Multiple VLANs on single port for SG350X Switches

[cbcav]

Hello!

I want to setup multiple VLANs on single ports on two of my switches. I am doing this to separate our Staff / Guest internet access. I'm not sure if I set this up properly, but here is my setup:

• DHCP / VLANs setup through Meraki Firewall: VLAN1- Staff Wired/Wireless (172.30.0.0/21) VLAN10- Guest WiFi (172.30.8.0/24). Port 9 to SW1 is set to Trunk and to allow all traffic.
• Ruckus ZoneDirector for WAPs- SSIDs- Staff WiFi (VLAN 1) and Guest WiFi (VLAN 10)
• SW1- XG2 (From Meraki) set to Trunk
  • GE1 (to SW2) set to trunk
    • VLAN1 set to tagged
    • VLAN10 set to tagged
• SW1- GE10-GE18 (WAPs)
  • VLAN1 set to tagged
  • VLAN10 set to tagged
• SW2- XG2 (From GE1 on SW1) set to trunk
• SW2- GE 40-48 (WAPs)
  • VLAN1 set to tagged
  • VLAN10 set to tagged

[Giuseppe Larosa · Accepted solution]

Hello @cbcav ,

the proposed setup looks like correct there is only one aspect to investigate:

check the native VLAN default settings on the devices in most cases it is i VLAN1 and it is expected untagged.

in an 8021.Q a single VLAN can travel untagged and this is by default for most vendors VLAN 1.

Hope to help

Giuseppe

[cbcav]

Thank you for the reply! VLAN1 is the default one on both switches, should I change VLAN1 to untagged for both? Also, I just found an article from Cisco's site, and the 'advanced mode' showed has a 'general' option for the VLANs. Would that be more ideal over trunk? 

[balaji.bandi]

Always suggest to have native VLAN both the side same when you configuring trunk.

[cbcav]

So I'm stumped. On SW1 I am able to get both VLANs to work, but on SW2 I get APIPA, here is what I have setup:

SW1

• VLAN 1- All ports untagged
• VLAN 10
• GE7 Tagged (Goes to SW2)
• WAPs Tagged (Both subnets working great)
• XG2 Tagged (From Meraki)

SW2 First Attempt:

• VLAN 1
• WAPS tagged 
• All other untagged
• VLAN 10
• WAPs untagged (Staff subnet works, Guest APIPA)
• XG2 tagged (from SW1)

SW2 Attempt 2:

• VLAN 1
• All ports untagged
• VLAN 10
• WAPs tagged (Staff subnet works, Guest APIPA)
• XG2 tagged (from SW1)