04-22-2009 08:49 AM - edited 03-11-2019 08:21 AM
When configuring a CatOS switch to work with the ASA sub-interfaces, are these the right commands? Thanks much.
clear trunk 2/28 1-91,94-1005,1025-4094
set trunk 2/28 on dot1q 92-93
Solved! Go to Solution.
04-22-2009 12:51 PM
Okay, your trunk has a native vlan of 92 which means the packets sent for this vlan will not be tagged.
I don't have an ASA to test with but it may be that the ASA is expecting a tagged packet on vlan 92. So you could try changing the native vlan on the trunk link to something other than vlan 92 - the native vlan shouldn't be used to carry data traffic again.
Are your ASA subinteraces up ?
Jon
04-22-2009 09:01 AM
Yes assuming that what you are trying to achieve on the CatOS switch is to have a trunk connected to the ASA that only allows vlan 92 and 93.
Jon
04-22-2009 10:33 AM
04-22-2009 11:31 AM
Can you post output of "sh trunk" from the switch.
Jon
04-22-2009 12:02 PM
04-22-2009 12:51 PM
Okay, your trunk has a native vlan of 92 which means the packets sent for this vlan will not be tagged.
I don't have an ASA to test with but it may be that the ASA is expecting a tagged packet on vlan 92. So you could try changing the native vlan on the trunk link to something other than vlan 92 - the native vlan shouldn't be used to carry data traffic again.
Are your ASA subinteraces up ?
Jon
04-27-2009 10:32 AM
Jon,
The issue was the VLAN tagging. I changed that to another VLAN and it works!!
Thanks again and sorry I could not get back to you before.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: