SG300-28 and AP3502 trunk comunication

[Gustavo_Mendes]

Hi There,

I have an AP 3502i and a SG300-28p, but for some reason I can't configure this switch to open all vlans I have configured on my AP device. Actually, I have a native vlan (vlan 20) and 2 other vlans (30 and 32) configured on my AP, but I still can't put this 2 devices to talk each other regarding this 3 vlans.

Bellow you can see my AP configuration as well as my switch configuration. Any tip ?

AP Config

interface GigabitEthernet0.20
encapsulation dot1Q 20 native
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface GigabitEthernet0.30
encapsulation dot1Q 30
bridge-group 30
bridge-group 30 spanning-disabled
no bridge-group 30 source-learning
!
interface GigabitEthernet0.32
encapsulation dot1Q 32
bridge-group 32
bridge-group 32 spanning-disabled
no bridge-group 32 source-learning
!
interface BVI1
ip address 10.0.0.2 255.255.255.0 (it's a vlan 20 address)

Switch config

interface gigabitethernet24
switchport trunk allowed vlan add 30,32
switchport trunk native vlan 20

On my ASA 5505,where I still have this AP connected (for while), I have this commands to support all those vlans

ASA config

interface Ethernet0/7
switchport access vlan 20
switchport trunk allowed vlan 20,30,32
switchport trunk native vlan 20
switchport mode trunk

Thanks

[balaji.bandi]

Try change native VLAN to different VLAN(any thing other than 20 and allow vlan 20 in to allow list)

Switch config

interface gigabitethernet24
switchport trunk allowed vlan add 20,30,32
switchport trunk native vlan 40   < --- example this vlan not part, so all black-hole vlan will be tageed)

[mipopov]

Hello Gustavo,

Happy new 2019 year! 

what gives you command?  :

switchxxxxxx# show interfaces switchport gi24

[Gustavo_Mendes]

Hi Mipopov,

Happy new year for you too !!!

Here's the output

Switch#sh interface switchport gi24
Port : gi24
Port Mode: Trunk
Gvrp Status: disabled
Ingress Filtering: true
Acceptable Frame Type: admitAll
Ingress UnTagged VLAN ( NATIVE ): 1

Port is member in:

Vlan              Name                Egress rule Port Membership Type
---- -------------------------------- ----------- --------------------
1                  1                   Untagged           Static
20               inside                 Tagged            Static
30                wifi                  Tagged            Static
32               guest                  Tagged            Static

Forbidden VLANS:
Vlan Name
---- --------------------------------

Classification rules:
Switch#

And here's my port configuration

interface gigabitethernet23
storm-control broadcast enable
switchport trunk allowed vlan add 20,30,32
!
interface gigabitethernet24
Description "Connected to Cisco AP"

storm-control broadcast enable
switchport trunk allowed vlan add 20,30,32
!

Thank you

[mipopov]

Hello Gustavo,

Try to make vlan 20 native to trunk :

Switch(config)# interface gi24
Switch(config-if)# switchport trunk native vlan 20

Hope it helps

Cheers,

Mike