Cisco Switches :: SG-300-10 And Sonic Wall TZ210 VLAN
Apr 29, 2013
Have a Sonicwall with multiple VLANS on LAN interface going to the SG-300 in Layer 3 mode.Trunk Port has VLAN 1 untagged and PVID and other VLANS (20,30,40) tagged.Setting a port to Access for particular VLAN (40) does not pull DHCP from Sonicwall.Sonicwall support says DHCP request is coming from VLAN1 and something wrong in switch setup.Setting 2 ports to VLAN 40 allows communication between the two.Also, replacing SG300 with a Netgear L2 works.Seems like an issue with the trunk, no?
I'm decommissioning my SonicWall PRO 3060 and upgrading to an ASA5550 (we're increasing our WAN link speed to 1Gig and need the 5550). In any case, I want to copy over the configuration from the PRO to the ASA. I have everything documented and I've started doing the changeover, but in looking at some other network diagrams on the net I'm seeing router symbols between the LAN switches and the ASA and I'm beginning to worry that I might need routers to do this which, of course, would increase cost quite a bit.
So my question is this: If I have a core switch carved into multiple VLANs and I connect each VLAN to a port on the ASA, will I be able to route and filter traffic from VLAN to VLAN through the ASA? If so how, in general, is this accomplished (I'm betting ACLs). I think that the ASA will be able to do this easily, but I just want to be sure before I get too far into the configuration of this unit,.
I have a side gig that I do some work for and they've had a Sonicwall TZ200 device in their branch office and also in their data center that has a site to site VPN connection between the two devices. About a month ago the bandwidth throughput got severly decreased. They went from getting about 28Mbps/27Mbps to now ~3Mbps/12Mbps.
I've spent days troubleshooting with Sonicwall which could be a whole dedicated thread on it's own but I digress. I even had the ISP come out and test the line and when they hooked up their own laptop it got the speeds it should be getting. I've rebuilt the config on the sonicwall from scratch which was a major pain in the ass because I'm not a firewall guy by any means. After firmware updates and pulling my hair out I've decided to dump the tz200, to what I don't know. I need two devices, one for the data center and one for the branch office. I'm pretty sure something in the config is causing this and after being escalated to the highest level at sonicwall and them sending me a replacement unit which I rebuilt the config on and also tried to import the old settings with no luck. I very well could have done something or made a change to cause this but I'm at a loss and willing to try another product.
I get spammed from Barracuda all the time, do they have quality devices? Something with a web interface would be great since I'm not a firewall guru by any means and had set up a bunch of address objects with NATs and all that.
I haven't worked with Cisco devices before (yepp, another one of those) but I am getting there. I have replaced my silly Draytek router now with a Cisco877 and it works perfectly fine. But the whole networking side of things such as NAT / ROUTE / ACLs is a BIT black magic.
Basically my problem is that I cannot get proper traffic through the tunnel
From any station behind the Cisco (Site2) I can ping the local IP of the Sonic, but none of the other stations. From behind the Sonic I can ping any station behind the Cisco but unable to connect on any port (RDP for example)
Bear in mind that a lot of settings are from forums, google and the sorts because as I mentioned, before I got this one I have limited experience with Cisco .. Everything configured is working fine, the internet connection, the incoming pptp VPN to the Cisco etc., just not the IPSec VPN.
It's been awhile since work has thrown me a curve ball so I was about due. We've got a client that wants us to log into their secure portal, this is normally not a issue. The link they sent us to their 'portal' apparently takes us to the wrong page. Their solution to this is for us to create a DNS entry to resolve that URL to a specific IP address. We don't currently have a DNS server setup in house so I assumed this would be something done on the Sonicwall.
I asked them why I couldn't just go to the IP address instead of the URL anyway and they said it wouldn't work. Is this something that I can maybe create a NAT Policy for and have it redirect traffic to there? I know the SonicWall has a DNS tab but I've never touched it and I'm not sure what I would need to put in there anyway.
I found this article a few nights ago reading in bed. Pretty interesting on what's happening in this world for identity theft, credit card theft and may other things.
Is any one else looking at this type of solution ? for home or personal ?I've attached the 2 scanned documents.I'm thinking about trying this with Pfsence & my TZ210 see how it all works out with NON split tunnelled VPN.
We are trying to config vlan 10 for data and vlan 20 for voice on the same port - port 1 of swtich SF300-24P to run both data and voice on different vlans.Do I have to add vlan 10 as an untagged vlan to port 1 and add vlan 20 as an tagged vlan to port 1?If I do not want to assign the native vlan 1 to port 1, how can I remove it ? The GUI page - assign VLAN to port does not allow to remove it.Aslo, what mode shall I set up on port 1? General, trunk or access ?
I have a Netgear GSM7248R switch with 5 different Vlans including th management Vlan. Each of the vlans are connected to my layer 3 switch for routing. I want to access the management vlan form any of my Vlans so my layer two switch can be detected by my snmp manager.
I have some problem in my small network.I have 2 SF-300 48 port switches and connected to 847 router for intervlan routing. I configure 7 vlan in SW1 and uplink to SW2 with trunkport.
The problem is that if i used default gateway for users ip address of interface (vlan interface) is ok. I bring two adsl modem and connected to vlan1 and vlan2 for internet access. When i connected this two modem vlan 1 and vlan 2 are not going to access other vlan 3,4,5,6,7 and wise versa.
vlan1 users getting default gateway from adsl modem ip, how i can permit this two vlan should to access other vlan 3,4,5,6,7 and 3,4,5,6,7 should access to internet also.
now we have 2 switches: SF300-24..on one SF300-24 we config it at layer 3 mode with VLAN configuration same as following [code] And we use port 26 on 2 switches SF300-24 is trunk mode then we connect both SF300-24 switches.But on SF300-24 layer 2 cann't inderstand VLAN from Sf300-24 layer 3..How to config VLAN on 2 switches SF300-24 Layer 3 and SF300-24 layer 2?
Any snmpset commands to add, modify and delete vlan table entries on SG300-10 switches? I checked url... however this information is apparently only valid for catalysts. The latest firmware is installed and the provided MIB files are used.
I'm trying to establish a vpn tunnel with a sonic firewall. We've checked both ends for differences and they are the same. PFS has been disabled on both ends. I'm seeing this in the logs.
%ASA-3-713119: Group = x.x.x.x, IP = x.x.x.x, PHASE 1 COMPLETED %ASA-5-713068: Group = x.x.x.x, IP = x.x.x.x, Received non-routine Notify message: No proposal chosen (14)
I'm trying to setup following scenario which is working with no issue on netgear switches (like GS108) but I have not been able to get it to work on Cisco SG-200 I did quite a bit of reading here on many post but nothing seems to work.
For test I used 2 Switch that name "ESW X" and "ESW Y" I have 2 network that I named "Network A" and "Network B" I build 2 VLAN for each network that named Vlan 2 for Network A and Vlan 3 for Network B, I don't use Vlan 1 because it's the default Vlan
Configuration ESW X: port e1 : ACCESS PORT on UNTTAGGED Vlan 2 port e2 : ACCESS PORT on UNTTAGGED Vlan 2 port e3 : ACCESS PORT on UNTTAGGED Vlan 3 port e4 : ACCESS PORT on UNTTAGGED Vlan 3 port g3 : TRUNK PORT with UNTTAGGED Vlan 1(default) and TAGGED Vlan 2 and Vlan 3
[code]....
Each Vlan can't communicate between the two switch, I think they're a problem in my vlan/port configuration?
I need create vlans in Cisco SF 300-24 Switch.Ports 1 to 6 are available for other ports (from 7 to 24).For examples: port 7 is available for ports from 1 to 6 but is not available for ports from 8 to 24,port 8 is available for ports from 1 to 6 but is not available for ports from 9 to 24 and 7, port 9 is available for ports from 1 to 6 but is not available for ports from 10 to 24 and 7 and 8,.....(to port 24).
I bought for a little office a SA520 Security appliance (for future VPN with another distant office) and a SG 300-10P switch for connect 3 PC and 3 IP PHONE. THe SA 520 is the router. I must configure 2 VLANs on the switch :
VLAN2 : DATA (for PC) VLAN3 : VOICE (for IP PHONE) VLAN1 : DEFAULT.
How can i simply configure all ports ? I would like to configure ports 1-4 on VLAN2 and ports 5-8 on VLAN3 and port G10 is reserved for the router SA520. I want to divise network DATA/VOICE.
I think i must create a trunk on G10 for SA520 ...
I'm adding it to an existing infastructure, with multiple VLANs. I believe I have it set up correctly, however whenever I daisy-chain the switch in with the trunk ports, it's not passing the VLAN info correctly. There's not a lot of configuguration involved, so I'm not quite sure where I might be going wrong. I've attached a couple screenshots that show my trunk port configuration.
we have two Catalyst Express 500 switches and a ESW 520 just purchased. the VLAN on the other two is 2. how do I change the Default to be 2 instead of 100 in the ESW Switch.
I have been trying to setup vlans on a SG300-28p but they are not working. This is my setup: I want Switch1 to have ports 1-10 to access the DMZ, and 11-24 the LAN. Then i wan to add switch2-4 to extend the access to LAN.
i tested with cisco 2960 switches by just telling what ports whould have access to DMZ and LAN but the small business switches are different..
I want to set up a vlan only for the wifi APs and wifi clients on my network. They can't access to any server, only internet acces. I already implement this configuration and its working, but now I want to allowed a couple of laptops to connect to servers in other vlan. what should I do? Should I do it using Mac address of laptops or IP?
I need some assistance in setting up VLAN's (802.1Q) accross two switchs, I want the same 2 vlan's on both switchs, how do i configure them to be connected and pass both vlan's traffic.VLANs from firewall are tagged at 3 and 8.Single port out from the firewall.The first switch is simple enough, port is connect at port 52 and configured from both vlan's then the individual ports are either on one or the other. The question is how do i connect the second switch so that it can also do both vlans. Assume I connect switch1 at port 51 to switch 2 port 52. Do I configure both ports to be on the same VLAN's. or do i setup LAG's.
On our HP switches we have an 'Outside' VLAN where any device connected to these VLAN ports can use the ISP's 'outside' IP addressing for direct Internet access to bypass our firewall. We use this for videoconferencing devices.What is the correct way to do this on a Cisco SF-300-48P??Presently I have ports 1-4 in vlan 50 Outside as 'untagged,' and the same ports as 'forbidden' in vlan 1 Default. Is this the correct configuration?? In HP switches these ports in vlan 1 Default would be configured 'No' and 'untagged' in vlan 50 Outside.Tried talking to Cisco but their phone support is not working.
I am currently tasked with setting up a network, pretty much from scratch, that requires some fairly hefty VLAN deployment. My hardware on hand (already existed so can't can't change anything easily) 5x ESW-540-48 Switches, 1x3750g switch, 1x2811 router. I don't believe the router should be required as the 3750 is capable of intervlan routing. [code]
Now at one point I actually had the VLAN's *working* in that I could specify an IP address and could ping to and from it! However DHCP wasn't passing despite numerous attempts with DHCP relay and IP-Helper configurations.Also I was having issues with VLAN 1 as the native VLAN, the ESW switches don't allow you to do much with them, as they 'weren't created by the user'. So tried switching that out to VLAN11 also but with very little success there (I had to change the native vlan on all trunks to VLAN 11)All the 10.x.x.x addresses need to be able to communicate with each other.All the ESW switches need to be able to handle their respective VLAN's as well as VLAN 1 (for Printers and wireless access points distributed around the building).
I am using a couple cisco sg300 28P switches along with a sonciwall firewall/router. The sonicwall was already in place and working so they didnt want to replace it. I understand how to configure the vlan on the sonicwall, but could use some info on the cisco. I would basically like to create 3 vlans, 1 default for management, 2 for pc's on lan, and 3 for the cisco spa504g phones/'voip. Would i just go into the vlan managment, configure the 2 new vlans and give them two id's? These offices have one network drop, so the phones and pc's will be sharing the switch ports, however the phones have a setting to configure the vlan id so they know which one theyre on. Is there anything i need to do after that? I want to make sure that vlan 3 has the highest priority becuase its voice, is there some qos configurations i need to make on that switch as well? Also, the port that links the two cisco swtiches together, does that need to be set as "trunk" port? I understand what vlans are, but its just the first time ive run into these cisco models. .
I have a 2620 Cisco Router plugged into a 2924 Cisco switch by a trunk.The vlan configuration works, I subdivide my router interface with dot1q and have virtual machines on different vlans and everything works perfectly.The problem comes with a DHCP request.Let's say that I have my local lan on the native VLAN 1. I create a VLAN 25 in the switch and create a fa0/0.25 in the router.In the switch, I plug the cable modem from my ISP in a port on vlan 25In the router, I go to fa0/0.25 and issue "ip address dhcp".The DHCP request goes out, but never comes back. The problem seems to be in the switch because if I try the same thing with a virtual machine I have on a trunked VMWare ESXi server, I get the exact same results. I just don't get the IP address from the ISP.The next step would be to monitor the port on which the cable modem is connected and sniff the packets to see if the DHCP request actually gets back through.
Before I launch into this can I say that I am very much a novice with regards to Managed Switches and their configuration. I have the following equipment which I have connected to the switch: [code] All of the above are on subnet 255.255.255.0.All of the above communicate with each other during normal operation.Our client is connecting to the switch but his requirement is for his system to "see" the PLC Comms Card as follows:IP: 10.0.3.61 on Subnet 255.255.252.0 .
Using the Internet Explorer interface connection I have created an additional VLAN (ID 2) on Port 10 with the intention of using this as the connection to the client ( I assume there will be further settings required to route the PLC connection to this port) but every time I try to assign the IP and Subnet values and click "APPLY" the changes are not made and the connection appears to hang leading me to reboot the switch.I have connected to the switch via console and changed the mode to Layer 3. I also assume that it is OK for the three pieces of equipment to remain on the default VLAN. How I should setup this VLAN and ultimately achieve my goal.
I am facing an issue to setup what I initially called simple network but still unable to put it together.On SG300-20 I want to setup 4.3 of the vlan are to separate users in to different groups and to secure data confidentiality.1 is for the NAS. All users on the 3 vlans must access the NAS vlan.All user should have access to internet via SG300 through the ISP provided router. How to configure this, I have every little knowledge of switching and routing? And the routing seems to be the issue I am encountering because I am able to create the VLANs and assign static IP address to them but not able to get them talk to each other. I use each vlan ip as gateway on each port assigned. [code]
I want to use Multicast TV VLAN with my SG300-10 to join Multicast Groups in different Data VLAN's. It's working fine, but the problem is that it isn't possible to add all the Multicast Groups to the Multicast VLAN because each TV channel use other groups. For me it's only to handle if I can use wildcards to add a specific range of multicast traffic to the Multicast TV VLAN. Is that possible with that Switch?
In my network I got 3 SF300 24 p switches. I managed vlan 10 for data and it is also a native vlan and vlan 20 for voice ,1st switch is the core switch and im having a problem in connecting them ?
I am primarely enquiring whether the setup I have explained below is actually possible, and if so then how I can set this up. I know it isn't the easiest configuration and I need to set this up without purchasing any more equipment if at all possible.I have a Cisco SG 300-28 setup with three VLAN's. [code] Default Gateway is 192.168.10.1 (Netgear Router)I have a Wireless network setup (Netgear WMS and 2 WAP's) configured with the TWO VLAN's (1 and 3). These go into ports on the Cisco SG 300-28 which are tagged on both VLAN's. The Business wireless worked fine but the guest network didn't reout out to the internet.After some troubleshooting I realised the reason the guest wasn't working was because there was no route back from the internet to the router.
The router I have isn't really ideal, it is a Netgear DGN2200, but I managed to create a static route to 192.168.30.1 with a metric of 2, with 192,168,10.254 being the hop. Success, the connection worked, the only problem is that now my guest network can see my business network because the business network is using the static route on my router to route back over to the guest network (due to the limitations of this device I can't do anything about that)Guest network can connect to Business VLAN via switch. I am assuming this is because the router is on the Business VLAN and the default gateway is the router. As they are on the same network the Guest network can inevetably see the business server and network.The Business network can get back to the Guest network via the router using my static route I created. The static route is really basic and I can't create a firewall rule on the router to prevent the Business network speaking to guest network because it only has a LAN - WAN firewall and this connection is LAN - LAN.
What I need is...to somehow stop any traffic from the 192.168.30.0 network routing to anything on the 192.168.10.0 network, appart from the router on 192.168.10.1.Is this possible? I have this setup on a number of different site, the only difference is I have a CIsco Security Router on these with the VLAN's configured so I don't have this problem. Because I have a rather limited Netgear DGN2200 I am unable to setup the VLAN's correctly and as such I need to see if I can do this on the switch in any way.
I have configured 2 Vlans on the network. 1 - native Untagged for data traffic and 100 Tagged for VoIP.I have 4 SGE2010p switches 2- of them in stack working in L3 mode and 2 connected to the stack via single ethernet links in L2 mode.I have IP phones with trunked ports -Vlan100 tagged and 1 untagged. I have set CoS 5 for Voice Vlan 100 on the phones and CoS 5 to queue 3 mapping (in basic mode) on all switches.But it seems to not work at all.Should I use Advanced QoS mode?Where Can I find some QoS configuration example for Voice Vlan on SGE2010p switches?
