2600 router + 2924 switch and vlans

Discussion in 'Cisco' started by turnip, Oct 4, 2007.

  1. turnip

    turnip Guest

    switch config:

    interface FastEthernet0/14
    !
    interface FastEthernet0/15
    !
    interface FastEthernet0/16
    switchport mode trunk
    !
    interface FastEthernet0/17
    !
    interface FastEthernet0/18
    !
    interface FastEthernet0/19
    !
    interface FastEthernet0/20
    !
    interface FastEthernet0/21
    !
    interface FastEthernet0/22
    !
    interface FastEthernet0/23
    !
    interface FastEthernet0/24
    !
    interface FastEthernet2/1
    port group 1
    switchport trunk encapsulation dot1q
    switchport trunk allowed vlan 1,2,1002-1005
    switchport mode trunk
    !
    interface FastEthernet2/2
    port group 1
    switchport trunk encapsulation dot1q
    switchport trunk allowed vlan 1,2,1002-1005
    switchport mode trunk
    !
    interface FastEthernet2/3
    !
    interface FastEthernet2/4
    !
    interface VLAN1
    ip address 192.168.0.249 255.255.255.0
    no ip directed-broadcast
    no ip route-cache


    router:

    interface FastEthernet0/14
    !
    interface FastEthernet0/15
    !
    interface FastEthernet0/16
    switchport mode trunk
    !
    interface FastEthernet0/17
    !
    interface FastEthernet0/18
    !
    interface FastEthernet0/19
    !
    interface FastEthernet0/20
    !
    interface FastEthernet0/21
    !
    interface FastEthernet0/22
    !
    interface FastEthernet0/23
    !
    interface FastEthernet0/24
    !
    interface FastEthernet2/1
    port group 1
    switchport trunk encapsulation dot1q
    switchport trunk allowed vlan 1,2,1002-1005
    switchport mode trunk
    !
    interface FastEthernet2/2
    port group 1
    switchport trunk encapsulation dot1q
    switchport trunk allowed vlan 1,2,1002-1005
    switchport mode trunk
    !
    interface FastEthernet2/3
    !
    interface FastEthernet2/4
    !
    interface VLAN1
    ip address 192.168.0.249 255.255.255.0
    no ip directed-broadcast
    no ip route-cache

    I have no access lists at all I wiped them to test weather this works.
    What am I doing wrong ?
    I need 2 vlans and this just fails and fails. I can route from a port
    assigned to the def vlan, but not from any port assigned to vlan 2
     
    turnip, Oct 4, 2007
    #1

    1. Advertisements

  2. turnip

    turnip Guest

    sorry..

    Router:

    interface FastEthernet0/0
    no ip address
    no ip mroute-cache
    duplex auto
    speed auto
    no cdp enable
    !
    interface FastEthernet0/0.1
    encapsulation dot1Q 2
    ip address 192.168.44.253 255.255.255.0
    no cdp enable
    !
    interface FastEthernet0/0.2
    encapsulation dot1Q 1 native
    ip address 192.168.0.253 255.255.255.0
    ip nat inside
    no cdp enable
     
    turnip, Oct 4, 2007
    #2

    1. Advertisements

  3. turnip

    Doug McIntyre Guest

    Have you created vlan 2 in the 'vlan database' in the CLI?
    Do you see the proper ports assigned to vlan 2 in a 'show vlan'?

    I assume you are going with the single port connecting the switch to
    the router marked as a trunk port, rather than the port channel group
    which isn't going to work with a router-on-a-stick 2600?

    Which code rev of the 2924? Some of the older ones defaulted to ISL as
    the default trunk type. Try making sure to do dot1q trunk type on your
    trunk port.
    One thing I would strongly suggest with older gear especially is
    staying away from VLAN 1 altogether. Cisco treats it special, and it
    flip/flop'd alot on the router code. This way didn't work always.
    Sometimes you needed

    interface FastEthernet0/0
    ip address 192.168.0.253 255.255.255.0

    interface FastEthernet0/0.1
    encapsulation dot1Q 2
    ip address 192.168.44.253 255.255.255.0

    to talk with the native vlan on the switch.

    Once you move into multiple VLANs, and trunking them, then switch
    everything away from VLAN 1 and the native vlan oddness that overtook
    some hardware/software revs.
     
    Doug McIntyre, Oct 5, 2007
    #3
  4. turnip

    turnip Guest

    I am not sure how to set a interface or sub interface on a 2600 as a
    trunk. All I see is a trunk-group command, Should I default that to
    1 ?

    I have tried dotq (specified it on the switch, because you were right,
    it was isl.)

    Right now, if the sub router interfaces are set to isl vlanid

    and the switch trunk port is set to
    switchport trunk encapsulation isl

    I was able to get vlan working, well it's odd.

    I have ports defined for vlan 2, the funny thing is, under isl mode I
    can get a dhcp address just not on the 44 network. I get the native
    vlan network. My dhcp server is set up for the second vlan range. Here
    is my config:

    switch:
    192_sub#sh vlan
    VLAN Name Status Ports
    ---- -------------------------------- ---------
    -------------------------------
    1 default active Fa0/2, Fa0/3, Fa0/4,
    Fa0/5,
    Fa0/6, Fa0/7, Fa0/8,
    Fa0/9,
    Fa0/10, Fa0/12,
    Fa0/13, Fa0/14,
    Fa0/15, Fa0/17,
    Fa0/18, Fa0/19,
    Fa0/20, Fa0/21,
    Fa0/22, Fa0/23,
    Fa0/24, Fa2/3, Fa2/4
    2 it-dept active Fa0/11
    1002 fddi-default active
    1003 token-ring-default active
    1004 fddinet-default active
    1005 trnet-default active

    VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode
    Trans1 Trans2
    ---- ----- ---------- ----- ------ ------ -------- ---- --------
    ------ ------
    1 enet 100001 1500 - - - - -
    1002 1003
    2 enet 100002 1500 - - - - -
    0 0
    1002 fddi 101002 1500 - - - - -
    1 1003
    1003 tr 101003 1500 1005 - - - srb
    1 1002
    1004 fdnet 101004 1500 - - 1 ibm -
    0 0
    1005 trnet 101005 1500 - - 1 ibm -
    0 0

    Current configuration:
    !
    version 12.0
    no service pad
    service timestamps debug uptime
    service timestamps log uptime
    no service password-encryption
    !
    hostname 192_sub
    !
    enable secret 5 $1$V8a5$.pOnSyDIEGBo01iFaQVZp/
    !
    !
    !
    !
    !
    !
    ip subnet-zero
    ip dhcp-server 192.168.0.111
    !
    !
    !
    interface FastEthernet0/1
    switchport mode trunk
    !
    interface FastEthernet0/2
    !
    interface FastEthernet0/3
    !
    interface FastEthernet0/4
    !
    interface FastEthernet0/5
    !
    interface FastEthernet0/6
    !
    interface FastEthernet0/7
    !
    interface FastEthernet0/8
    !
    interface FastEthernet0/9
    !
    interface FastEthernet0/10
    !
    interface FastEthernet0/11
    switchport access vlan 2
    !
    interface FastEthernet0/12
    !
    interface FastEthernet0/13
    !
    interface FastEthernet0/14
    !
    interface FastEthernet0/15
    !
    interface FastEthernet0/16
    !
    interface FastEthernet0/17
    !
    interface FastEthernet0/18
    !
    interface FastEthernet0/19
    !
    interface FastEthernet0/20
    !
    interface FastEthernet0/21
    !
    interface FastEthernet0/22
    !
    interface FastEthernet0/23
    !
    interface FastEthernet0/24
    !
    interface FastEthernet2/1
    port group 1
    switchport trunk encapsulation dot1q
    switchport trunk allowed vlan 1,2,1002-1005
    switchport mode trunk
    !
    interface FastEthernet2/2
    port group 1
    switchport trunk encapsulation dot1q
    switchport trunk allowed vlan 1,2,1002-1005
    switchport mode trunk
    !
    interface FastEthernet2/3
    !
    interface FastEthernet2/4
    !
    interface VLAN1
    ip address 192.168.0.249 255.255.255.0
    no ip directed-broadcast
    no ip route-cache
    !
    ip default-gateway 192.168.0.253
    snmp-server engineID local 00000009020000D0C0F257C0
    snmp-server community private RW
    snmp-server community public RO
    !
    line con 0

    Router:


    interface FastEthernet0/0
    no ip address
    no ip mroute-cache
    duplex auto
    speed auto
    no cdp enable
    !
    interface FastEthernet0/0.1
    encapsulation isl 2
    ip address 192.168.44.253 255.255.255.0
    no ip redirects
    no cdp enable
    !
    interface FastEthernet0/0.2
    encapsulation isl 1
    ip address 192.168.0.253 255.255.255.0
    no ip redirects
    ip nat inside
    no cdp enable
    !

    router rip
    network 10.0.0.0
    network 192.168.0.0
    network 192.168.1.0
    network 192.168.44.0


    At this point both work, however I do not get the correct address
    range appilied to me. Maybe setting an ip address on the switches 0/11
    interface will do it ?
    I dunno I am kinda lost, I followed this post
    http://www.velocityreviews.com/forums/t29496-router-on-a-stick.html

    Yes this is a router on a stick setup
     
    turnip, Oct 5, 2007
    #4
  5. turnip

    briggs Guest

    Right now, if the sub router interfaces are set to isl vlanid

    and the switch trunk port is set to
    switchport trunk encapsulation isl

    I was able to get vlan working, well it's odd.

    I have ports defined for vlan 2, the funny thing is, under isl mode I
    can get a dhcp address just not on the 44 network.[/QUOTE]

    Which switch port is the router plugged into? That's the piece of switch
    configuration that matters.

    At a guess, it's plugged in here:
    And what you really need is something very much like:

    interface FastEthernet0/11
    description Switch port facing 26xx router
    switchport trunk encap dot1q
    switchport trunk allowed vlan 1-2
    switchport trunk native vlan 1
    switchport mode trunk
    spanning-tree portfast

    And on the router something very much like:

    interface FastEthernet0/0
    description dot1q "trunk" port facing 2924 switch

    interface FastEthernet0/0.1
    encapsulation dot1q 1 native
    ip address 192.168.0.253 255.255.255.0
    !
    interface FastEthernet0/0.2
    encapsulation dot1q 2
    ip address 192.168.44.253 255.255.255.0
    What does this mean, "I get the native vlan network"?

    You plug a workstation into vlan 2 on the switch and get an address
    allocation from the 192.168.0.x DHCP scope?

    That would indicate that you have VLAN 1 cross-connected with VLAN2
    somewhere.
     
    briggs, Oct 5, 2007
    #5
  6. turnip

    turnip Guest

    Which switch port is the router plugged into? That's the piece of switch
    configuration that matters.

    At a guess, it's plugged in here:
    And what you really need is something very much like:

    interface FastEthernet0/11
    description Switch port facing 26xx router
    switchport trunk encap dot1q
    switchport trunk allowed vlan 1-2
    switchport trunk native vlan 1
    switchport mode trunk
    spanning-tree portfast

    And on the router something very much like:

    interface FastEthernet0/0
    description dot1q "trunk" port facing 2924 switch

    interface FastEthernet0/0.1
    encapsulation dot1q 1 native
    ip address 192.168.0.253 255.255.255.0
    !
    interface FastEthernet0/0.2
    encapsulation dot1q 2
    ip address 192.168.44.253 255.255.255.0
    What does this mean, "I get the native vlan network"?

    You plug a workstation into vlan 2 on the switch and get an address
    allocation from the 192.168.0.x DHCP scope?

    That would indicate that you have VLAN 1 cross-connected with VLAN2
    somewhere.[/QUOTE]

    You are correct on your assessment of my config. Everything is working
    as I wanted it to now. Thank you all very much for the help <3
     
    turnip, Oct 5, 2007
    #6
  7. turnip

    turnip Guest

     
    turnip, Oct 6, 2007
    #7
  8. turnip

    turnip Guest

    Also

    192_sub#sh vtp status
    VTP Version : 2
    Configuration Revision : 0
    Maximum VLANs supported locally : 254
    Number of existing VLANs : 7
    VTP Operating Mode : Transparent
    VTP Domain Name :
    VTP Pruning Mode : Disabled
    VTP V2 Mode : Disabled
    VTP Traps Generation : Disabled
    MD5 digest : 0x9A 0x9D 0x04 0xAE 0xB3 0x4E 0x4D
    0x25
    Configuration last modified by 192.168.0.249 at 3-1-93 04:07:21


    192_sub#sh interfaces fastEthernet 0/1 switchport
    Name: Fa0/1
    Switchport: Enabled
    Administrative mode: trunk
    Operational Mode: trunk
    Administrative Trunking Encapsulation: dot1q
    Operational Trunking Encapsulation: dot1q
    Negotiation of Trunking: Disabled
    Access Mode VLAN: 0 ((Inactive))
    Trunking Native Mode VLAN: 1 (default)
    Trunking VLANs Enabled: ALL
    Trunking VLANs Active: 1-3
    Pruning VLANs Enabled: 3-1001

    Priority for untagged frames: 0
    Override vlan tag priority: FALSE
    Voice VLAN: none
    Appliance trust: none
    Self Loopback: No
    192_sub#
     
    turnip, Oct 6, 2007
    #8
  9. turnip

    turnip Guest

    I should also add that 2/1 and 2/2 are trunked into an identical
    switch.
     
    turnip, Oct 6, 2007
    #9

    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.
Similar Threads

  1. 2924 VLANs and SNMP

  2. How to configure VLANs on 2924

  3. Question about VLANs on 2924

  4. setup VLAN trunking between 2924 switch and 2611 router

  5. Windows - Browsing across vlans and also DC's on separate vlans

  6. how to set up switch, PIX and router using VLANs

  7. 2924 + vlans

  8. PWR-2600-AC 2600 power supply to switch over a DC router?

Loading...