WAP321 VLAN and SG300 routing problem

Hello

I have a SG300 - 28 p as a main switch. Three WAP321 APs are connected with two SSID. A primary SSID is served on VLAN 1 and a guest THAT SSID is on VLAN 2.

The SG300, I have three ports of junction for the WAP321s because they carry VLAN 1 and VLAN 2. 25 on the switch port is a port of access for VLAN 2 since the guest network is served by its own router and WAN access. The main LAN and Wireless is on the 192.168.101.x network and the network of comments (including cable) is on 192.168.24.x.

Wireless connection to the WAP321, obtain the appropriate IP addresses (DHCP is served by routers - both are RV042s). On the main network (101), I am able to ping, access to the network. On the network of comments, I'm not able to ping to the router (192.168.24.222) or the 192.168.24.254 switch. However, it is not a problem if I'm on a wired connection to the router reviews.

This makes me suspect that I missed certain routing or configuration on the SG300 for this configuration. Any advice? See the attached diagram below:

Eugene

Eugene, I think the problem is with the AP.  This is a clear indication of the fact you are wired in and have no problems.

One thing that may be a scenario is external causes. Your computer is exclusively wireless or you have tested while wired + wireless? Have you tried with a second computer is wireless only?

If you use a computer (s) strictly wireless, the problem is with the AP and can be somehow "mask" the network devices either.

I know things like characteristic of guest network and captive portal has some mechanisms of protection because it is not about the guest to access the network devices. How is the configured access point? Everything just with 2 SSID and a username/password?

I think that it is perhaps a good idea to look at how this Approach is implemented if there is any interference from external factors.

-Tom
Please mark replied messages useful

Tags: Cisco Support

Similar Questions

  • help config VLANs and inter routing VLANs on SF - 300

    Hi all.

    I divided the routing problem "SF-300 (Layer 3) can be connected to the bridge." I did not put in the entry door. Too bad, I have encountered with Packet Tracer 5. I can attach a file. Leave everything to me.

    Thank you.

    # config - code

    IP routing

    VLAN 10

    VLAN 20

    VLAN 30

    interface FastEthernet0/1

    switchport access vlan 10

    switchport mode access

    interface FastEthernet0/6

    switchport access vlan 20

    switchport mode access

    interface FastEthernet0/11

    switchport access vlan 30

    switchport mode access

    interface Vlan10

    IP 192.168.10.1 255.255.255.0

    interface Vlan20

    address 192.168.20.1 255.255.255.0

    Vlan30 interface

    192.168.30.1 IP address 255.255.255.0

    The configuration of the switch is fine. My only question is your computers. Example of

    Computer on fa1.

    Should be something like

    192.168.10.100

    255.255.255.0

    192.168.10.1

    Computer on Fa6

    192.168.20.100

    192.168.20.1

    255.255.255.0

    Also avoid any simultaneous wireless connection and you may want to disable things like firewalls of the window.

    -Tom
    Please mark replied messages useful

  • Example config for 2 management vlan and ip Routing.

    We have a stack 6224, we use two vlan on it

    VLAN network 10.1.1.X 24 10

    VLAN network 192.168.0.X 24 40

    Our workstations reside also in the 10.1.1.X network, so we need to administer the switch there.

    192.168.0.X traffic must be routed to 192.168.0.X (and vice versa)

    How can I set this up, when I set up a 10.1.1.1 address for the administration interface and vlan 10 I can't configure the routing for this vlan?.

    (Actually I don't want to just out-of-band of our lan fault management)

    Please advice,

    Message edited by OnnoB on 08/09/2008 06:39

  • DMVPN Tunnel and EIGRP routing problem

    I have redundant paths to a remote 2811 router on my network of sites.  The first links is a T1 frame relay connection that has been in place for years, and the new link is on a 54 Mbps fixed wireless that was recently created.

    I'm under EIGRP to my process of routing protocol 100 for the two links.

    I installed a DMVPN Tunnel between the remote 2811 and no. 2851 router on my host site.  The tunnel interface shows to the top and to the top of both sides and I can ping the IP remote tunnel of my networks side host.

    However my eigrp routes are not spread over this new tunnel link and if I run a command show ip eigrp neighbor on each router I show only the neighbor for the frame relay link and not the new wireless link.

    What I'm missing here?

    A tunnel0 to see the shows the following:

    Tunnel0 is up, line protocol is up
    Material is Tunnel
    The Internet address is 10.x.x.x/24
    MTU 1514 bytes, BW 54000 Kbps, DLY 10000 usec,
    reliability 255/255, txload 1/255, rxload 1/255
    Encapsulation TUNNEL, loopback not set
    KeepAlive not set
    Tunnel source (FastEthernet0/1), destination 172.x.x.x 10.x.x.x
    Tunnel/GRE/IP transport protocol
    Key 0x186A0, sequencing of the people with reduced mobility
    Disabled packages parity check
    TTL 255 tunnel
    Quick tunneling enabled
    Tunnel of transmission bandwidth 8000 (Kbps)
    Tunnel to receive 8000 (Kbps) bandwidth
    Tunnel of protection through IPSec (profile "CiscoCP_Profile1")
    Last entry of 00:00:01, exit ever, blocking of output never
    Final cleaning of "show interface" counters never
    Input queue: 0/75/0/0 (size/max/drops/dumps); Total output drops: 947
    Strategy of queues: fifo
    Output queue: 0/0 (size/max)
    5 minute input rate 0 bps, 0 packets/s
    5 minute output rate 0 bps, 0 packets/s
    packages of 880, 63000 bytes, 0 no buffer entry
    Received 0 broadcasts, 0 Runts, 0 Giants 0 shifters
    errors entry 0, 0 CRC, overgrown plot of 0, 0, 0 ignored, 0 abort
    output of 910 packages, 81315 bytes, 0 underruns
    0 output errors, 0 collisions, 0 resets interface
    unknown protocol 0 drops
    output buffer, the output buffers 0 permuted 0 failures

    Please go ahead and add a static route on the hub, so it goes through the wireless link and let me know if everything works correctly.

    Federico.

  • Restricted Inter-VLAN with SG200-26 and SG300-10 routing

    Hi all

    My apologies if this has been covered elsewhere.

    My organization would like to organize a LAN game activity. The installation program I have in mind involves a switch 24 ports to connect all computers in player and saw that the switch connected to a smaller 'core' which has the connected the router and game server. I would like to know if I can put things up as follows...

    SG200-26 with 1 to 24 ports on VLANS separated so they can talk to eachother. I'd then ports 25 and 26 to be a trunk aggregated (for bandwidth and redundancy) port to carry all 24 VLAN more an additional management VLAN (VLAN 100 e.g.) that will be used to access the switch. I want these aggregated trunk ports to connect to a 'core' SG300-10 switch that is connected to the game server and a router for internet access.

    I would like to than the possibility of having two network connections of the server to the switch, one on the management of VLANS and the other on a VLAN different (e.g. 50 VLAN) which will be accessible by players (ports 1-24 of SG200-26). The power switch needs to be able to perform routing inter - VLAN restricted, because it does not VLAN 1-24 of eachother talk but they can talk to VLAN server, but only through specific service ports (e.g. 12345, 12346 port). Is this possible?

    Also how I configure the SG300-10 to enable the VLAN 1-24 of VLAN 50, but not to talk or VLAN 100. So, I will probably have the router on its own LAN VIRTUAL (VLAN 60 ex.) and allow for VLAN 1-24 for access, but only via HTTP port 80 for web access.

    What do you think?

    Thank you.

    Hi Marc, the default gateway of the computers will be the SVI to the switch.

    Router-> couche3-> SG300 layer 2 SG300

    router is 192.168.1.1

    VLAN 1 in 300 SG is 192.168.1.100

    2 VLAN on 300 SG is 192.168.2.1

    SG300 layer 2 has a 1u, 2 t trunk.

    My computer to connect to an access port 2 unidentified on the layer 2 SG300.

    I am able to ping 192.168.2.1

    I am able to ping 192.168.1.100

    I can not 192.168.1.1 pnig

    The reason is that the router has no idea on this subnet so cannot send the package to the source 192.168.2.x subnet.

    The ACL and the basic connection are 2 different animals. The ACL is to prevent intervlan communication. The basic connection must be tags trunk and vlan or static routes.

    -Tom
    Please mark replied messages useful

  • Cisco SG300 / ASA 5505 intervlan routing problem

    Dear all

    I have a problem with the configuration correctly sg300 layer 3 behind the ASA 5505 switch (incl. license more security)

    The configuration is the following:

    CISCO SG300 is configured as a layer 3 switch

    VLAN native 1: 192.168.1.254, default route ip address (inside interface ASA 192.168.1.1)

    VLAN defined additional switch

    VLAN 100 with 192.168.100.0/24, default gateway 192.168.100.254

    VLAN 110 with 192.168.110.0/24, default gateway 192.168.110.254

    VLAN 120 with 172.16.0.0/16, default gateway 172.16.10.254

    Of the VLANS (100,110,120) different, I am able to connect to all devices on the other VIRTUAL local networks (with the exception of Native VLAN 1; is not the ping requests)

    From the switch cli I can ping my firewall (192.168.1.1) and all the other gateways of VLANs and vlan (VLAN1, 100, 110, 120) devices

    Asa cli I can only ping my switch (192.168.1.254) port, but no other devices in other VLAN

    My question is this. What should I change or installation in the switch configuration or asa so that other VLANs to access the Internet through the ASA. I will not use the ASA as intervlan routing device, because the switch does this for me

    I tried to change the asa int e0/1 in trunkport (uplink port switch also), to enable all the VLANS, but as soon as I do that, I can not ping 192.168.1.254 ASA cli more.

    Any help is greatly appreciated

    Concerning

    Edwin

    Hi Edwin, because the switch is layer 3, the only necessary behavior is to ensure that default gateways to the computer are set on the SVI interface connection to the switch to make sure that the switch is transfer traffic wished to the ASA.

    The configuration between the ASA and the switch must stay true by dot1q, such as the vlan all other, unidentified native VLAN tagged.

    Also, if I'm not wrong, on the SAA you must set the security level of the port to 100.

    -Tom
    Please evaluate the useful messages

  • SSL VPN and routing problem

    Hi all

    I have a strange architecture including VPN and I have a few problems that I am not able to solve:

    -J' use the ssl vpn gateway to allocate internal IP addresses of the local network described in the schema (8.8.2.0 or 8.8.3.0 according to the tunnel-group network.

    -The purpose is for vpn clients directly access the internal network.

    This works very well if there are strictly internal communications within the network. But recently, we have installed an application that needs to access both networks. No problem, I thought, but I was wrong, there seems to be a problem of routing inherent in the architecture in place.

    Let me explain the problem:

    -When I access the VPN, for example I will gave the 8.8.3.5 ip address.

    -Im running the application that needs to open a page on the web server, located at 8.8.2.120

    -l'asa receive my tcp syn datagram and forward it directly to the directly connected interface fa0/1 (based on the routing table)

    -the web server returns the response, but he sends on its default gateway which is the cisco 6509.

    -6509 it sends its vlan svi 2000

    - and finally the ASA it receives on its interface fa0/2 but seems he falls as she opened a tcp on fa0/1 connection and receives the response on fa0/2.

    I want it's traffic by tunnel to bypass the connected roads and transmit it to a default gateway of tunnel. This would ensure that the path for the request and the response would be the same.

    I would like to know if there are orders of debugging for routing decisions validate my theory?

    Do you know of any response to solve this problem?

    Thanks a lot for your help.

    When you configure the TCP State derivation always think ' which way is the SYN package coming?

    Routing failed messages always have source and destination, are of course copied the entire message?

    BTW, instead of letting clients SSL addresses attributed to vlan2000? Why not give them a separate subnet and the road back via correct interface?

    I would also check your config and the routing :-) table

    Marcin

  • Problems with connecting fiber and new router AirPort

    I installed the fiber optic connection to replace my cable modem connection... I have a network of airport for a long time. When I bridge router ISP in my airport network that there are multiple problems. The major is that when you plug the ethernet cable from the modem ISP Ethernet port on the WAN of Timecapsule port all the TC LAN ports go dead. (the ISP's modem has already a cable ethernet in the WAN port or the first port that comes from the optical network Terminal that the fiber optic cable to connect from the outside). I talked to the ISP and they say just use any ethernet port to connect to the WAN port on the TC. On their end, they say everything is connected and works... then it's the Apple... I bought a new TC and changed my ethernet cables, but all I can establish is a wireless network. My network is itinerant and all of my extremes are connected with cables, but all on my main TC LAN ports are dead. I rebuilt my network and the same problem... And I think that the culprit is ports LAN TC is off

    Unfortunately, Apple has designed their routers airport to work with a standard cable and DSL type connections. The fiber is a whole new game ball, and Apple has not yet learned the rules of the game, so you may or may not have a really hard question.

    When you plug the ethernet cable from the modem ISP Ethernet port on the WAN of Timecapsule port all the TC LAN ports go dead.

    Before you connected to the fiber "modem" Time Capsule, did first reset you back to default settings... and then... set up again I hope to work with the fiber optic router?

    If this isn't the case, you need to do whenever you change providers or the modem that the Time Capsule connects to.

    All other devices that might be connected to the time Capsule should be turned off and unplugged.

    Then, if the time Capsule can be configured to work with the "modem" fiber, you can connect devices to the time Capsule one at a time to ensure that each of them is working before connect you to the other.  It may be necessary to reconfigure some or all devices that are connected to the time Capsule so that everything works again.

    Bottom line here... get the time Capsule working first with the "to modem" fibers.  Then start to add other devices to time Capsule one at a time.

  • Problem with access to the camera on the net via dsl modem and linksys router

    OK, I read all posts here on what to do in this case and think I have tried everything. I have an Actiontec dsl (verizon) and a v2 wrt110 router. I can see the camera locally, but not on the net. I had it hooked to another place but with cable service broadband with no problems.

    I think that the problem of my lie with ip addresses.

    Camera 192.168.0.115

    Router 192.168.0.1

    Modem 192.168.1.1

    The port forwards on the modem MUST be set to port forward to the IP Address of the Linksys router. It should be only the modem IP can see, so it's the only place you can move forward from the modem. What exactly is in this drop-down list in the config of the modem port forwarding?

    The problem is that there are two distinct here networks once you are inside your modem. There is a network between the modem and the router. Allthat is on it is the modem's ethernet interface and the port of the Internet router (or WAN). There is another network on the side the router as your PC's LAN, camera, etc. are on. All know the modem is how to get to the network to which it is directly connected to. While you could add a route staic on the modem to tell him how to get to this network, the modem must still know I have oprt route traffic to your camera to the router.

  • Routing problem between the VPN Client and the router's Ethernet device

    Hello

    I have a Cisco 1721 in a test environment.

    A net 172.16.0.0/19 simulates the Internet and a net 192.168.1.0/24 simulates the net, the VPN tunnel must go to (intranet).

    The net 172.16.0.0 depends on the router 0 FastEthernet, Intranet (VPN) hangs on Ethernet 0.

    The configuration was inspired form the sample Configuration

    "Configuring the Client VPN Cisco 3.x for Windows to IOS using Local extended authentication"

    and the output of the ConfigMaker configuration.

    Authentication and logon works. Client receives an IP address from the pool. But there's a routing problem

    side of routers. Ping client-side - do not work (the VPN client statistics that count encrypt them packets, but not to decrypt).

    Ping the router works too, but decrypt and encrypt customer statistics in VPN packets count progressive

    (customer has a correct route and return ICMP packets to the router).

    The question now is:

    How to route packets between the Tunnel and an Ethernet device (Ethernet 0)?

    conf of the router is attached - hope that's not too...

    Thanks & cordially

    Thomas Schmidt

    -.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- snipp .-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

    !

    version 12.2

    horodateurs service debug uptime

    Log service timestamps uptime

    encryption password service

    !

    !

    host name * moderator edit *.

    !

    enable secret 5 * moderator edit *.

    !

    !

    AAA new-model

    AAA authentication login userauthen local

    AAA authorization groupauthor LAN

    !

    ! only for the test...

    !

    username cisco password 0 * moderator edit *.

    !

    IP subnet zero

    !

    audit of IP notify Journal

    Max-events of po verification IP 100

    !

    crypto ISAKMP policy 3

    3des encryption

    preshared authentication

    Group 2

    !

    ISAKMP crypto client configuration group 3000client

    key cisco123

    pool ippool

    !

    ! We do not want to divide the tunnel

    ! ACL 108

    !

    Crypto ipsec transform-set esp-3des esp-sha-hmac RIGHT

    !

    Crypto-map dynamic dynmap 10

    Set transform-set RIGHT

    !

    map clientmap client to authenticate crypto list userauthen

    card crypto clientmap isakmp authorization list groupauthor

    client configuration address map clientmap crypto answer

    10 ipsec-isakmp crypto map clientmap Dynamics dynmap

    !

    interface Ethernet0

    no downtime

    Description connected to VPN

    IP 192.168.1.1 255.255.255.0

    full-duplex

    IP access-group 101 in

    IP access-group 101 out

    KeepAlive 10

    No cdp enable

    !

    interface Ethernet1

    no downtime

    address 192.168.3.1 IP 255.255.255.0

    IP access-group 101 in

    IP access-group 101 out

    full-duplex

    KeepAlive 10

    No cdp enable

    !

    interface FastEthernet0

    no downtime

    Description connected to the Internet

    IP 172.16.12.20 255.255.224.0

    automatic speed

    KeepAlive 10

    No cdp enable

    !

    ! This access group is also only for test cases!

    !

    no access list 101

    access list 101 ip allow a whole

    !

    local pool IP 192.168.10.1 ippool 192.168.10.10

    IP classless

    IP route 0.0.0.0 0.0.0.0 172.16.12.20

    enable IP pim Bennett

    !

    Line con 0

    exec-timeout 0 0

    password 7 * edit from moderator *.

    line to 0

    line vty 0 4

    !

    end

    ^-^-^-^-^-^-^-^-^-^-^-^-^- snapp ^-^-^-^-^-^-^-^-^-^-^-^-^-^-

    Thomas,

    Can't wait to show something that might be there, but I don't see here. You do not have the card encryption applied to one of the interfaces, perhaps it was not copied. Assuming your description you do it, or should it be, applied to the fa0 and you are connected. Try how you ping? Since the router or a device located on E0? If you ping the router, you will need to do an extended ping of E0 to the ip address of the client has been assigned. If your just ping the router without the extension, you will get sales and decrypts that you declare on the client. Have you tried to ping from the client to interface E0? Your default route on the router is pointing to fa0? You have a next hop to affect? You have several NIC on the client pc? Turn off your other network cards to check that you don't have a problem with routing on the client if you have more than one.

    Kurtis Durrett

  • Can not connect with the Adobe server to upgrade the PS. Tried with fiervall and the router and called my provider. She is also only CC there are problems!

    Can not connect with the Adobe server to upgrade the PS. Tried with fiervall and the router and called my provider. She is also only CC there are problems!

    Check your hosts file.

    help for that and other adobe.com sure common connection problems read, http://helpx.adobe.com/x-productkb/policy-pricing/activation-network-issues.html

  • WRT600N advanced routing problems / use as Access Point and switch

    Firmware 1.01.36 build 4 The WRT600N is connected to an existing LAN and is really only used as a Wireless N access point. There is nothing plugged into the WAN port; only the LAN port. I have NAT disabled. All traffic from a client connected to the WRT600N wireless going very well for the gateway and the Internet router. The customer experience is very good. However, there are a few minor issues as follows.

    1] Setup > Advanced Routing tab has only the following options; to do this, * not * have a picker 'Mode '. NAT, static routing and dynamic routing (RIP).    IS this NORMAL, OR should HAVE a MODE (e.g. switch) AS REFERRED to IN THE HELP FILES?

    [2] even if a connection wireless or wired to the WRT600N works very well, the WRT600N himself is unable to connect to the internet. It cannot connect to NTP to set the time and I can't ping past the gateway router using the ping of the WRT600N diagnostic utility. I ping the gateway 192.168.1.4 port inside, but I can't use the diagnostic the WRT600N ping ping utility something beyond this gateway port. The routing of the WRT600N table is below. THE GATEWAY SHOULD NOT BE 192/168.1.4? HOWEVER THE WRT600N DON'T ME LETS NOT CHANGE IT.

    Destination LAN IP Subnet Mask gateway interface

    192.168.1.0 255.255.255.0 192.168.1.71 LAN & Wireless

    127.0.0.0 255.0.0.0 * LAN & Wireless

    Topic 1. Linksys, used to have a mode option to switch between the modes 'Bridge' and 'router '. The latest routers call it now better NAT power. Gateway mode means THAT NAT is enabled. Router mode means THAT NAT is disabled. The help files are probably a little bit over. But the option is still the same.

    Re 2. It's normal if you use it as only access point (i.e. do not use the WAN port). The router always takes into account that the internet connection via the WAN port, i.e. it will always use the default gateway on the WAN port. If nothing is connected to the WAN port on the router itself has no default gateway and therefore has no access to the internet. Generally, you are not able to establish the default route in either advanced routing page. It is a known limit of these routers if you do not use as a router.

  • VLAN and Exchange server

    Hello world

    We need help on our Exchange Server configuration and VLAN.
    Since I am a beginner in the configurations of VIRTUAL LAN.
    We use SG300 Cisco switch and the Exchange Server.

    We have 2 network cards on our server, with 1 having a static IP address of Public (internet) for the internet which is directly connected to our ISP modem (complete with the IP address, subnet, default gateway, and DNS mask), the other NETWORK adapter a static IP address of Local (intranet) for the LAN (with an IP address and the subnet mask).

    Our problem is that we cannot add a gateway on the 2nd NIC (intranet) of conflicts with the gateway on the map of others because he said.

    We want to add a default gateway on the 2nd NIC (intranet) have become accessible to other VLANs.

    How the server are accessible to others different VLANS on our network?

    What will be the best approach on this?

    Thanks in advance.

    J

    You must add routes to your windows, routing table.

    So if your server is in VLAN 10.10.10.0/24 and has the IP address of 10.10.10.2 and your router is 10.10.10.1 then you can add routes to all your VLAN by adding networks and their routing through 10.10.10.1.

    For example, in your Windows command prompt, you must type:

    Pei route add 10.10.11.0 MASK 255.255.255.0 10.10.10.1
    Pei route add 10.10.12.0 MASK 255.255.255.0 10.10.10.1
    Pei route add 10.10.13.0 MASK 255.255.255.0 10.10.10.1

    This would make your computer access all VLAN interns as well as make it accessible from VLANs.

  • Not able to communicate between the VLANS on SG300-10

    Please take a look at my crude drawing of how I want my network to work:

    SG300-10
    __________________________________________
    | 1. 2. 3. 4. 5. 6. 7. 8. 9. 10.
    |_|___|__________________________________|
    |   |_________________________________
    |_________________                   |
    __________________  _______|_________  _______|_________
    |-VLAN 1-|  | - VLAN 10-|  | - VLAN 20-|
    |   Management |  | 192.168.10.1 |  | 192.168.20.1.
    | 192.168.1.250 |  |               |  |               |
    |________________|  | Internet router |  |   Devices.
    | 192.168.10.2.  | Box of physics |
    |_______________|  | 192.168.20.2 |
    | Server 2008R2.
    | DNS, DHCP, AD DC |
    |               |
    | Physical boxes |
    | 192.168.20.x |
    | W7 Workstations |
    |_______________|

    I put a static IP address on the server 2008R2 host and Internet router.  I have configured my VLAN and I put each VLAN IP (as shown above), I put a 0.0.0.0 route to the Internet router, but also routes for each range of IP VLAN x.x.x.0 and I put the gateway on all host on VLAN 20 to be 192.168.20.1.

    I'm unable to access the Internet, ping the router or access the webpage switch management of any host on VLAN 20 unless I manually set the IP address on the host VLAN 20 on the same IP range as the machine I'm trying to get. As such:

    If I manually set the IP host address to 192.168.1.50, I can access the administration of the switch, but then not RDP in or ping any host on VLAN 20 or ping the router Internet on VLAN 10.

    If I manually set the IP host address to 192.168.10.50, I can ping the router Internet but cannot RDP into or ping any device on VLAN 20, nor can I access the Switch Management page.

    If I let DHCP assign the IP 192.168.20.5, I can RDP in and ping all devices VLAN 20, but I can't ping all devices on VLAN 10 or access the administration of the switch to VLAN 1.

    I know I'm missing something simple, and I worked on it for about 30 hours now but can't seem to get this to work. Someone could possibly help?  Thanks in advance.

    Just to be sure, is the SG300 mode switching L3 / L2 switching?

  • Implementation of VLAN and QoS for VOIP on SG200-18

    We recently purchased the smart switch SG200-18 to replace a Netgear switch. We are moving our phone service to VOIP through our local ISP as well.

    I currently have the VOIP phone plugged into Port 17 on SG200-18 (it is a Grandstream Cordless VOIP phone).

    I want to put the VOIP phone on one VLAN separate from the rest of the network and optimize QoS parameters so that the VOIP phone has exceptional audio quality even during network traffic.

    Here are my questions:

    1. do I need to set anything on the type of port to Port 17 (because it resembles a shape any Combo port)?

    2. How can I do to isolate VOIP telephone it's own VLAN (I see the parameters VLANS and VLAN voice, not sure that one to use;) I've tried to set a VLAN and broke the Internet connectivity on the phone until I went and removed)?

    3. do I need to adjust the QoS settings to switch to better optimize the VOIP phone?

    Some additional questions about the GS200-18 in general:

    1. do I need to adjust the parameters of the system on the switch time? I am in the Central time.

    2. do I need to adjust the Green Ethernet/Energy Saving parameters or should I stay with the default settings?

    In addition, a couple of "getting started" questions for Cisco:

    1. I registered an account My Cisco. What should I do to register my switch with Cisco and associate with my My Cisco account?

    2. What are the benefits of purchasing a contract of Cisco Small Business support, and how much would it cost the SG200-18 (I ordered it from Provantage)? I'm curious to see if it's worth the money.

    Here's my 'features ':

    Switch: SG200-18

    VOIP phone: Grandstream DP715 and 710 handsets

    Plugged in: Port 17 on SG200-18

    Services: Internet Local (Direclynx)

    Type of connection: 3 m down / 500 k up DSL move to a future wireless connection that will give us higher speeds

    Backend VOIP provider: VOIP Innovations

    Router: Apple Airport Extreme AC model (all Macs and iOS devices and the OS X Server on the network, so I use the Apple router facilitates installation, because is not QoS, trying to QoS and VLAN in the switch)

    Thank you all!

    Hello

    I'll just go to the list again:

    1. sounds good in the port from the drop-down list. So can I just connect the VOIP phone and go with it, correct?

    Yes, just plug in ethernet combo port and it will work.

    2. is not an issue, but I agree, Apple likely isn't compatible QoS or VLAN.

    3. thanks for the info on time/NTP settings. If I wanted to go there and try to configure NTP, how much is it and what I have to do? I want to I can give it a quick try.

    To Setup NTP on the switch is quite simple.  Go to Administration > Time Settings > time system and check the boxes to activate the main clock Source (SNTP)

    Then go to the settings of the SNTP page and add a new entry with the IP address of an NTP server.  There is a list of available NTP servers here:

    http://www.pool.ntp.org/en/

    You must also ensure that the switches Administrative default gateway is set correctly (it must be set the to the default gateway, probably the most convenient airport) so the switch can contact the NTP server.  That option is set under Administration > Interface Management > Interface IPv4.  Change the user-defined default gateway and enter the IP address of your airport (or whatever your default gateway for your network)

    4 sounds good on the Green Ethernet settings. I'll leave it as default value.

    Yes, better to just let those unless you have weird problems with ports disconnect, who can sometimes be caused by Green Ethernet, but if there's nothing like leave it on and save a few watts.

    5 sounds good on does not need to attach my passage to my Cisco account. Should I fill out a form any registration of the product with Cisco before calling support?

    It is not a record for support.  The only thing we need you to do is to create a Cisco account, but you have already done this, so if/when you call in support, you just need your ID for Cisco (also called a CCOID sometimes) and the serial number of your switch.

    6. thanks for the info on the Service contract. Is it something that I would need to order directly from Cisco or I who would get my Cisco partner (Provantage)? After the three years is up, treat yourself to renewal or it just falls? Is there a certain amount of time I have to buy the Service Contract forward make me ineligible?

    Support contracts are purchased through a partner Cisco, or you can get them online for the CDW or Newegg for example.  Basically, you have until the expiry of your current aid for the purchase of a new contract.  For example, right now your switch comes with 1 year of technical support.  You can only buy a contract while it is still active.  Once your three-year contract is about to run out, you're in the same situation.  You can renew it before it expires, however if you leave is up, you will not be able to put a contract on it.  Contracts are not my specialty, however, so you can check with your partner for complete details.

    7. sounds good to how data use VOIP calls. His dislikes too. :-)

    I agree, a voice call is not much traffic.  What you have described you probably don't have problems, although of course I can't guarantee that.

    8. because it is from your provider and they specifically mentioned the VOIP, I would say that you'll be fine here.

    You had also placed on your airport using access point behind a router in small businesses.  I would like to say that it is possible, a large number of wireless routers have an option to put access point only mode or something like that, but you should check with Apple on how to do it.

    Insofar as a Small Business router if you decide to upgrade for the options VLAN or QoS, I would recommend the RV180, or perhaps the RV320.  Two of these models are available with or without wire depending on what you decide to do with the airport.

    I think I got all the questions, but if not just let me know,

    Christopher Ebert - Network Support Engineer

    Cisco Small Business Support Center

    * Please note the useful messages *.

Maybe you are looking for