For you internet only VLANs, I would take the SVI off them and trunk them down the line to your internet gateway. Add subinterfaces with with SVI IPs. Basically you will have an internet only DMZ. Depending on what your internet gateway looks like (Router, Firewall, etc), you can then add DHCP services to allow from the Internet Only DMZ to the DHCP server (though the internal interface of the internet gateway device).
... View more
For you internet only VLANs, I would take the SVI off them and trunk them down the line to your internet gateway. Add subinterfaces with with SVI IPs. Basically you will have an internet only DMZ. Depending on what your internet gateway looks like (Router, Firewall, etc), you can then add DHCP services to allow from the Internet Only DMZ to the DHCP server (though the internal interface of the internet gateway device).
... View more
I am not having any trouble with the trunks. They are passing traffic just fine. I am having a problem with certain ports or runs of CAT6 on the 2960s switches having layer 1 and layer 2. When the arp table is queried from the core switches, there is an entry on the IP but the MAC address field shows as INCOMPLETE. For example: I will have 2 APs connected to Interface g 2/0/4 and 2/0/6 of the first stack. Also there will be a workstation plugged into g 2/0/5. The APs will pass traffic fine and the arp table at the core will show the MAC address. However, when we go to the workstation it will not get traffic to the core. On inspection of the arp table in the core switches we find INCOMPLETE under the MAC field. Once we plug the workstation into a different patch that connects it to g 2/0/10 it connects and the arp table shows the MAC in the core switch. This has happened only two times and I would like to hear why this might be happening. In that scenario, we are using the same fiber pair between all devices for the trunk to the core switch.
... View more
We just finished wiring a building and turning up new switches on our campus. I have been running into issues where the wire run has caused an interesting issue. This building is set up with two stacks of two 2960s switches (one stack with two ws-2960s-48fpd-l another stack with one 48fpd-l and the other ws-2960-24pd-l). They have one SVI that comes back to our two Nexus 7K switches over single mode fiber. When the problem is happening on certain runs inside the building, I can see the mac in the mac address-table of the local switch. When I do a show ip arp at the core switches both have a mac address listing of INCOMPLETE. When we change the physical wire running to the local switch in the building the problem is fixed. How are we getting a layer 1 up and up interface and a layer two MAC at the local switch, but we aren't getting an arp binding at the core switches?
... View more