice.

  b. If you have the latest firmware installed routing Inter VLAN is enabled by default. Simply create interfaces SVI (assign an IP address to the VIRTUAL local area network interface) and if you have at least a host connected to the switchport member of the VLAN, the road to this subnet will automatically appear in the switch routing table. If you have multiple VLANs with the affected IP addresses and hosts active on these VLAN - all these networks appears in the table of routing as being directly connected and hosts all the VLANS will be able to communicate with each other. You must restrict the Inter-VLAN communication - use IP ACL.

  c. No, the switch can be SNTP client only.

• Compatibility of VLAN with Cisco

  Hello

  We just bought 10 x new Netgear switches (all M4100) to add to an existing Cisco infrastructure.

  Simple configuration with only 6 Valns.

  5: Admin, 30: VOIP, 101: management, 100: a set of Workstations, 102: second series of Workstations, 200: IPTV, 400: Internet, 401: Wireless Management

  All I wanted to do was: 2 last ports each switch netgear = T and all the VLANS. I have not identified all ports if I want to use in the appropriate vlan

  101 of VLAN is my Managementt Vlan. (Need to configure inter vlan routing for this to work)

  I only turned on three switches up to now and all three do not work. They work for a while and that packets but do not receive all.

  What I am doing wrong?

  What I need to get rid of the original vlan1 on the netgear?

  Is that what I need config in the STP to make these compatible with Cisco (300 and 400 series) switches.

  I use an optical backbone on Cisco and Netgear switches.

  Sincere greetings,

  OLAF

  Hi Moussa,.

  Thanks for reaching out.

  We got it working.

  Step 1: upgrade to the latest firmware.

  Step 2: Forget the MISTLETOE.

  We had a few questions about the old firmware - causing links to trunk have some incompatibility with their tag and removed the images between Cisco and Netgear brand.

  After the upgrade of the firmware that we had access to "switchport mode access" and "switchport mode trunk" orders fixing the access port and trunking issues.

  Thank you Mr President,

  OLAF