You are probaly right. This problem occured in my config environment, using a very basic router.   The switch will be deployed in the customer environment on thursday, connected to a true router.   I hope this will solve the issue. ... View more

Hi,   Thanks for the answer.   There is Static routing defined in the NAT router : - Destination 192.168.10.0 - Gateway 10.0.10.2 - Interface LAN - Destination 192.168.1.0 - Gateway 10.0.10.2 - Interface LAN   And from behind the NAT, I can access VLAN 1 and VLAN 10 (even 2 hops behind).     ... View more

I did a full reset this morning. I applied the same configuration and... it works now !! ... View more

Yes, they are Windows PC, and they can ping each-other when they are connected in VLAN1.   I added the route in the router : Destination 192.168.20.0 /24 - Gtw 192.168.1.2   The router itself can ping the SG350 VLAN20 interface 192.168.20.1. But, it cannot ping the PC in VLAN20... Tracert show the (ping to VLAN20 PC) is routed to 192.168.1.2 (SG350) but... no further.     ... View more

The route has been added, as suggested. From VLAN1, the packets are routed to the SG350, and then dropped.   Test : - Source of the tracert : PC 192.168.1.182 - Destination of the tracert : PC 192.168.20.101 - Hops :   * 192.168.1.1 (router)   * 192.168.1.2 (SG350)   * then, nothing, no internal routing in the SG350     My old SG300 switches can do that !! The interVLAN routing is automatic !  Even without any router. ... View more

Hi,   Thanks for the answser.   The switch itself is a L3 !  It must do the routing (if not, what does L3 mean) ?   Event with the router disconnected, there is no inter-vlan routing. From a PC in one VLAN, I cnnot ping a PC in the other VLAN (but I can ping the interface in the other VLAN).       ... View more

Hi, Thanks for the answer.     Slightly better, but not yet perfect.   Configuration is now : : - Firmware 1.4.8.6 (latest) - L3 enabled - VLAN 1 : 10.0.10.0/24 (switch IP : 10.0.10.2) - VLAN 10 : 10.10100.0/24  (switch IP : 10.10.10.2) - Internet access : 10.0.10.1 (with VLAN 1) - Defaut gateway (IP 0.0.0.0 - Prefix 0 - Remote type - Next hop 10.0.10.1 - Metric 1)       When connecting a PC in VLAN 1 : no problem to access the Internet. When connecting a PC in VLAN 10 - Access (using 10.10.10.2 as gateway) : - I can ping  10.0.10.1 - I cannot ping 8.8.8.8, route is stopped at 10.0.10.1 !!!   Running-config is : config-file-header CD3-SG300-52-01 v1.4.8.6 / R800_NIK_1_4_202_008 CLI v1.0 set system mode router file SSD indicator encrypted @ ssd-control-start ssd config ssd file passphrase control unrestricted no ssd file integrity control ssd-control-end cb0a3fdb1f3a1af4e4430033719968c0 ! port jumbo-frame vlan database vlan 10 exit voice vlan oui-table add 0001e3 Siemens_AG_phone________ voice vlan oui-table add 00036b Cisco_phone_____________ voice vlan oui-table add 00096e Avaya___________________ voice vlan oui-table add 000fe2 H3C_Aolynk______________ voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone voice vlan oui-table add 00d01e Pingtel_phone___________ voice vlan oui-table add 00e075 Polycom/Veritel_phone___ voice vlan oui-table add 00e0bb 3Com_phone______________ loopback-detection enable errdisable recovery cause loopback-detection no boot host auto-config no boot host auto-update bonjour interface range vlan 1 hostname SG300-52-01 line console exec-timeout 30 exit line ssh exec-timeout 30 exit line telnet exec-timeout 30 exit aaa authentication login authorization Console local aaa authentication enable authorization Console enable line console login authentication Console enable authentication Console password da39a3ee5e6b4b0d3255bfef95601890afd80709 encrypted exit no passwords complexity enable passwords aging 0 username cisco password encrypted 7af78c911d5b48bea1dc2449d9d89513abeb4be5 privilege 15 username admin-user password encrypted 181ef0bb04eecafb58201f556fa886f13a5693a0 privilege 15 ip ssh server snmp-server server snmp-server location "" snmp-server contact "" snmp-server community public ro view Default ip http timeout-policy 1800 no ip http server clock timezone BXL +1 clock summer-time web recurring eu clock source sntp sntp unicast client enable sntp unicast client poll sntp server 0.be.pool.ntp.org sntp server 1.be.pool.ntp.org sntp server 2.be.pool.ntp.org sntp server 3.be.pool.ntp.org ip name-server 10.0.10.31 8.8.8.8 8.8.4.4 ! interface vlan 1 ip address 10.0.10.2 255.255.255.0 no ip address dhcp no ipv6 address autoconfig no ipv6 enable no ipv6 dhcp client stateless ! interface vlan 10 name "VLAN Public" ip address 10.10.10.2 255.255.255.0 ! interface gigabitethernet48 switchport mode access switchport access vlan 10 ! exit ip default-gateway 10.0.10.1         ... View more

I'm the vendor... And I'm trying to provide a working solution to my customer. ... View more

No other workaround at this time (if we need to use some VLAN on the AP)... But I need a controller, as another AP need to be connected in the same network/building. And it seems the workaround is not working... even with the switch configured in Access (on default VLAN 1), the AP does not reboot. ... View more

I received news from the Cisco support : at this time, there is no Firmware solving this bug... Is there any workaround allowinf to work with VLAN (and having the ability to restart the AP without configuring the switch to Access and then Trunk) ? ... View more

No, I don't have smartnet support... How can I contact support to solve this known bug ? ... View more

Hi Ric, thanks for your answer. Current SW is 8.2.141.0 Yes, I'm aware of that bug, it describes accurately my problem. However : - Will the SW 8.3.2.130 solver the bug ? - How can I download the new SW (access denied) ? ... View more