Solved: Cisco SG350x - Data and Voice vlan issue

Dave_22 · ‎10-10-2019

Hello everyone,

I am stuck with the scenario below and would be grateful if anyone could provide me with a solution:

The company am working with has 2 departments: X Corporation and Y Services

Y Services has been newly created and works in parallel with X Corporation

We currently have Cisco IP Phones which will connect to the the Cisco SG350x and behind each phone we will have a laptop

Voice vlan50 needs to communicate via trunk link to VOIP router within X Corporation

Vlan 10 and 20 in turn need to communicate with the firewall to lease IP addresses from the latter

Following test configuration applied (only for Vlan 10 and 50) but still KO:

Port 1: -> Only Phone works but laptop is unable to receive an IP address from the firewall

interface GigabitEthernet1/0/1

description Test_Admin_Zone

ip dhcp relay enable

switchport mode trunk

switchport trunk native vlan 10

no macro auto smartport

!

Trunk ports:

Trunk data

interface GigabitEthernet1/0/47

switchport mode trunk

switchport trunk allowed vlan remove 2-9,11-4094

no macro auto smartport

!

Trunk - Voice

interface GigabitEthernet1/0/48

switchport mode trunk

switchport trunk allowed vlan remove 2-49,51-4094

no macro auto smartport

Please Help!!!!!!!!!!!!

Deepak Kumar · ‎10-11-2019

Hi,

Check a few more things:

1. Are you working with the Cisco IP Phone? If Yes, then must enable the CDP protocol?

2. If you are working on another Vendor phone then you must enable LLDP Protocol on global configuration mode.

Now, I am looking at your port configuration which is not correct:

interface GigabitEthernet1/0/27
switchport mode trunk
switchport trunk allowed vlan 50
switchport trunk native vlan 10

Regards,
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!

View solution in original post

Deepak Kumar · ‎10-11-2019

Hi,

Configure your switch like as:

voice vlan id 50

!

interface fastethernet11
spanning-tree portfast

switchport trunk native VLAN 10
switchport trunk allowed VLAN add 10,50

Regards,
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!

Dave_22 · ‎10-11-2019

Dear Deepak,

Kindly note that the suggested configurations do not work in my case

Whereas the below configuration is working but I have to statically configure the IP address on test laptopn in vlan10:

!

voice vlan id 50

!

interface GigabitEthernet1/0/1
description Test_Admin_Zone
spanning-tree portfast
switchport mode general
switchport general allowed vlan add 10 tagged
switchport general allowed vlan add 1,50 untagged
no macro auto smartport
!

#### New trunk Port for Voice ####
interface GigabitEthernet1/0/27
spanning-tree link-type point-to-point
switchport mode trunk
switchport trunk allowed vlan remove 2-49,51-4094
no macro auto smartport
!

#### Trunk for Data in Vlan 10 ####
interface GigabitEthernet1/0/47
switchport mode trunk
switchport trunk allowed vlan remove 2-9,10-4094
no macro auto smartport

Do you have an idea why I do not receive an IP automatically through the DHCP Server?

Thanking you in advance

Regards

Deepak Kumar · ‎10-11-2019

Hi,

Check a few more things:

1. Are you working with the Cisco IP Phone? If Yes, then must enable the CDP protocol?

2. If you are working on another Vendor phone then you must enable LLDP Protocol on global configuration mode.

Now, I am looking at your port configuration which is not correct:

interface GigabitEthernet1/0/27
switchport mode trunk
switchport trunk allowed vlan 50
switchport trunk native vlan 10

Regards,
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!

Dave_22 · ‎10-14-2019

Dear Deepak,

Thank you so much

The configurations are working and laptop able to pull IP Address from the firewall

Warm Regards

paul driver · ‎10-11-2019

Hello
Do you obtain dhcp allocation if you just attach the laptop to the switchport without the voip device.
Where is your dhcp server! What device is performing inter- vlan routing?
You may need to apply a dhcp relay on your L3 vlan interfaces if your dhcp server resides off you lan!

Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

Georg Pauwen · ‎10-11-2019

Hello,

try and change the access port configuration to:

interface GigabitEthernet1/0/1
description Test_Admin_Zone
switchport mode trunk
switchport trunk native vlan 10
switchport trunk allowed vlan add 50
spanning-tree portfast

Dave_22 · ‎10-11-2019

Dear Georg,

Kindly read through my response to Deepak

If you could provide your help on the DHCP issue

Thanking you in advance

Regards

paul driver · ‎10-14-2019

@pdriver wrote

Do you obtain dhcp allocation if you just attach the laptop to the switchport without the voip device.
Where is your dhcp server! What device is performing inter- vlan routing?
You may need to apply a dhcp relay on your L3 vlan interfaces if your dhcp server resides off you lan!

Could you please answer the above questions, it will assist in the troubleshooting of your issue.

Also on a side note, I notice you have spanning-tree portfast suggested to be applied to your trunks port, if you do require a trunk port to go straight into a forwarding state without going through the stp process then in the current form it will not work, on a trunk you need to apply spanning-tree portfast trunk but this isn't recommended to do this unless your certain that port isn't capable of causing any issues like introducing a loop, trunk portfast is usually applied to trunkports interconnecting servers that support trunking themselves and have more than one network card installed

Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

Dave_22 · ‎10-14-2019

Hello Paul,

I did not obtain an IP Address when the Cisco IP Phone is bypassed (with or without the IP Phone, issue remained the same)

My dhcp server's job is being performed by the connected interfaces of the firewall

Working configurations are:

Vlan 10

interface GigabitEthernet1/0/1
description Test_Admin_Zone
spanning-tree portfast
switchport mode trunk
switchport trunk native vlan 10
no macro auto smartport
!
!
interface GigabitEthernet1/0/47
switchport mode trunk
switchport trunk native vlan 10
switchport trunk allowed vlan remove 2-9,11-4094
no macro auto smartport

#########################################################

Vlan 20

interface GigabitEthernet1/0/2
description Test_User_Zone
spanning-tree portfast
switchport mode trunk
switchport trunk native vlan 20
no macro auto smartport
!
!
interface GigabitEthernet1/0/48
switchport mode trunk
switchport trunk native vlan 20
switchport trunk allowed vlan remove 2-19,21-4094
no macro auto smartport

With above configurations, PCs in both vlan 10 & 20 were able to fetch IP Address from the firewall with IP Phones working correctly and fetching IP Address from the VOIP Router.

Thank you for the trunk port configurations

All working good now :)