SF300 Switch - Access or Trunk port ?

[francois.dominati]

Hi,

I'am moving from level 2 to level 3. We have 3 site and in each one, we will have to VLAN : one for data (VLAN ID 10) and one for TEL (VLAN ID 20).

I know that some ports have to be in TRUNK MODE with the two VLAN (those linked to the isp router for example).

But, for example, for one telephone, should I put it in a trunk port with only VLAN 20 or in an access VLAN ?

I thouhgt it was the access one, but am wondering because :

1 - The switch documentation says :

"Access—The interface is an untagged member of a single VLAN. A port configured in this mode is known as an access port."

2 - I can t define an VLAN on the Interface Setting of an access port

3 - But I can define an administrative VLAN for an acess port on the Port VLAN Membership page

I am a little confused here...

Thanks for your help

[Reza Sharifi]

Hi,

I am not familiar with SF300 switches and configuration but if you are only connecting a phone to a port (vlan 20), that port should be configured as an access port.

HTH

[francois.dominati]

Ok can you explain why you'cant define a vlan to an interface setting but you can join a vlan on the port ? What's the difference ? thks

[Reza Sharifi]

Maybe because I am familiar with the SF300 switches, but am not sure what you mean by "interface setting".  With other platforms like the Catalyst switches, you create a vlan and than assign ports to it. If the same device is routing between vlans, than you need to create an SVI per vlan with the associated IP segment.

example

vlan

10

interface GigabitEthernet1/0/7
switchport access vlan 10
switchport mode access

interface GigabitEthernet1/0/10
switchport access vlan 10
switchport mode access

and so on..

For routing between vlans you need and SVI

example:

Interface vlan 10

ip address 10.10.10.1 255.255.255.0

Is that what you are asking?

HTH

[francois.dominati]

Sorry I wasn't clear..

First I have to set the port either access or trunk (or General or private) in the interface setting menu. There I can set a Administrative PVID only for trunk.
Then I have a menu Port Vlan membership where I can assign VID to my ports.

I was wondering, what is administrative pvid for, it seems to be "This is the VLAN that untagged frames are classified as."
And what is the difference betweeken an access port on vlan 10 and a trunk port with only one port membership assigned, the 10 one.

[Reza Sharifi]

I was wondering, what is administrative pvid for.

Here is a post about administrative pvid and how to configure it.

https://supportforums.cisco.com/t5/small-business-switches/cisco-sg300-28-vlan-issues/td-p/1625555

And what is the difference betweeken an access port on vlan 10 and a trunk port with only one port membership assigned, the 10 one

An access port sends untagged frames and it is configured with the example I provided.

A trunk port sends tagged frames and it is used when you configure multiple vlans on the same port (e.g vlan 10, 20, 30. etc). For this to work, both sides of the connection have to be configured as trunk with proper vlans added.

HTH