Tagged only Management VLAN procedure

[duncan.webb]

Hi All,

For the Cisco CBS200 switch series.

I've been trying to have VLAN IDs 1 and 1001 on port GE1 and to use VLAN 1001 as the management VLAN, but have so far failed. This is what has been tried.

First, an untagged cable is plugged into port GE1 and a workstation into GE24

Then the IP is set to static.

VLAN ID 1001 is added

The VLAN ID for the workstation connection is set to 1001, the PVID is also set to 1001

The Management VLAN is set to 1001

The untagged cable is removed

From the workstation, connect to GE24

Port GE1 is set to General, tagged only and traffic is tagged on VLAN IDs 1 and 1001.

A tagged only cable is plugged into port GE1

After these steps, the switch cannot be pinged or accessed from any other host on the GE1 port.

Workstation1 → (1001) Switch (tagged) → (tagged) GE1-CSB200-GE24 (1001) ← Workstation2

Workstation1 cannot access the switch

Workstation2 can access the switch.

Does anyone know what I'm doing incorrectly?

Many thanks

Duncan

[Flavio Miranda]

I dont know that you are doing at all! 

If you are trying to manage the switch from your computer, follow this link:

https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-250-series-smart-switches/smb5110-configure-initial-settings-on-a-switch-using-the-getting-sta.html 

anything else can be done after that.

[duncan.webb]

Maybe I didn't explain the problem well enough.

The uplink on the switch is a tagged only VLAN trunk with VLAN IDs 1, 1001. My workstation is connected to VLAN ID 1001.

How do I configure the switch so that it can be managed on VLAN 1001?

As soon as I connect the uplink cable, the switch loses connectivity.

Thanks,
Duncan

[Flavio Miranda]

"As soon as I connect the uplink cable, the switch loses connectivity"

Connect to what?

 Tô a PC you need one port in access in the vlan 1001 and interface vlan

Int voando 1001

 Ip add 192.168.0.1 255.255.255.0

To a router you  need trunk. 

[duncan.webb]

I configure the switch using an untagged cable plugged into port ge1, to get an IP address. Set port ge1 as shown and plugged in the uplink cable. Then I can only access the switch from a workstation attached to another port.

On the Aruba 1960 switch, it was a doddle to configure the switch as I want.

[duncan.webb]

Hi all,

I'm still struggling with this problem. Here are some parts of the running configuration, and the configuration looks good to me.

!

hostname "sw26"
management vlan ip-address 10.99.0.26 mask 255.255.255.0
ip default-gateway 10.99.0.1

!

vlan 1001
name "LAN"
voice vlan id 1001
voice vlan state disabled
<snip>
management-vlan vlan 1001

!
interface gi1
switchport mode general
switchport general pvid 1001
switchport general acceptable-frame-type tagged-only
switchport general allowed vlan add 1,1001 tagged
switchport default-vlan tagged
!
interface gi2
switchport mode general
switchport general pvid 1001
switchport general acceptable-frame-type tagged-only
switchport general allowed vlan add 1,1001 tagged
switchport default-vlan tagged

<snip>

!

interface gi5
switchport mode trunk
switchport trunk native vlan 1001
switchport trunk allowed vlan remove 1-4094
!

When a cable with tagged only traffic is plugged into gi1 or gi2 the switch is no longer accessible.

When a cable with untagged traffic is plugged into gi5 then the switch is accessible.

While I was writing this a cable with tagged traffic was plugged into gi2 and the switch was accessible, plugging the same cable in to gi1 and the switch was inaccessible, plugging the cable back into gi2 the switch was still inaccessible. The switch was still inaccessible even after a reboot.

The behaviour of the switch is rather strange. Updating the firmware to the latest version and rebooting didn't help. When swapping the ports, the switch is accessible for a few seconds.

Thanks,
Duncan