topic Dot 1Q Trunking to a pair of CheckPoint IP 380 in Network Security https://community.cisco.com/t5/network-security/dot-1q-trunking-to-a-pair-of-checkpoint-ip-380/m-p/820236#M955266 <P>Hi, I am having problems getting trunking working between 2 firewalls and 2 6506 switches (System image file is "sup-bootflash:s72033-psv-mz.122-18.SXD7.bin"</P><P>cisco WS-C6506-E (R7000) processor (revision 1.0) </P><P></P><P>I am dot1q trunking 2 vlans into the CheckPoint IP 380s and the odd thing is that once configured I am able to ping the vrrp addresses and both vip addresses of both subnets on the firewall however connectivity is lost between the firewalls and all other devices on these 2 subnets. (The pings enter the firewall via another physical interface which is the next hop towards the two subnets we're trunking to.)</P><P></P><P>The switch seems to think it is trunking, and the firewalls respond to the pings so think those nets are up, and yet it is plainly broken.</P><P></P><P>Any thoughts would be appreciated. Tx</P> Wed, 13 Mar 2019 00:57:10 GMT mrbmchitlin 2019-03-13T00:57:10Z Dot 1Q Trunking to a pair of CheckPoint IP 380 https://community.cisco.com/t5/network-security/dot-1q-trunking-to-a-pair-of-checkpoint-ip-380/m-p/820236#M955266 <P>Hi, I am having problems getting trunking working between 2 firewalls and 2 6506 switches (System image file is "sup-bootflash:s72033-psv-mz.122-18.SXD7.bin"</P><P>cisco WS-C6506-E (R7000) processor (revision 1.0) </P><P></P><P>I am dot1q trunking 2 vlans into the CheckPoint IP 380s and the odd thing is that once configured I am able to ping the vrrp addresses and both vip addresses of both subnets on the firewall however connectivity is lost between the firewalls and all other devices on these 2 subnets. (The pings enter the firewall via another physical interface which is the next hop towards the two subnets we're trunking to.)</P><P></P><P>The switch seems to think it is trunking, and the firewalls respond to the pings so think those nets are up, and yet it is plainly broken.</P><P></P><P>Any thoughts would be appreciated. Tx</P> Wed, 13 Mar 2019 00:57:10 GMT https://community.cisco.com/t5/network-security/dot-1q-trunking-to-a-pair-of-checkpoint-ip-380/m-p/820236#M955266 mrbmchitlin 2019-03-13T00:57:10Z Re: Dot 1Q Trunking to a pair of CheckPoint IP 380 https://community.cisco.com/t5/network-security/dot-1q-trunking-to-a-pair-of-checkpoint-ip-380/m-p/820237#M955267 <HTML><HEAD></HEAD><BODY><P>For trunking to be autonegotiated, the ports must be in the same VLAN Trunking Protocol (VTP) domain. However, you can use the on or nonegotiate mode to force a port to become a trunk, even if it is in a different domain. For more information on VTP domains, see "Configuring VTP." </P><P></P><P><A class="jive-link-custom" href="http://cisco.com/en/US/docs/switches/lan/catalyst6500/catos/8.x/configuration/guide/e_trunk.html" target="_blank">http://cisco.com/en/US/docs/switches/lan/catalyst6500/catos/8.x/configuration/guide/e_trunk.html</A></P></BODY></HTML> Fri, 15 Feb 2008 14:21:23 GMT https://community.cisco.com/t5/network-security/dot-1q-trunking-to-a-pair-of-checkpoint-ip-380/m-p/820237#M955267 wong34539 2008-02-15T14:21:23Z