SG 300 not reaching other VLANs...

[netguyz08]

I've got an SG 300-20 in layer 3 mode, with 2 VLANs. The switch is the main gateway for the network and its default gateway is an ASA 5510 that has a route back the VLAN2 IP on the switch.

I can ping an IP that is on VLAN 2. All ports are in trunk mode. So when I add a computer with a 192.168.5.x address, it won't reach it and realize that is VLAN2.

Here is the config:

v1.3.0.59 / R750_NIK_1_3_647_260
CLI v1.0
set system mode router

file SSD indicator encrypted
@
ssd-control-start
ssd config
ssd file passphrase control unrestricted
no ssd file integrity control
ssd-control-end cb0a3fdb1f3a1af4e4430033719968c0
!
vlan database
vlan 2
exit
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
ip dhcp snooping
no ip dhcp snooping verify
ip dhcp snooping information option allowed-untrusted
ip dhcp relay address 192.168.1.20
ip dhcp relay enable
ip dhcp information option
bonjour mode include
bonjour interface range vlan 1
hostname SG300-20-Core
username cisco password encrypted c485b3e930376b231a04e6056e47596ee576880e privilege 15
ip ssh server
ip telnet server
!

interface vlan 1

ip address 192.168.1.1 255.255.255.0

no ip address dhcp

!

interface vlan 2

name VOICE

ip address 192.168.2.1 255.255.255.0

!

interface gigabitethernet2

ip dhcp relay enable

switchport trunk allowed vlan add 2

!

exit

ip default-gateway 192.168.1.2

[paul driver]

Hello

"So when I add a computer with a 192.168.5.x address, it won't reach it and realize that is VLAN2"

The new computer needs to be in the same ip ranges defined on the L3 switch - either

192.168.1.0/24 or 192.168.2.0/24 and the switchport it is attached to requires being assigned to either vlan 1 or 2

res

Paul

Please don't forget to rate any posts that have been helpful.

Thanks.

[netguyz08]

Sorry Paul, typo. I meant to say I was putting in an IP address of 192.168.2.x on the device.

But you are saying rather than trunk mode, set it to a particular VLAN? Ultimately VLAN 2 will be for VOIP phones going in which is why I am testing both subnets to be accessible. And this SG 300 is being used as the core switch as well as the gateway, for the network.

-Ed

[netguyz08]

Ending up reaching out to Small Business Support, and the gentleman was very helpful.

In summary, any endpoint device connecting to the SG 300 had to be an access port (instead of a trunk port) and have VLAN 2 set on it, untagged.

The explanation was that when a packet leaves the port towards the PC, the VLAN tag will be removed. That is why we need to untag the VLAN on the access port.

Any ports for routers/firewalls or switches needed to remain configured in trunk mode.

-Ed

[paul driver]

Hello

Glad it is working now - as stated previously, the new computer requires to be connected to an access port and defined a vlan.

FYI -

Access ports carry traffic for that specific vlan.

Trunks ports carry traffic for all vlans allowed on that trunk interface ( used mostly for connection of other switches)

res

Paul

Please don't forget to rate any posts that have been helpful.

Thanks.