SG300-28 Multi Vlan

drifter104 · ‎03-14-2011

Hi, I'm hoping to find some help a problem I've inherited to a degree.... Please bare with me on this.

Current setup (What I've inherited) is 3x HP2610 switches which have been configured with vlan10 (untagged, data) and vlan20 (tagged, voice) some ports are members of both vlans some are members of just one or the other, these are new and were installed by comms provider. valn10 is ip subnet 192.168.100.0 and vlan20 is 192.168.150.0. Before being installed network gateway was 192.168.100.254 (no ip phones at this point) after installation both networks are using .1 of their range as gateway address. The .1 address belongs to one of the HP2610 which is configure to route all traffic to 192.168.100.254 the firewall is not configured with the vlans.

Now to the bit I've been scratching my head about.

Brand new SG300-28 out of the box configured with vlan10 and vlan20 same as above 10 untagged and 20 tagged. Ports 1-10 vlan 10 only, ports 11-20 vlan 20 only and ports 21-24 both 10 and 20. If I connect any port on the cisco to any port of the HP2610 I'm unable to get out to the internet. So if I connect port 2 to a port of the Hp that is a member of vlan10 (untagged) it doesn't work, if I connect port 21 to a port on the HP that is a member of both it doesn't work. However there is an exception to it not working randomly I will be able to ping an address on the internet and get 3 replies, no more and no less.

If I stick a 8 port netgear hub in any port it all works fine so I know there is a good connection present. Now I will be swapping out the firewall for something that is vlan aware which in the long run might make things easier, however before I can do that I need to make sure I'm not missing something with the ciscos.

I've tried the above steps in both layer2 and layer3 mode, with the switch set to dhcp for both vlans and a dhcp server present. Another strange thing, I can't change the default vlan ip address when in layer3 mode, but to be honest that seems a very minor problem at the moment

Any suggestions?

David Hornstein · ‎03-24-2011

Hi Michael,

I am not surprised that a unsophisticated hub or switch will work. Spanning tree or other protocols will not be running on the netgear and i guess the beast is also transparent to vlan tags.

The Sx300 series are really quite functional pieces of equipment and you have to think about spanning tree and how you have configured your vlans on the switch.

Today 24 March, we are in fact running a technical webinar on our weekly Good Morning Techies webinar on this product at 1pm EST,

http://www.cvent.com/EVENTS/Calendar/Calendar.aspx?cal=313c653e-5061-464b-9bc8-56ab83b20f47

but back to your point; you said

Brand new SG300-28 out of the box configured with vlan10 and vlan20 same as above 10 untagged and 20 tagged. Ports 1-10 vlan 10 only,

I guess vlan mode for ports ports 1-10 are access mode.
In the vlan tab the default vlan 1 marked as excluded for these ports
Ports 1-10 are marked as untagged for vlan 10

you also said; ports 11-20 vlan 20 only

but you said that Vlan20 is tagged so i guess again the default vlan is not excluded on these ports so therefore;
ports 11 - 20 are in trunk mode
ports 11 - 20 have vlan 20 as tagged for each one of these ports ?

I guess ports 21-24 are tagged for both vlan 10 and vlan 20 and the default vlan 1 is still running over these uplink ports ?

Yep sure sounds like a configuration error, I would love to webex in and see the config. But I wonder what would happen if you were to briefly disable spanning tree after hours on the SG300 switch ?

.

But i think, if you are still with phone support period for these switch, call the good folks at the SBSC

http://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html

regards Dave

drifter104 · ‎03-29-2011

Hi David,

Thank you for the reply.

I'll be working on this next week and will try you suggestion regarding spanning tree, fingers crossed this will work. If it does I'll update the post.

Regarding the other points I'm pretty sure I set the default vlan1 to be excluded and they were in trunk mode but I'm not in front of the device at the moment so I can honestly couldn't say for sure.

regards

Michael