02-17-2009 08:34 AM - edited 07-03-2021 05:11 PM
Hi,
I have two 1310G bridges, one configured as a Root the other as Non Root. The root is attached to a 3560 switch. I have configured VLAN 15 (Management) and VLAN 573 (Client) on the 3560. The Root and Non Root bridges have the same VLANS, and VLAN 15 is configues as the Native VLAN.
I can ping on both VLANS (10.4.0.x = VLAN 15 and 192.168.0.x = VLAN 573)separately from the switch or laptops. As soon as I trunk the VLANS across the 3560, I cannot ping to either IP. What am I doing wrong?
I'm running software Version 12.4(10b)JDA2 on both Root and Non Root.
Here are the respective configs:
JRGRE_ROOT#
---------------------------------------------
dot11 vlan-name JRGRE_TBI vlan 573
dot11 vlan-name MANAGEMENT_VLAN vlan 15
!
dot11 ssid JRG_RE_573
vlan 573
authentication open
authentication key-management wpa version 2
wpa-psk ascii 7 xxxxxxxxxxxxxxxxxxxxxx
!
dot11 ssid MANAGEMENT
vlan 15
authentication open
authentication key-management wpa version 2
infrastructure-ssid
wpa-psk ascii 7 xxxxxxxxxxxxxxxxxxxx
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 15 mode ciphers aes-ccm
!
encryption vlan 573 mode ciphers aes-ccm
!
ssid JRG_RE_573
!
ssid MANAGEMENT
station-role root bridge
!
interface Dot11Radio0.15
encapsulation dot1Q 15 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.573
encapsulation dot1Q 573
no ip route-cache
bridge-group 255
bridge-group 255 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
!
interface FastEthernet0.15
encapsulation dot1Q 15 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
!
interface FastEthernet0.573
encapsulation dot1Q 573
no ip route-cache
bridge-group 255
bridge-group 255 spanning-disabled
!
interface BVI1
ip address 10.4.0.104 255.255.0.0
no ip route-cache
JRGRE_NROOT#
--------------------------------------------
dot11 vlan-name JRGRE_TBI vlan 573
dot11 vlan-name MANAGEMENT_VLAN vlan 15
dot11 ssid JRG_RE_573
vlan 573
authentication open
authentication key-management wpa version 2
wpa-psk ascii 7 xxxxxxxxxxxxxxxxxxxxxx
!
dot11 ssid MANAGEMENT
vlan 15
authentication open
authentication key-management wpa version 2
infrastructure-ssid
wpa-psk ascii 7 xxxxxxxxxxxxxxxxxxxxx
interface Dot11Radio0
no ip address
no ip route-cache
!
ssid JRG_RE_573
!
ssid MANAGEMENT
!
station-role non-root bridge
!
interface Dot11Radio0.15
encapsulation dot1Q 15 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.573
encapsulation dot1Q 573
no ip route-cache
bridge-group 255
bridge-group 255 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
!
interface FastEthernet0.15
encapsulation dot1Q 15 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
!
interface FastEthernet0.573
encapsulation dot1Q 573
no ip route-cache
bridge-group 255
bridge-group 255 spanning-disabled
!
interface BVI1
ip address 10.4.0.105 255.255.0.0
no ip route-cache
My 3560 Switch config:
Switch3560_01#sh run int fa0/1
Building configuration...
--------------------------------------
interface FastEthernet0/1
Description Trunk connection to Root Bridge
switchport trunk encapsulation dot1q
switchport trunk native vlan 15
switchport trunk allowed vlan 15,573
switchport mode trunk
speed 100
duplex full
priority-queue out
no cdp enable
spanning-tree portfast
spanning-tree bpdufilter enable
end
10-16-2009 08:11 AM
Hi Ajax,
Switch 3560 port:
interface FastEthernet0/7
description Connection to AP ROOT
switchport trunk encapsulation dot1q
switchport trunk native vlan 15
switchport trunk allowed vlan 15,192
switchport mode trunk
load-interval 30
speed 100
duplex full
priority-queue out
random-detect
no cdp enable
spanning-tree portfast trunk
spanning-tree bpdufilter enable
end
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide