01-30-2018 09:42 AM - edited 03-08-2019 01:37 PM
I have a core switch and Wifi Switch where Access Points are connected to Wifi Switch. This is how it has been configured.
Wifi VLAN 20
LAN - VLAN1
Port 27 Core - 1U, 20 T (Mode - Trunk Port)
Port 21 Core - 20 U ( Access Port)
Port 1 WIFI - 1U, 20T (Mode - Trunk Port)
Port 8 Wifi (APs ports) - 20U (Access Port)
Port 27 is connected to Firewall which handles all the routing.
Port 1 Wifi is connected to Port 21 on the Core
Port 8 on the Wifi is connected to Unifi AP
This is how it has been setup by someone. After the power failure it is now breaking the wifi network.
If I change the Wifi Port 1 to 20U, it picks up the Wifi network but I can not access the management network from the the LAN network. I need to plug the laptop on the Wifi Switch and manually enter the LAN network to access the Wifi GUI
These are Cisco SG300-28 switches.
As I am new, I am wondering what wrong with this setup.
Please let me know if you need more details.
01-31-2018 01:18 AM
Hi,
I am not sure I fully understand your setup. Can you please try to change your Port 21 Core to the Trunk port with the settings as 1U, 20T and see the result.
Best regards,
Antonin
01-31-2018 06:07 AM
01-31-2018 09:14 AM
Hi,
Thanks for the reply. Which Vlan is your management network? What is the port configuration at the WjFi switch you are connecting your laptop to.
Thanks & Regards,
Antonin
01-31-2018 04:21 PM
02-01-2018 09:19 AM
Hi,
Thanks for the update.
Firstly to answer your questinon. My view is that your switches are set at Layer 2 mode as you have mentioned the firewall routing (can you please confirm) and also there are no ACL configured (please check at the Access Control tab). You have not answered my question as for the WiFi switch port assignment you have connected your laptop to. In my view it may be set up as 20U Access - can you please let me know and also your current setting of Port 1 of this WiFi switch is changed to 20U - can you please confirm. If so than in my opinion you may be actually crossing the Vlan boundaries and your firewall rules may apply.
In my strong belief the only way to propagate both Vlans form the Core to WiFi (and back) via only one connection is to configure both ports (ie. port 1 WiFi and port 21 Core) same way as trunk with 1U, 20T. Have you really tried this configuration? Is there any other connection between the Core and WiFi? If not the suggested configuration should NOT be breaking the WiFi network. As for the management Vlan (Vlan 1) can you please check that your WiFi IP is from the Vlan 1 assignment - btw. is it assigned via DHCP? I hope your server is also within Vlan1 (at the Core switch perhaps).
Best regards,
Antonin
02-01-2018 11:28 AM
02-01-2018 01:39 PM - edited 02-01-2018 01:42 PM
Hi,
Thanks for the information supplied. Are you saying that the only CURRENT connection between Core and WiFi switches is via Port 21 of the Core and Port 14 of the WiFi with both settings as 20U? If so then Vlan 20 ONLY gets propagated between switches and that is why you cannot reach WiFi switch mgmt IP from the server connected at Core Vlan 1 and also your APs do not get their IP addresses from the Vlan 1 range.
What prevents you from configuring both Core Port 21 and WiFi (current) Port 14 as trunk (1U,20T) as I have suggested?
Perhaps I am missing something basic from your setup. Would it be feasible for you to post the configuration of both switches (with any sensitive information deleted)?
Best regards,
Antonin
02-03-2018 12:11 PM
02-03-2018 01:10 PM
Hello
Instead of writing down the port connection would it be possible of posting a topology diagram which will allow us to view your current setup and gain a better understanding of the problem?
res
Paul
02-04-2018 01:31 PM
Hi,
Thanks for the reply. Port 27 configuration (trunk: 1U,20T) which connect to the FW makes sense and in my view it is OK. After making configuration changes you do not need to restart the switches. However when you reach the final configuration please do not forget to save.
Will you please let me know the result. Good luck!
Best regards,
Antonin
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide