Video conference device connected on switch is intermediately facing RTO?

[vasanth77]

Hi ,

We've Video conference device which is flapping when i connect to a port configured for both data and voice VLAN. But when I configure the port to only data access VLAN it is working properly without drop.

When port is configured in both data and voice VLAN the Video conference device is flappin between voice and data VLAN

can anybody tell me why this is happening or what is the issue. now it is working with data VLAN properly but I need to know why it is not working on both data and voice vlan configuration.

FYI

VC MAC address and IP address e4d7.2264.7736 -10.91.167.147

SWitch-7#show mac address-table interface fastEthernet 0/38
Mac Address Table
-------------------------------------------

Vlan Mac Address Type Ports
---- ----------- -------- -----
181 e4c7.2264.7736 STATIC Fa0/38
Total Mac Addresses for this criterion: 1
SWitch-7#config
Configuring from terminal, memory, or network [terminal]?
Enter configuration commands, one per line. End with CNTL/Z.

SWitch-7(config)#inter

SWitch-7(config)#interface fas

SWitch-7(config)#exit

SWitch-7#show mac address-table interface fastEthernet 0/38
Mac Address Table
-------------------------------------------

Vlan Mac Address Type Ports
---- ----------- -------- -----
167 e4c7.2264.7736 STATIC Fa0/38

Total Mac Addresses for this criterion: 1

With this configuration port is flapping between VLAN 167 & VLAN 181 as captured above

interface FastEthernet0/38
description --- User access port
switchport access vlan 167
switchport mode access
switchport voice vlan 181
switchport port-security maximum 5
switchport port-security
switchport port-security aging time 1
switchport port-security violation restrict
switchport port-security aging type inactivity
srr-queue bandwidth share 1 30 35 5
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
spanning-tree portfast
service-policy input AUTOQOS-SRND4-CISCOPHONE-POLICY
ip dhcp snooping limit rate 100

the below configuration is working fine with video conference without any drop
when ping the IP of VC device

interface FastEthernet0/38
description --- User access port
switchport access vlan 167
switchport mode access
spanning-tree portfast

any quick response will help me
Thanks in advance

Regards,
vasanth

[Georg Pauwen]

Hello Vasanth,

what switch is this on ? I am just asking because on the (a lot) older switches you must configure a trunk.

Can you post the output of 'show version' ?

[vasanth77]

Hi Georg,

FYI

Switch-7#show version
Cisco IOS Software, C2960 Software (C2960-LANBASEK9-M), Version 15.0(2)SE4, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Wed 26-Jun-13 02:49 by prod_rel_team

ROM: Bootstrap program is C2960 boot loader
BOOTLDR: C2960 Boot Loader (C2960-HBOOT-M) Version 12.2(46r)SE2, RELEASE SOFTWARE (fc1)

Switch-7 uptime is 14 weeks, 6 days, 19 hours, 13 minutes
System returned to ROM by power-on
System restarted at 17:07:27 UTC Fri Nov 25 2016
System image file is "flash:/c2960-lanbasek9-mz.150-2.SE4.bin"

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco WS-C2960-48PST-L (PowerPC405) processor (revision D0) with 65536K bytes of memory.
Processor board ID FOC1426W496
Last reset from power-on
2 Virtual Ethernet interfaces
48 FastEthernet interfaces
4 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.

64K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address : D0:57:4C:82:BB:00
Motherboard assembly number : 73-11882-08
Power supply part number : 341-0266-03
Motherboard serial number : FOC14261CRN
Power supply serial number : DCA1424H4UD
Model revision number : D0
Motherboard revision number : A0
Model number : WS-C2960-48PST-L
System serial number : FOC1426W496
Top Assembly Part Number : 800-30874-04
Top Assembly Revision Number : B0
Version ID : V03
CLEI Code Number : COMC400ARA
Hardware Board Revision Number : 0x01

Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 52 WS-C2960-48PST-L 15.0(2)SE4 C2960-LANBASEK9-M

Configuration register is 0xF

What is the require configuration from switch side if it supports VC device on new device

IS that trunk or an data access VLAN is enough?

why it is not working on the data VLAN and Voice VLAN configured on same port?

Thanks for your quick response

Vasanth

[Georg Pauwen]

Hello,

what happens when you add 'switchport voice vlan dot1p' and/or 'switchport priority extend trust' to your interface configuration:

interface FastEthernet0/38
description --- User access port
switchport access vlan 167
switchport mode access
switchport voice vlan 181
switchport voice vlan dot1p
and/or
switchport priority extend trust
switchport port-security maximum 5
switchport port-security
switchport port-security aging time 1
switchport port-security violation restrict
switchport port-security aging type inactivity
srr-queue bandwidth share 1 30 35 5
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
spanning-tree portfast
service-policy input AUTOQOS-SRND4-CISCOPHONE-POLICY
ip dhcp snooping limit rate 10

[vasanth77]

Hi Georg,

Thank you. Below the configuration I applied again with voice VLAN configuration and now the device is reachable without RTO. but I need to  check this with other ports with voice VLAN configured without configuring switchport priority extend trust configuration . I will confirm after 

interface FastEthernet0/37
description --- VC device
switchport access vlan 167
switchport mode access
switchport voice vlan 181
switchport priority extend trust
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
spanning-tree portfast
service-policy input AUTOQOS-SRND4-CISCOPHONE-POLICY
end