Configuring a new SG350-10 Switch

[fmarshall]

I just took a new SG350-10 out of the box and am trying to do (what I thought would be) some simple things.

I'm configuring these switches for switching internet public addresses in a block.  Generally, this has required no configuration other than putting most of the ports on their own separate VLAN - no IP addresses or routing or anything like that.

Then, I'd add one or two ports for a management connection - that's where the device IP address would reside and, in the past it seemed to need to be done on VLAN1 - but I really don't care which VLAN it might be.

So, I set up VLAN 1 intending it be the management VLAN.

I set up VLAN 100 intending it be assigned to most ports for internet switching.

I also set up VLAN 99 for a mirror port perhaps.

The only trouble is: I can't change the VLAN1 IP address!!  It's effectively blocked or grayed out.

I did set up a VLAN 2 as suggested for temporary use in changing the IP address but that did no good.  Now I have two VLANs with static IP addresses that won't change no matter which one I'm connected to.

The instructions (here) also suggested setting up "routing" on the temporary vlan.  I don't find anything describing this process.  How does one do that?

This seems pretty involved to simply change the access IP address of a switch!!

[balaji.bandi]

how about change the IP address from command level :

https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-250-series-smart-switches/smb5826-setting-static-ipv4-address-on-a-switch-using-gui.html

[Zed969]

Something like this:

interface vlan 1
ip address 192.168.xxx.xxx 255.255.255.0
no ip address dhcp

[fmarshall · Accepted solution]

While I was waiting, I figured it out for myself.  Likely with some help.  Never did deal with the "routing" in doing this.  A bit tedious but not terrible:

1) Add a temporary VLAN.

2) Assign the new VLAN to a port.

3) Give it an IP address.

4) log into the new IP address on the assigned port for the new temporary VLAN.

5) Open IP Configuration \ IPv4 Interface

6) Delete the original VLAN with the unwanted IP address.

7) add a new member of the original VLAN using the wanted IP address.

Save it.

Thank goodness this is a workaround for a bug.  Soon, I hope, it should be fixed.

[Zed969 · Accepted solution]

That is the painful way around! But hey, it's like all that pre-Calc
algebra to do 'caclulus' then they teach you the derivative. Facepalm! I
knew it shouldn't be this hard.

So, figuring it out no matter the method has value. Then you can find & use
the most efficient method.

because this accomplishes your multi-step method in a single step:

interface vlan 1
ip address 192.168.xxx.xxx 255.255.255.0
no ip address dhcp

I replied right when I saw your question. Perhaps you didn't get it in time.

[fmarshall]

Yes, I agree that's a good way to do it.

My focus had been on GUI interface configuration since I most often am doing things remotely and https is easier to set up on a remote system.  And, I didn't realize I was dealing with a bug at the time.

So, getting the serial port to work locally was a bit tedious as I rarely use it.

[Zed969]

I hear you. You can use the CLI commands with SSH as well. I've never
console'd into my SG350-10P actually. SSH works well remotely, and since
it's built-in to most OSes you can just start a session from CMD.exe in
Windows & from the bash shell on Linux, Windows, Mac OS X,UNIX, etc.

No more TELephone NETwork like the old days as it's insecure. As in sending
clear, unencrypted text, not as in Woody Allen. I use mostly the GUI, but
certain things are easier in the CLI. Whatever works. Some people are
intimidated by CLI and avoid it. Don't need to. It has its uses. But YMMV.
As my man Shock G says "Doowutchyalike!"

Please, more info required: What is this bug of which you speak? I'm
curious as I have 2x SG300s, an SG350, several SG500s and 2 little
SG250-08HPs. Does it affect the whole Small Business line or just the
SG350-10(P)?

[fmarshall]

After my difficulty in changing the IP address, in my reading here, I saw a Cisco response that dealt with the bug.
It seems that the IP address and the subnet mask should be changeable.
The subnet mask is but the IP address is not. That’s the bug.
As far as I know, this only affects the SG350.

What I would dearly like to have would be:

1. The IP address is changeable from the GUI.
2. The Mirror Source port is changeable from the GUI as easily as in an SG300!!
While I can see some neat new things in the SG350 re: remote monitoring, it’s disappointing that the term “mirror” has gotten buried as much as it has.
I’m all set up for direct/local mirroring and often change the source port.
That’s it….

[Danny@dtll.co.uk]

hi please how do i remote or vpn

Cisco sg350-10 sfp switch

Many Thanks