Problem with VLANs between Cisco Catalyst (3560G) and SG300-52

[chris.loverme]

I'm having some trouble with creating a vlan trunk between an SG300-52 and a Cisco Catalyst 3560G.  I have 4 VLANS (1, 2, 10, and 11) on the 3650 and I need ports on the SG300 to be able to communicate with them.

On the 3560, port 14 is set to:

interface GigabitEthernet0/14

switchport trunk encapsulation dot1q

switchport mode trunk

spanning-tree portfast

On the Sg300, port 52 is set to:

interface GigabitEthernet52

spanningtree link-type point-to-point

switchport trunk allowed vlan add 1,2,10,11

macro description switch

Trying to figure out what's wrong... Any help would be appreciated.

Thanks,

Chris

[Tom Watts · Accepted solution]

Hi Chris, the first problem is the spanning-tree portfast, it shouldn't be on a switch interconnect. You may have a native vlan mismatch as well but that shouldn't matter.

One suggestion though, set the SG300 port to general mode and disable the ingress filter.

-Tom
Please mark answered for helpful posts

[chris.loverme]

Hi Tom,

I made the changes, but still no go.  I lose ping to the SG300 as soon as I remove the "switchport access vlan 11" line on the catalyst switch.

Catalyst: (10.10.2.199)
interface GigabitEthernet0/14
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,2,10,11
switchport mode trunk

SG300: (10.10.11.90)
interface gigabitethernet48
switchport mode general
switchport general allowed vlan add 2,10-11 tagged
switchport general ingress-filtering disable

[tomc]

Is the scripting command set the same for both the 3560 and the SG300?

[chris.loverme]

Okay, I figured out what it was.  On the catalyst, you need to include the default vlan in the vlan list. The SG series seems to ignore native vlan when coming from a catalyst.  I've highlighted the change below. Here's the configuration that is confirmed as working:

SG 300:
interface gigabitethernet52
spanning-tree link-type point-to-point
switchport mode general
switchport general allowed vlan add 2,10-11 tagged
macro description switch

Catalyst:
interface GigabitEthernet0/52
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,2,10,11
switchport mode trunk

For others with vlan troubles:
On the SG300, if you want a port to be on a particular VLAN, set the Mode to Access then add the vlan id to the port as untagged and PVID.  For example, if you want a workstation to be on VLAN 11, it will show up as "11UP" in the Port VLAN Membership screen.

[p11061812]

it works fine for me too. many thanks!!

[Ibrahim Hamid]

can we setup like vlan 11 as the managment vlan and defalt vlan ?

thank you

[rajputkrishna]

Hi, I am having the same issue, with the below scenario.
Switch 1 (SG350X)
Switch 2 (3560G) 1
Switch 3 (2960S)
With 6 Vlans

All 3 Switches connected through trunk port.
Switch 1 --> Switch 2 --> Switch 3
Problem is I am not able to communicate from PC connected to Switch 3 to PC Connected to Switch 1.

I tried the configuration as above but no luck, Please help, what can be the issue.