cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1093
Views
0
Helpful
2
Replies

Traffic getting tagged with unexpected VLAN id

robinboelen
Level 1
Level 1

I'm having trouble with configuring a Cisco WS-C3560V2-24PS-S. Traffic is being tagged with an unexpected VLAN id.

 

I have the following VLAN config on the Switch: 

 

interface Vlan1
 no ip address
 shutdown
!
interface Vlan110
 ip address 192.168.11.254 255.255.255.0
 ip helper-address 192.168.1.25
!
interface Vlan111
 ip address 10.0.1.254 255.255.255.0
 ip access-group 100 in
 ip helper-address 192.168.1.25
!
interface Vlan510
 description Data_Subnet
 ip address 192.168.1.254 255.255.255.0
!
interface Vlan511
 description Voice_subnet
 ip address 172.17.3.254 255.255.255.0

VLAN 111 has an access list, as it is used for a Guest Wifi network:

access-list 100 remark GAST-WIFI
access-list 100 permit ip any host 192.168.1.252 <---(Meraki MX84)
access-list 100 permit udp any any eq bootpc
access-list 100 permit udp any any eq bootps
access-list 100 deny   ip any 192.168.0.0 0.0.255.255
access-list 100 deny   ip any 172.0.0.0 0.240.255.255
access-list 100 permit ip any any

I have a UbiQuiti AP attached to port 23 on the switch. It sends out 2 networks in 2 different VLAN's:

- Corporate Wifi (VLAN 110)

- Guest Wifi (VLAN 111)

 

Clients can connect to the Guest Wifi, and get an IP address. However they do not have internet access, in the logging of our Meraki I see that the traffic is getting taged with VLAN 510:

 

Time (CET) [Sorting down]
Client Event type Details
Nov 5 16:48:14 10.0.1.129 Source IP and/or VLAN mismatch source_client_ip: 10.0.1.129, source_client_mac: E8:40:40:05:15:41, source_client_assigned_vlan: 510  more »

 

The switchport has the following config:

interface FastEthernet0/23
 description WIFI_ZENDERS_UBI
 switchport access vlan 110
 switchport trunk encapsulation dot1q
 switchport mode trunk
 switchport nonegotiate
 spanning-tree portfast

Any idea why the traffic is getting tagged with 510 ?

 

2 Replies 2

Hello

Is vlan 510 residing on the MX?

Does your MX lan port allow all vlans?




Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

The Meraki resides in VLAN 510. His LAN port is tagged in 510

I just changed it to trunk, and allowed all vlans's to no avail.

Review Cisco Networking for a $25 gift card