Cisco 887VA trunk with more than two vlans

[Mark Dayton]

Hi,

I'm having a problem with a 887va trunk port connected to a HP procurve switch.

VLAN1002 doesn't want to pass any traffic, can someone advise if I have missed anything?

Config 887va

interface FastEthernet0
switchport trunk allowed vlan 1,2,1002-1005
switchport mode trunk
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface Vlan1
description SecondaryLine
ip address 10.11.151.2 255.255.255.0
ip accounting output-packets
ip virtual-reassembly in
ip tcp adjust-mss 1300
!
interface Vlan2
description GuestLAN
ip address 172.32.0.65 255.255.255.192
ip accounting output-packets
ip virtual-reassembly in
ip tcp adjust-mss 1300
no autostate
!
interface Vlan1002
description CCTV
ip address 10.102.151.1 255.255.255.0
ip accounting output-packets
ip virtual-reassembly in
ip tcp adjust-mss 1300
no autostate

HP Procurve 1810g

Trunk configured on port1

Untagged VLAN1

Tagged VLAN2

Tagged VLAN1002

Access port configured on port 7

Untagged VLAN2

Access port configured on port 8

Untagged VLAN1002

If I plug something into port 7 I get an IP from the DHCP pool configured in pool 1.

If I plug something into port 8 I get nothing, no IP.

DHCP pools as below

ip dhcp excluded-address 172.32.0.65
ip dhcp excluded-address 10.102.151.1
!
ip dhcp pool 1
network 172.32.0.64 255.255.255.192
dns-server 8.8.8.8 8.8.4.4
default-router 172.32.0.65
!
ip dhcp pool 2
network 10.102.151.0 255.255.255.0
dns-server 8.8.8.8 8.8.4.4
default-router 10.102.151.1

Thanks in advance

[Mark Dayton]

Got this sorted, took all day but I found that vlan 1002 was inactive even though it was assigned to a local fa port.

I have since changed this to vlan10 and it works like a charm.

I have highlighted the parts that I found a problem with below.

router#sh int switchport
Name: Fa0
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: Disabled
Access Mode VLAN: 0 ((Inactive))
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: ALL
Trunking VLANs Active: 1-3,10,213,250,300
Protected: false
Priority for untagged frames: 0
Override vlan tag priority: FALSE
Voice VLAN: none
Appliance trust: none
Name: Fa1
Switchport: Enabled
Administrative Mode: static access
Operational Mode: down
Administrative Trunking Encapsulation: dot1q
Negotiation of Trunking: Disabled
Access Mode VLAN: 10 (VLAN0010)
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: ALL
Trunking VLANs Active: none
Protected: false
Priority for untagged frames: 0
Override vlan tag priority: FALSE
Voice VLAN: none
Appliance trust: none
Name: Fa2
Switchport: Enabled
Administrative Mode: static access
Operational Mode: down
Administrative Trunking Encapsulation: dot1q
Negotiation of Trunking: Disabled
Access Mode VLAN: 2 (VLAN0002)
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: ALL
Trunking VLANs Active: none
Protected: false
Priority for untagged frames: 0
Override vlan tag priority: FALSE
Voice VLAN: none
Appliance trust: none
Name: Fa3
Switchport: Enabled
Administrative Mode: static access
Operational Mode: down
Administrative Trunking Encapsulation: dot1q
Negotiation of Trunking: Disabled
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: ALL
Trunking VLANs Active: none
Protected: false
Priority for untagged frames: 0
Override vlan tag priority: FALSE
Voice VLAN: none
Appliance trust: none

router#sh int trunk

Port Mode Encapsulation Status Native vlan
Fa0 on 802.1q trunking 1

Port Vlans allowed on trunk
Fa0 1-4094

Port Vlans allowed and active in management domain
Fa0 1-3,10,213,250,300

Port Vlans in spanning tree forwarding state and not pruned
Fa0 1-3,10,213,250,300

[Reuben Farrelly · Accepted solution]

The bit you missed is that Vlan 1002 is a special reserved VLAN.  You do not want to try and use this one - and I'm not at all surprised it didn't work :-)

http://etherealmind.com/cisco-ios-vlan-1002-reserved-1005-purpose-function/

[Mark Dayton]

Ah yes thanks for this, didn't realise.