i have a question about the proper method to setup up vlan(s) on a sg200 switch with a sv220w router. Should i setup the vlan on the router or the switch? I have small office setup, i need atleast 2 vlans to separate the networks. i want both to have internet access but be completely isolated from each other.
View 5 RepliesWe recently purchsed a SG200-26 and have several SPA303 with the 2 ports. The other component is a Sonicwall NSA3500.The SG200-26 is on an interface of the Sonicwall that interface has a primary of 172.20.3.x and the sub interface is 172.20.5.x. I labed the VLAN as 5?I went to the "Create VLAN" in the SG200-26 and also created VLAN 5 and under Voice VLAN the ID is 5.Then I went to the SmartPort and assigned GE24 as IP Phone + Desktop. That was OK. But when I go to the SPA303 and Enable VLAN and VLAN ID 5 I get Initializing Network. I am able to ping the 172.20.5.1 which is the gateway for the VLAN but still pull no IP. I also have an DHCP range assinged the subinterface.I also am using Cisco Configuration Assistant. I can see the switch SG200-26 and my IP set but it shows no IP. So I know that the CDP from the phone to the switch is working.
View 2 Replies View Relateddoes SG200 support VLAN Trunking?
View 1 Replies View RelatedBelow is my configuration so far.
GE1 General 1UP, 100T, 101T
GE26 General 1UP, 100U, 101U
But I could not get port GE1 on vlan 100 to ping to anything on GE26.It only works when i change it to 100UP... BUT the rest of the vlan ID (101) will still unable to work.
Yes. i need multiple vlan on a single port as I am running Virtual machines on the GE1 and GE26 is an uplink I need all vlan to communicate from GE1 to GE26. Is this possible?
I get a empty blue window when I try to open "port to VLAN"
We have upgraded the software but it doesn't work.
I start writing this post telling you that I'm not a qualified network admin, so I beg your pardon if I do not use appropriate terms in my question. Also my english in not so good since I'm Italian and my english in almost scholastic.
This is the "story" :
I bought two switches as described above and actually I have to create 2 VLANS as described below :
VLAN id 2 name "Service_A" ports 1-4
VLAN id 3 name "Service_B" ports 7-9
all other ports can stay in default VLAN1.
my network infrastructure have some other very simple swtiches connected and 1 soho router (static ip 192.168.1.1) with dhcp active and ip pool address released from 192.168.1.100 to 200.
the SG200-26 have static ip 192.168.1.254 and 192.168.1.253
MY NEEDS:
I need VLAN for privacy matter so all computer connected to ports in VLAN2 cannot see nor enumerate PCs and resources on other VLANs, but I also absolutely NEED that all computer in every ports (and every VLAN even default VLAN1) can access the internet.
My organization wishes to host a LAN gaming event. The setup I have in mind involves a 24-port switch for connecting all the player computers and having that switch connected to a smaller "core" switch which has the the game server and router connected to it. I'd like to know if I can set things up as follows...
SG200-26 with ports 1-24 on seperate VLANs so they cannot talk to eachother. I'd then like ports 25 and 26 to be an aggregated (for bandwidth and redundancy) trunk port to carry all 24 VLANs plus an additional management VLAN (ex. VLAN 100) that will be used for accessing the switch. I'd like those aggregated trunk ports to connect to an SG300-10 "core" switch which will be connected to the game server and to a router for internet access.
I'd like the ability to have two network connections from the game server to the switch, one on the management VLAN and one on a different VLAN (ex. VLAN 50) that will be accessed by the players (ports 1-24 on the SG200-26). The core switch needs the ability to perform restricted inter-VLAN routing, in that it doesn't allow VLANs 1-24 to talk to eachother but they can talk to the server's VLAN but only through specific service ports (ex. port 12345, 12346). Is this possible?
Furthermore how would I configure the SG300-10 to allow VLANs 1-24 to talk to VLAN 50, but not themselves or VLAN 100. As well, I'll probably have the router on it's own VLAN (ex. VLAN 60) and allow VLANs 1-24 to access it but only through HTTP port 80 for web access.
I have a Synology 1512+ and trying to setup Link Aggregation but no success. I have configured LAG Management with LACP enable or disable but still failed.
At the Synology 1512+ setting page, there are 2 options: IEEE 802.3ad Dynamic Link Aggregation and Network Fault Tolerance (Non-802.3ad network enirovement), I selected IEEE802.3ad, which i think S200-18 should be able to support. right?
I am new to VLANs although I generally understand the concept. I have a small office with 25 desktop/laptops and 15 VoIP phones connected with a SG200-50 switch and on Port 1 I have the Cisco SRP541W router for DHCP and Internet access. My goal is simple: 1) Segregate the VoIP phones (voice) from the computers (data) and 2) Prioritize the VoIP phones traffic.
I believe this can be accomplished by setting up a second VLAN and maybe a third (if the default should not be used) and then identifying those ports as Voice VLAN ports. I guess I just need to know how to flag each interface and each port so that they all can talk to the router on Port 1 yet the voice and data will be in different broadcast domains. Also, do I need a management VLAN??
Is this setup correct? VLAN 1 - default (data) Port 1 (Trunk) (Tagged)Port 2 - 30 (Access) (Untagged)VLAN 2 - voice Port 1 (Trunk) (Tagged)Port 31 - 48 (Access) (Untagged) What should the interface settings be on each port (General, Access or Trunk)? What should the port VLAN membership be on each port (Tagged or Untagged)??
I have a customer with several SG300's providing VLAN1 for data and VLAN10 for voice. The PC's are piggy backing off the phones and showing up in the SG300 fine:
One department has recently employed more people so we have an SG200 switch to connect the computers and phones to. I don't seem to be able to get any connectivity between the new switch and the SG300 it is connecting to. I have setup VLAN1 and 10 as per the images below:
SG200-08 and SG200-08P fail to hold or update Date/Time.(New installation for a UC320 setup.)I've got both an SG200-08 and SG200-08P that are failing to maintain date/time when set with "Use Local Settings". Every restart/powercycle causes them to reset to Dec 31 1969. Other settings save fine.I first tried to set time via SNTP Unicast using a variety of public time server addresses including the 3 hard coded to the SG200-08 firmware:
Sadly though it always just shows "Active Server Server Host Address: 0.0.0.0" and continues having 12/31/1969 as the date. Both after a config save and a reboot.I can ping the NTP servers just fine from the switches either by IP or by hostname.At this point I've decided that I must be missing something simple. At least I hope so... otherwise it's a firmware bug which means waiting for a fix.Other devices behind the same firewall/gateway (RVS4000) are updating NTP
how to connect our new SG200-18 to an existing Cisco network, in particular a C2960S.Here's what I've got:
<----- Rest of network ------- C2960S ----------- SG200 ----- (PC connected directly to the SG200)
On the C2960S-side here's what I've got on the corresponding interface:
interface GigabitEthernet1/0/1
switchport mode trunk
On the SG200-side I've set the IP-address and default-gateway accordingly, however:From the SG200 I can't ping any other host on the same IP-subnet as the switchFrom the SG200 can't ping the default-gatewaycan't ping from any other host or the default-gateway *to* the switch But:On the SG200 I've got plenty of MAC-addresses under "Dynamic Address Table" - however only MAC-addresses that belong to the management-VLAN of the SG200 (i.e. VLAN9 in my case)The MAC-address table on the SG200 even includes the MAC-addresses of hosts on the same VLAN I tried to ping without success. For example: I tried a PING from a host having a MAC-address of 00:19:bb:31:91:30. This MAC shows up in the arp table of the SG200. To cross check I connected a dedicated PC to the SG200 and assign it an IP-address out of the management-LAN-range of the SG200 - in this case I can access the switch (i.e. PING, WEB etc.)So to summarize: Connectivity is OK when going from directly connected devices to the SG200. No connectivity from devices that are behind the C2960S towards the SG200 and vice versa. (The problem is definitely not with the C2960S-side since we've got plenty of them hooked together without problems.) I'm enclosing the screenshots of the corresponding definitions on the SG200.
I'm baffled by the poor performance that I'm seeing when passing traffic between my two Cisco SG switches.
The configuration is as basic as I can make it, no VLANs, QoS or bonding. Both have been updated to current firmware as part of the troubleshooting process.
When I transfer data within one of my switches I see 50/60Mb/s. When I pass the same traffic between both switches I see 0.6 Mbs/ or less.
I have tried to eliminate every possible factor including switching out the cables. No success.
I'm currently trying to set up a Cisco RV220W router on our company's network to act as a network router and firewall, but I'm a little bit stuck.
The topology I want to achieve is as follows:
[WAN] --> [VDSL modem from ISP] --> [Cisco RV220W] --> [LAN]
Our LAN should have 2 VLANs; one for our servers and clients belonging to the company (servers are on public IPs, while clients have LAN IPs), and one for guest users (visitors and other outsiders who are given Internet access from us).
Our current network setup works just fine, using a bridged firewall server between the VDSL modem and the network switch (where all the other servers are connected), and internal users are routed through either a WLAN router or another server. The RV220W will replace the WLAN router as well as the routing and firewall servers, combining these tasks into one.
The target network setup would have three "zones";the servers (using IPs 213.x.x.0/26, static assignments, no DHCP), local LAN for employees (cable, WLAN or VPN with PPTP - using IPs 192.168.15.x/24 assigned by DHCP, compatible with the existing setup), and local LAN for visitors/guests (WLAN only, using IPs 192.168.0.x/24 assigned by DHCP).
From the RV220W's admin interface itself, I'm able to ping outside IP addresses, but neither the test server on the public IP or the test client on the local IP seems to be able to ping the outside, or eachother (ie. from the client's local IP to the server's public IP).
The Rv220W is already in router mode (ie. not in NAT mode), and the LAN ports are properly tagged for each network segment.
I'm trying to setup following scenario which is working with no issue on netgear switches (like GS108) but I have not been able to get it to work on Cisco SG-200 I did quite a bit of reading here on many post but nothing seems to work.
View 6 Replies View RelatedI have the following setup using two SF302-08P PoE switches:
1st floor
=========
Switch #1 <-------> private network
<-------> public network
[Code].....
I have tried to make the config in switch #2 identical to switch #1, but something is still wrong. Is this most likely a VLAN setup problem, or what?
I would like to create 3 x VLANs on an SG 300-28P and have them completely isolated from each other, for example ports 1 - 12 on VLAN 1, ports 13 - 24 on VLAN 2 and ports 25 - 28 on VLAN 3. No communication between any of the VLANs.
Any simplest way to achieve this?
We've never had to do this before: best practice on setting up an additional subnet on a physical network?
For example, main network is 10.1.1.1, we need to setup an additional 10.1.2.1 to support more devices. We need both subnets to see each other and the servers on 10.1.1.1. We also need the new subnet to have access to the internet.Equipment we have: HP 2824's (2 current VLAN's - second one is for phones) and Untangle for our firewall.
I have a 2911 router connected to a 3750 switch. I have configured vlan interfaces on the 2911 router:I am using the vlan 89 (89.2) as the management ip address for me to remotely get to the switch. Is this a proper configuration or could this cause issues in the future.
View 4 Replies View RelatedI'm new to managed networking. So I'm having trouble understanding how to set up my switches properly. I have a closed network with about 20 switches and 2 IDF's. No router, and no internet. I have a SLM 2024 in want to have 4 ports set up with a VLAN. I have another SLM2024 I want to be on the same VLAN some where else. Switch 1 uses port 24 GBIC as and up link port to one of the IDF's. Switch 2 uses ports 12 and 24 copper(LACP) to make a hop from another switch(ports 1 and 13 LACP)which inturn is connected to the same IDF on port 24 GBIC. How do I set up switch 1 ports 7,8,19,20? Also, how do I set up switch 2 ports 7,8,19,20? VLAN 11
View 1 Replies View RelatedI have a dell powerconnect 2848 switch and setting up a vlan 3 an make port 1 mngt, port 48 uplink to layer 3 switch and tag vlan 1 and 3 to port 48 with cli commands for this setup. and also to untag ports 2-10 for computers
View 1 Replies View RelatedRegion : China
Model : TL-WR741ND
Hardware Version : V4
Firmware Version :
ISP :
My router box and the router itself are listed as 741N. I find no reference in the forums or on the website to this model. During setup, I can ping the router from the cmd prompt, but then it fails during the Easy-Setup assistant. I need to use the Easy setup because the language is otherwise Chinese, but it fails the network test. One of the two messages it sends are "Check the Model number". Is this a possibility? Is there a work around or where can I find the proper Setup Assistant software?
I have a Dell switch setup with 2 Vlan's. Vlan 1 is to the network. Vlan 20 is going to be for wireless access to the internet. How do I configure the switch/router so that Vlan 20 only connects to the internet and not the network? I will later want to have a 2nd SSID that I want to connect to both the internet and network.
View 5 Replies View RelatedOur company lost a switch and replaced it with a SF300-24. The other components are a Westell modem and an Amped Wireless R10000G router.
The current configuration has the Westell DLS modem going into the R10000G router, the router is the DHCP server and from there it is plugged into port 1 of the switch (DHCP is off on the switch).
So the problem is the computers on the network randomly drop off the network during the day and sometimes upon booting them up in the morning won't even see the local network. If I unplug the R10000G and then plug back in that fix's the problem for a few hours but then sooner or later the computers randomly drop off.
There is one network printer set to a static IP address. It never seems to have an issue. I have tried setting some of the computers to static but they still have connection issues at some point.
We have a project in which we are using 34 Cisco SG200-18's each with a MGBLX1 (LC Single Mode Fiber) SFP mini-GBIC.All the fiber's come back to one building where we must "bridge" all 34 fiber connections. What hardware should be used to accomplish this? A L2 switch? For example, a 12 port SFP Switch with Fiber SFP's accepting the first 12 fiber connections, then other switch with SFP for the next 12 and so on, until there is a overall capacity of 36 and having patch cables between the 3 switches?
what cisco or non cisco hardware would work with these SF200-18's to accomplish this?
We are replacing some netgear switches with the Cisco SG200. The situation is relatively straightforward. We have a series of VLAN's coming in on a trunk from a service provider for our Metro Ethernet locations. These trunks then get cross-connect to various location for connectivity. The problem we have is there are two VLAN's that need to go to the same switch which provides access to our public IP block.
I set up the two VLAN's on the SG200 with the trunk port VLAN tagging on the service provider port. Then I set up a separate port for untagging the traffic with the PVID of the respective VLANS's as follows: [code] The public switch has no VLAN's configured (it is an SG200 too). If I connect GE2 to the public switch everything works fine. When I connect GE3 to the public switch, things die. I thought this might be caused by STP although STP should not be detecting issues like this across separate VLAN's. Disabled STP, no change.The same configuration with the Netgear worked without an issue. FYI, the VLAN's cannot be changed...they are defined by the service provider in this particular case. otherwise we'd just make them the same..
I need to purchase a few Gigabit PoE switches for a small business and I am thinking that SG200 or SG300 switches are perfect for this purpose.
Layer 3 functionality in SG300 switches is not great - HSRP or any other next-hop redundancy protocol is not supported, dynamic routing protocols are not supported, policy-based routing is not supported, etc. I may get one SG300 switch for inter-VLAN routing so that I do not have to send traffic to a Layer 3 device for this purpose, especially because my Layer 3 device (ASA5505) has only 10/100 Mbps interfaces. All other switches in the network don't have to be Layer 3 switches, and I am thinking of perhaps getting SG200 instead of SG300 swithces. However, because I am a long-time Cisco engineer, and know ins and outs of the IOS CLI, I would much rather administer the switches with CLI rather than GUI. So, do SG200 switches provide CLI (even if it is not officially supported) or is the only Small Business switch platform that supports CLI SG300? I do realize that the OS running on these switches is not IOS, but after having reviewed the CLI manual for SG300, I would say that 90+% of commands are identical to IOS CLI commands.
I just picked up a pair of 18-port SG200s, and I'm trying to figure out of there's some secret trick to getting CLI access to them? I've upgraded to the latest version of firmware (1.2.7.76) hoping that may work, but no luck.I can tell the guts to support a CLI are there, because writing the config out to a TFTP server shows identical an identical config style to the SG500 I have here.Is there some way to enable it?
View 5 Replies View RelatedI am trying to set up three vlans across two switches. The switches are Cisco SG200 and SG 300 series. There are 20 devices connected to the two switches including a router for Internet. Among these devices are five wireless access points all hardwired to the LAN. If I understand correctly the first thing I have to do is aggregate the two switches. I ran two cat5 cables to ports 1 and 2 of each switch. As I understand it all I need to do is to create SAG with the two ports on each switch. I think I need to use tagging but I don't really understand how to do this. Once I get the trunking set up correctly I want to create one vlan to which all devices will belong for Internet access. The other two would be for data and VoIP. Do I create vlans with the same name on both switches? When I assign the devices (by port) do I need to enable tagging? Which type of port setting should I use? I am assuming that by including the acess points in the vlans will mean that any wireless device connected to them will have acess to the Internet and the devices in the same vlan.
View 1 Replies View RelatedAs per the title, I just require 3 to 4 VLANS with inter-VLAN communication enabled.
In the past I have used this router with each port of the internal switch set to a different VLAN, with each in turn hooked up to an unmanaged switch. This has work fine for me but I want to dip my toe in the world of .1q VLANS and gain some added flexibility and neatness.
I was given a task of creating a vlan and isolating one pc to access an internal website (192.168.90.15) on a specific port (port 8080)The pc is connected in the following manner:
PC--> HP Switch --> Cisco Small Business SG200 switch --> 3550 Catalyst 1, 3550 Catalyst 2 and 3550 Catalyst 3.
I have created a vlan 110 on the Main 3550 Catalyst switch and successfully added the pc to that vlan.However, that PC must be able to access the internet and an internal website on port 8080.I have placed an access-list on the main 3550 catalyst switch which is connected to our router as below:
Client ip address: 192.168.100.2
VLAN 110: 192.168.100.3
access-list 110 permit tcp host 192.168.100.2 host 192.168.90.15 eq 8080access-list 110 permit icmp host 192.168.100.2 anyaccess-list 110 deny ip 192.168.100.0 0.0.0.255 ? I was unable to access the webserver even after many attempts.
I have a Cisco SG200 26 Port Switch, 2 Cisco WAP4410N Access points, and a VLAN aware Router. I have created 4 VLAN's. For the sake of this conversation lets call them.
98 - Intel Vpro
99 - Management
100 - General
101 - Guest
The Access points are capable of doing V LAN tagging so I plan on having them tag a guest network as V LAN 101. That can get sent to the V LAN aware router and out. No problem. I have some devices, or management pages that I don't want accessible from the general network. (Intel V pro KVM, Remote Management Cards, AP Config Menus, Switch config menu...) . I need to be able to take a V LAN unaware device, plug it into port 1, and have it communicate with V LAN 98, 99 and 100.
How to setup a port channel between a SG200 and 3750 and am having problems.
What do I need to do on the SG200 I have added the port into the lag but the port will not come up.
I spent half a day messing arround with the web interface and I am unable to get the port to come up.
The Cisco 3750 is a standard port channel config which I have setup maytime before. channel-group 1 mode active channel- protocl lacp Switchport mode trunk