Meraki MS130-48P switches and Catalyst 3945 ISR

[tclsg itsupport]

Hi all,

Scenario: 

• I've got an Meraki MX84 Security Appliance that acts as the gateway. 
• MX84 is connected to a Catalyst 3850 switch that acts as the backbone. 
• Connected to the 3850 are five Meraki MS130-48P switches and a 3945 ISR. 
• 3945 ISR is configured to be a call manager and has DHCP enabled. 
• Two VLANS (5 - Voice and 10 - Data)
• The desk phones get their IP from the 3945 ISR
• Computers and hand held devices get their IPs from the Windows Server DHCP
• Switches and router are all connected to Trunks ports on the 3850. 
• The MS130-48Ps replaced the Catalyst 2960 series. 

Problem:

After changing the Catalyst 2960 switches with the MS130-48Ps, I started having problems with the desk phones. All but two phones in the offices are either showing 'Phone not registered' or Network not available'. I have included the the mac address of the 3945 to the allowed DHCP list on the DHCP Servers list on the Meraki. 
On the Meraki dashboard, all the phones show that they are connected with the right IP Address. However, from the 3945 ISR, I do not see the list of the devices when I use show ip dhcp binding. 

Any help is welcome to solve the issue I face of the devices showing 'Phone not registered' or Network not available'.

[Richard Burts]

Am I understanding correctly that the network was using 2960 switches and was working correctly? And that you replaced these switches with MS130-48P and now most phones are not working? It sure sounds like there is some issue on MS130-48P. Can you verify their configuration?

Are there any log messages on the 3850 or on the 3945 that might relate to this issue? Or messages on MS130-48P?

Are you sure that the 3850 and MS130-48P agree on vlan assignment, etc?

[tclsg itsupport]

Yes the network was ok when it had the 2960 switches. ANd after changing them to the MEraki MS130-48P switches the phones are all off bar two. 

The Management VLAN on the Meraki is VLAN 10. This was changed from VLAN 1 since when its on VLAN 1 the Meraki uses dynamic DHCP even though it is configured to use static IP Address. 

Below is the config on the 3850.

BACKBONE-SW#sh config
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service compress-config
!
hostname BACKBONE-SW
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-vrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
enable secret 5
!
username admin privilege 15 password 7
aaa new-model
!
!
aaa session-id common
switch 1 provision ws-c3850-24t
!
!
ip name-server 172.16.0.2
ip name-server 172.16.0.3
!
!
qos queue-softmax-multiplier 100
vtp mode transparent
!
!
spanning-tree mode mst
spanning-tree extend system-id
!
spanning-tree mst configuration
name OfficeHQ
revision 1
instance 1 vlan 1-30
!
spanning-tree mst 0-2 priority 16384
hw-switch switch 1 logging onboard message level 3
!
redundancy
mode sso
!
!
vlan 5
name VOICEVLAN
!
vlan 10
name DATAVLAN
!
vlan 15
!
!
class-map match-any non-client-nrt-class
!
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
no ip address
negotiation auto
!
interface GigabitEthernet1/0/1
description "SERVER ACCESS PORT"
switchport access vlan 10
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/2
description "SERVER ACCESS PORT"
switchport access vlan 10
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/3
description "SERVER ACCESS PORT"
switchport access vlan 10
switchport mode access
spanning-tree portfast
!
!
interface GigabitEthernet1/0/20
description "UPLINK TO ACCESS SW"
switchport mode trunk
!
interface GigabitEthernet1/0/21
description "UPLINK TO ACCESS SW"
switchport mode trunk
!
interface GigabitEthernet1/0/22
description "UPLINK TO ACCESS SW"
switchport mode trunk
!
interface GigabitEthernet1/0/23
description "UPLINK TO ACCESS SW"
switchport mode trunk
!
interface GigabitEthernet1/0/24
description "UPLINK TO ACCESS SW"
switchport mode trunk
!
!
interface Vlan1
ip address dhcp
!
interface Vlan10
ip address 172.16.0.10 255.255.254.0
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
!
!
!
line con 0
password 7
stopbits 1
line aux 0
stopbits 1
line vty 0 4
password 7
transport input telnet ssh
line vty 5 15
transport input telnet ssh
!
ntp server 172.16.0.1
wsma agent exec
profile httplistener
profile httpslistener
!
wsma agent config
profile httplistener
profile httpslistener
!
wsma agent filesys
profile httplistener
profile httpslistener
!
wsma agent notify
profile httplistener
profile httpslistener
!
!
wsma profile listener httplistener
transport http
!
wsma profile listener httpslistener
transport https
!
ap group default-group
end

[paul driver]

Hello
do your ports require poe? and if so is the new meraki capable 

[tclsg itsupport]

The Meraki MS130-48P switches are PoE capable and my APs are connected to them using PoE and so are the deskphones.

[ammahend]

on the MS130 make sure the STP root is correct, if not fix it.