SG300 + SG500 = intervlan headaches

Similar Questions

• SG300/SG500 remove interface vlan

  Hello!

  The question is the following:

  I add a VLAN interface to test IP connectivity to this vlan by adding an IP address for this interface vlan and ping on a host.

  for example
  interface vlan 5
  192.168.0.251 IP address 255.255.255.0

  Then I can remove the ip address "without ip address', but I can't delete the ' interface vlan 5".»

  Even when I delete the vlan itself of the database for vlan. There is no command "no interface vlan. I can only stop the interface vlan.

  If anyone knows how to remove the interface vlan switches SG300/SG500 cli.

  Thanks, Woeger

  Hello

  I tried just that with my switch from laboratory here.

  I created VLAN 10 and he has given an IP address.

  Then I did a no ip address on the interface VLAN and then not a vlan 10.

  At this stage there is no interface THAT VLAN 10 in my config running or when I do a show ip interface.

  So remove the VLAN has done actually remove the interface for me, brings me to my question.

  What version of the bootcode/firmware do you currently use?  Maybe this problem has been fixed, because I am running 1.3.7.18 firmware with 1.3.7.01 code to boot.

  If you are on a low moving forward and put to date, don't forget to upgrade the boot thus code, it is necessary for new versions of firmware.

  Hope that help, but if not just let me know and we can take another look,

  Christopher Ebert - Advanced Network Support Engineer

  Cisco Small Business Support Center

  * Please note the useful messages *.

• Management tool for small business series switches

  We currently use CatTools for our infrastructure management systems; However, it does not support small business of switches of the series (IE SG300 & SG500). I am looking for a free/no expensive replacement. Any suggestions?

  Looks like CatTools can work with some adjustments.

  https://thwack.SolarWinds.com/thread/64196

• SG300-28 questions - InterVLAN routing

  Hi all

  I am trying to switch SG300-28 place and do work for several days, with a very simple configuration, but this device is just to stuborn giving me headaches. I hope that you will tell me a solution to my problem.

  So I configured the VLAN on the switch, assigned to all ports, given IP addresses for VLANs, etc.. But I digress not test phase where I try to rattle of two stations of different VLANS.

  I have pictures of the attached current configuration. Stations are on ports 4 (VLAN4) and port 15 (VLAN3). First good 192.168.30.x a station address with the default gateway 192.168.30.1. Second station address of the 192.168.5.x and gateway 192.168.5.1. The two stations can ping the two gateways, but not eachother. Traffic within a VIRTUAL local network works fine, so routing is the most obvious problem.

  There is no active ACLs.

  Please see attached photos and give me something to try, because I spent three days to experiment without luck!

  One of the biggest mistakes I see relies on 'ping' to see if things work. Do not forget that the 'ping' sends a request to echo, that does not force the customer to send and echo response. Ensure that stations are configured to respond to pings or try to access a share, or a service configured on clients. Another thing to consider, that the client ports access ports and not General, this can be a problem, but it should be allowed, as is.

  On a side note, the current configuration you cannot access anything out in the cloud. If you need to access cloud do not forget to add a default route on the switch.

  I hope this helps!

• Cisco SG300 / ASA 5505 intervlan routing problem

  Dear all

  I have a problem with the configuration correctly sg300 layer 3 behind the ASA 5505 switch (incl. license more security)

  The configuration is the following:

  CISCO SG300 is configured as a layer 3 switch

  VLAN native 1: 192.168.1.254, default route ip address (inside interface ASA 192.168.1.1)

  VLAN defined additional switch

  VLAN 100 with 192.168.100.0/24, default gateway 192.168.100.254

  VLAN 110 with 192.168.110.0/24, default gateway 192.168.110.254

  VLAN 120 with 172.16.0.0/16, default gateway 172.16.10.254

  Of the VLANS (100,110,120) different, I am able to connect to all devices on the other VIRTUAL local networks (with the exception of Native VLAN 1; is not the ping requests)

  From the switch cli I can ping my firewall (192.168.1.1) and all the other gateways of VLANs and vlan (VLAN1, 100, 110, 120) devices

  Asa cli I can only ping my switch (192.168.1.254) port, but no other devices in other VLAN

  My question is this. What should I change or installation in the switch configuration or asa so that other VLANs to access the Internet through the ASA. I will not use the ASA as intervlan routing device, because the switch does this for me

  I tried to change the asa int e0/1 in trunkport (uplink port switch also), to enable all the VLANS, but as soon as I do that, I can not ping 192.168.1.254 ASA cli more.

  Any help is greatly appreciated

  Concerning

  Edwin

  Hi Edwin, because the switch is layer 3, the only necessary behavior is to ensure that default gateways to the computer are set on the SVI interface connection to the switch to make sure that the switch is transfer traffic wished to the ASA.

  The configuration between the ASA and the switch must stay true by dot1q, such as the vlan all other, unidentified native VLAN tagged.

  Also, if I'm not wrong, on the SAA you must set the security level of the port to 100.

  -Tom
  Please evaluate the useful messages

• SG300-10 & routing InterVLAN Actiontec M1424WR (Rev E) problem

  I know that many of the similar issues were invited on this topic, but following the guidelines had no success for me.

  I created VLANs with the SG300-10 L3 mode, but in each VLAN, clients are not able to ping each other. Each VLAN can ping the router, switch, and has internet access

  Here is my configuration info.

  config-file-header
  v1.4.0.88 / R800_NIK_1_4_194_194
  CLI v1.0
  router adjustment system mode

  indicator SSD of excluded files
  @
  Jumbo-frame of port
  database of VLAN
  VLAN 2-4
  output
  Add a voice vlan Yes-table 0001e3 Siemens_AG_phone___
  Add a voice vlan Yes-table 00036 b Cisco_phone___
  Add a voice vlan Yes-table 00096e Avaya___
  Add a voice vlan Yes-table 000fe2 H3C_Aolynk___
  Add a voice vlan Yes-table 0060 b 9 Philips_and_NEC_AG_phone
  Add a voice vlan Yes-table 00d01e Pingtel_phone___
  VLAN voice Yes-table add Polycom/Veritel_phone___ 00e075
  Add a voice vlan Yes-table 00e0bb 3Com_phone___
  The dhcp server IP
  network IP dhcp pool 2 VLANs
  address 192.168.2.2 low high 192.168.2.254 255.255.255.0
  Infinite rental
  default router 192.168.2.1
  Server DNS 8.8.8.8
  output
  network IP dhcp pool VLan 3
  address 192.168.3.2 low high 192.168.3.254 255.255.255.0
  Infinite rental
  default router 192.168.3.1
  Server DNS 8.8.8.8
  output
  network IP dhcp pool VLan 4
  address 192.168.4.2 low high 192.168.4.254 255.255.255.0
  Infinite rental
  default router 192.168.4.1
  Server DNS 8.8.8.8
  output
  Hello interface range vlan 1
  output
  privilege of encrypted password username cisco 15
  IP http timeout policy 1800 HttpOnly
  clock timezone ""-4
  clock source browser
  The telnet server IP
  !
  interface vlan 1
  192.168.1.20 IP address 255.255.255.0
  no ip address dhcp
  !
  interface vlan 2
  Name
  IP 192.168.2.1 255.255.255.0
  !
  interface vlan 3
  name B
  address 192.168.3.1 IP 255.255.255.0
  !
  interface vlan 4
  name C
  192.168.4.1 IP address 255.255.255.0
  !
  interface gigabitethernet1
  switchport mode access
  !
  interface gigabitethernet2
  switchport mode access
  !
  interface gigabitethernet3
  switchport mode access
  !
  interface gigabitethernet4
  switchport mode access
  switchport access vlan 3
  !
  interface gigabitethernet5
  switchport mode access
  switchport access vlan 4
  !
  interface gigabitethernet6
  switchport mode access
  switchport access vlan 4
  !
  interface gigabitethernet7
  switchport mode access
  !
  interface gigabitethernet8
  switchport mode access
  !
  interface gigabitethernet9
  switchport mode access
  !
  interface gigabitethernet10
  switchport mode access
  !
  output
  Default IP gateway 192.168.1.1

  My router is Actiontec M1424WR (Rev E) with the following configuration in the routing table:

  route.jpg

  

  So my questions/challenges are:

  (1) customer in VLAN 3, (192.168.3.2/24) can ping (192.168.1.20/24) Switch and router (192.168.1.1/24) and VLAN 4 (192.168.4.1/24)

  , but NO client in VLAN 4 (192.168.4.2/24)

  (2) this point is common to all the VLANS

  (3) the installation of the final network is below, but in testing phase at the moment. VLAN 5 has not yet been configuration.

  Setup.jpg

  

  The final installation would enable the VLAN 2 and VLAN 5 to communicate in order to access the NAS.

  Any help will be greatly appreciated, thanks!

  Hello

  To me, it looks like customers used for testing such as PC Windows Firewall blocks the request to the other subnet. Try to disable the windows firewall and to test the ping.

  Kind regards

  Aleksandra

• The SG300 - ACL support intervlan routing

  I have Setup SG300 - 52p mode switch layer 3.

  I have 3 VLAN (10,20,30) and the affected ports to each vlan.

  Each host can ping its own gateway (according to the VLAN).

  I want to enable some of the traffic of a vlan to a specific host (server) on a different VLAN. I try with ACL, but no can do.

  Can someone help me how to do this?

  Thank you very much.

  Hey Ruy,

  My isa very restrictive ACL.

  Restrict_FTP extended IP access list

  permit ip 192.168.10.0 0.0.0.255 192.168.20.10 0.0.0.0

  output

  It allows only the 192.168.10.0 network to get host 192.168.20.10 IP host.

  There is also perhaps (in red);

  Restrict_FTP extended IP access list

  permit ip 192.168.10.0 0.0.0.255 192.168.20.10 0.0.0.0

  deny ip 192.168.10.0 0.0.0.255 192.168.20.0 0.0.0.255

  allow a full

  output

  I must confess that I prefer to use the GUI to produce my ACEs.  The table he creates shows how the ACL will work. and especially in what order.

  • The switch through ACEs in order from top to bottom as seen in the GUI.
  • The ACL that is attached to an interface, boss of matching incoming packages (coming into the switch).
  • ACE entries use reverse masking can be confusing.  Perhaps the following tehnote may be useful for understanding the inverse of masking;

  http://www.Cisco.com/en/us/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml

  What about Dave

• Is it possible to perform the following vmps on cisco sg500 and SG300?

  Hello guys,.

  I hope that all is well. I have a question that I'm not sure about that, the Cisco SG300-500 range can support VMPS.

  Kind regards

  Marcel Smal.

  Not that I know, this feature is generally available in the high range catalyst switches

  You can check if through emulators online for these platforms

  https://supportforums.Cisco.com/community/911/Cisco-small-business-onlin...

  or the admin guides

  http://www.Cisco.com/c/dam/en/us/TD/docs/switches/LAN/CSBMs/Sx500/ADMINI...

• SG300-28 vs SG500x series Layer 3 for beginner

  Hi all

  I want to use the price lower than the learning of layer 3 Router/Switch with VLAN

  I have a SonicWALL NSa 2400 to connect to the ISP router (Port it X 3 VLAN 1, 21, 31 etc.)

  Since the NSA 2400 router very poor performance, that's why I think Layer 3 Giga Switch for high-speed network on him VLAN between VLANS etc...

  I look on Cisco, see the SG300 and SG500/500 x support Layer 3 of the series, their different are 500 x support dyn routing...

  I'm new to the router, but have a few basic know what is... Wonder not just a small business, VLAN ID plus 10 to 20, which will be different on static and Dyn routing on this case? Their VLAN function always VLAN or it only work well to Dyn routing?

  Need to pay the money to spend on the dyn as SG500x series?

  Sorry, ask several basic questions.

  Many thanks for your time and your help.

  Dear Jimmy,

  Thank you to the small community of Support Business.

  Routing InterVLAN is supported by both the layer 3 switches compatible with SG300 and SG500, please check on the underside of the document for instructions on how to implement on both;

  http://sbkb.Cisco.com/CiscoSB/Loginr.aspx?login=1&PID=2&app=search&VW=1&articleid=2193

  I hope that answers your question and please let me know if there is extra help, I can help you.

  Kind regards

  Jeffrey Rodriguez S... : | :. : | :.
  Support Engineer Cisco client

  * Please rate the Post so other will know when an answer has been found.

• Switch-SG300-20-20 as L3 switch?

  Hello

  In the company of a client, there is a ring of 3850 switches (L3) connected by optical fiber (the links are links L3 not trunks) and using OSPF for routing traffic between the different VLAN switches.

  Now, the client wants to include a new switch between two switches exist (they are now linked) but using a Cisco SG300-20-20. My question is: can this work as an L3 switch? I have seen that you can configure static routes but I didn t find anything on routing protocols.

  Thank you!

  Yes No ospf sorry just found post indicating 32 static not even tear apart on sg300, not really OSI 3, then you'll need something better, check again the sg500 who is mentioned in the post that only handles same ospf, a 2960xr switch supports ip ospf routes lite only about 200 dynamic and eigrp stub but its an option like layer switch not expensive 3

  http://www.Cisco.com/c/en/us/TD/docs/switches/LAN/catalyst2960xr/SOFTWAR...

  https://supportforums.Cisco.com/discussion/11533276/does-SG300-10-suppor...

• Switch P 52 SG500 - web interface shows the wrong model and disconnects randomly

  Ladies and gentlemen!

  One of our network switches is a SG500 switch 52p that recently started showing strange behavior.

  It started with the problem was not more accessible via its web interface. Even if it was running perfectly well access via a web browser finished in wait times.

  After resetting the factory default switch and configure its IP address access at first seemed to work but I had to know that the switch breaks out as a SG300 28 p switch on the administration Web site. In addition, random logoff occurs that send back me to the login page. Each from time to time, the model is correctly displayed after the login, but when I try to manage it I a connected again.

  It still works with an older version of the firmware (1.2.xx I think) but that shouldn't cause such behavior, it should? In any case, I can't update the firmware says the switch as a different model.

  Any suggestions what to do (apart from the RMA)?

  Respect,

  Hendryk

  Hello

  I'm sorry that you are having problems with the device and I'll try to give you the best possible advice in the circumstances.

  The first thing that comes to mind is that you connect to another device, the thought is the SG500. I did the experiment several times before, so I have a few suggestions to ensure we are connection to the device:

  1 - Download the Cisco FINDIT and scan tool you rnetwork, maybe you will find that you have two devices, the SG300 and the SG500. Here is the link:

  https://software.Cisco.com/download/release.html?mdfid=282833583&flowid=...

  2 - go to the switch that you believe to be the SG500, then go to Administration, and then discovered - CDP, and then click CDP neighbor information. Most likely, you will see that you have several switches, including the SG500.

  3. If you have followed suggestions and you still believe, you go to the right switch then call at the 866-606-1866 (of the United States) and we will be happy to help you control the device and replace it if this is the case.

  I really think that the first 2 suggestions will help you realize that you have two switches on your network.

  Please let us know what you find.

• SG300-20 - configure DHCP on the interface VLAN

  I have read the different partners of the discussions on the SG300 and SG500 going on regarding the high setting of VLAN and DHCP on VIRTUAL networks.  For some reason, I could not get even this simple task to work.

  First thing I did was update my version firmware and boot as follows:

  SW version 1.3.7.18 (date of 12 January 2014 time 18:02:59)

  Start the 1.3.5.06 version (dated 21 July 2013 times 15:12:10)

  HW version V02

  When I rebooted the SG300 after the SW/Boot updates the boot configuration has been crushed and I had to configure my switch from scratch.  The intention is to have two VIRTUAL networks:

  VLAN 1: all the devices, servers, etc.

  VLAN 2: subnet basis which distributes DHCP addresses

  The SG300-20 is connected to a router Asus RT-AC66U on the 192.168.1.x subnet and provides access to the internal network and WiFi access (IP address of the router is 192.168.1.1 and the default gateway).  Everything works without any problem.  So my task is simply to create 2 VLANS on 192.168.2.x subnet and use DHCP to assign addresses.  I spent many hours on it and I still can't get it to work.  When I connect a laptop to the port (GI8) assigned to 2 VLANS, I end up finding a few wobbly 169.254.x.x address.  I definitely thought something would not 'easy' that hard to set up, but apparently I was wrong.

  The SG300 is running in mode L3 as shown in my running-config below.

  Someone gets to see something which could prevent my client from the laptop to receive the interface VLAN 2 DHCP IP addresses that are not on the 192.168.2.x subnet?

  Any ideas / suggestions would be greatly appreciated!

  Here's my running-config:

  config-file-header
  MYSTICSW1
  v1.3.7.18 / R750_NIK_1_35_647_358
  CLI v1.0
  router adjustment system mode

  SSD of encrypted file indicator
  @
  SSD-control-start
  config of SSD
  control of password file unrestricted SSD
  no control of the integrity of the file ssd
  SSD-control-end cb0a3fdb1f3a1af4e4430033719968c0
  !
  database of VLAN
  VLAN 2
  output
  Add a voice vlan Yes-table 0001e3 Siemens_AG_phone___
  Add a voice vlan Yes-table 00036 b Cisco_phone___
  Add a voice vlan Yes-table 00096e Avaya___
  Add a voice vlan Yes-table 000fe2 H3C_Aolynk___
  Add a voice vlan Yes-table 0060 b 9 Philips_and_NEC_AG_phone
  Add a voice vlan Yes-table 00d01e Pingtel_phone___
  VLAN voice Yes-table add Polycom/Veritel_phone___ 00e075
  Add a voice vlan Yes-table 00e0bb 3Com_phone___
  Hello interface range vlan 1
  hostname MYSTICSW1
  host 192.168.1.15 record
  logging source hostname id
  username privilege 15 b4a0fcf20b2cd9d80a55b06ab8f83277f9733904 encrypted password cisco
  location of the SNMP-Server Office
  clock timezone ""-5
  DST Web recurring U.S. clock.
  clock source sntp
  unicast SNTP client enable
  unicast SNTP client survey
  survey of 192.168.1.10 SNTP server
  !
  interface vlan 1
  IP 192.168.1.254 255.255.255.0
  no ip address dhcp
  !
  interface vlan 2
  name MysticWAN
  192.168.2.254 IP address 255.255.255.0
  !
  interface gigabitethernet8
  switchport mode access
  switchport access vlan 2
  !
  output
  Default IP gateway 192.168.1.1

  Thanks in advance!

  Clint Lambert

  Clint, please see this post

  https://supportforums.Cisco.com/message/4178990#4178990

  -Tom
  Please mark replied messages useful
  http://blogs.Cisco.com/smallbusiness/

• SG300 IP ACL link bug

  Hi all

  Installation of 2 switches SG300 (latest firmware) in a small network gave me the following challenge:

  How can I link an IP ACL to VLAN instead of a physical port?

  The situation:

  -1 Central SG300-20 trunk of layer 3 city to L2 SG300-10.

  -1 remote SG300-10 in layer 2, including the L3 SG300-20 trunk.

  -Several VLANS on both switches, including their IVR on the L3 and InterVLAN routing on the switch switch L3 activated.

  -Would be nice if the traffic between them VLAN in some way may be limited hollow ACL.

  Problems of the ACL to the ports linking instead of VLAN:

  -Port membership regarding the different VLAN is very non-bobines, so the use of 'interface' is not possible to 'mirror' of the administration of the ACL to the administration of VLAN. Moving ports through VLANss creates an ACL administration "gene."

  -More important; What remote ports on layer 2 switch (the other side of the trunk)? How can I link several ACL on the L3 switch to the ports of the physical L2 switch different? Hollow InterVLAN traffic of the trunk should also be limited by the ACL on the SG300-20 L3...

  How can I accomplish this?

  Rommel salvation

  How can I link an IP ACL to VLAN instead of a physical port?

  It is not supported at this time, the link is for LAG and port only, not a virtual interface.

  -Would be nice if the traffic between them VLAN in some way may be limited hollow ACL.

  The ACL works for traffic of penetration which can only be descriminated by several different methods. As a SVI is the interface VLAN, you can distinguish the subnet or specific IP addresses contained in actually making the access rules for the VLAN even if she is not related to the virtual interface.

  -More important; What remote ports on layer 2 switch (the other side of the trunk)? How can I link several ACL on the L3 switch to the ports of the physical L2 switch different? Hollow InterVLAN traffic of the trunk should also be limited by the ACL on the SG300-20 L3...

  The same traffic VLAN, a layer 2 device could tip locally. Communication inter - VLAN traffic to be sent to the routed interface. As traffic is only limited penetration on the SX300 I do not see a complication, as a request of 2 connected device layer would be entered in the port of switch Sx300.

  The only thing that I can determine the post, is that you can have a hell of a large ACL according to restrictive how you want to be with specific host connections. Just keep it minus 512 ACE since that's what the switch takes care of.

  -Tom
  Please mark replied messages useful

• Boot & Firmware SG300-28

  I received a new SG300-28 with 1.2.9.44 FW and Boot version 1.1.0.6.  A couple of weeks, I got a SG500-28 and I udated on Sx500_FW_1.3.0.62 ros and Sx500_BOOT_1.3.0.03 rfb.  I checked for the current version for the SG300-28 and I downloaded Sx300_FW_1.3.0.62.ros but found nothing to START, but they do not have a zip of MIBs_Sx300_v1.3.0.59 which is a folder full of mib and my file, any file of rfb.

  1, what is this MIB file for

  2nd, why no update BOOT file

  3rd, given that the number of revisions of the file is the same for both the SG300 and SG500 are indeed the same file or are they really adapted to the model where the name prefaced to the number.

  4th, if the files are the same then could, should I use the SG500 for the SG300 STARTUP file.  As a general rule, I would never do that with knowing so nobody knows?  I find it odd that the SG500 had new files for both and the SG300 does not work or maybe I just don't yet found.

  Hello Vini, traditionally start codes have been integrated in the firmware. On the old switches starting and firmware were 2 separate but which proved to be quite a problem.

  If you try to load the Sx500 trunk to the Sx300 switch it will probably give error of unknown or incorrect file type.

  -Tom
  Please mark replied messages useful

• Question SG500 auto voice VLAN VLAN native

  I have install SG300 and SG500 switches and using the function of vlan automatic voice by simply changing vlan 100 and using voice of vlan 1 for data and the default value.  I normally put the L3 switch and make a porteach access for my IP PBX (vlan 100) and the other to connect to the existing data network (vlan 1). Then I do a static route in default gateway customers to route to vlan 100 and everything works well for most facilities.

  On my last install, I decided to try to change the vlan 1 default vlan 10 and go with 10 for data and 100 for the voice.  The problem that I ran was that the auto generated on my phone switchports config still serve of vlan 1 vlan native.  I am trying to find a way to always use auto vlan and get the vlan native desired without having to make manual configuration changes.

  Would this be possible?

  Thanks in advance.

  Hi Brandon, you must edit the macro of vlan native 1 to vlan 10.

  Check out this topic How change the macro

  https://supportforums.Cisco.com/thread/2177613

  -Tom
  Please mark replied messages useful