Routers / Switches :: Setting Up A VLAN -GE-DSS-244 Layer 2 + Switch?
Mar 22, 2011
I am migrating an a group of workstations that run a fire system from one software to another. The current workstations run the following info:123.123.123.xxx 255.255.255.0The new workstations run:100.100.100.xxx 255.255.255.0There is a central switch location using a GE-DSG-244 Layer 2+ Managed switch. There are two remote location using GE-DS-82 Managed Switches.The two networks must remain isolated, yet use the same fiber communications. The central switch connects to the two location using MM Fiber. From my research I believe I need to use the 802.1q standard to allow port trunking between the two switches.
now we have 2 switches: SF300-24..on one SF300-24 we config it at layer 3 mode with VLAN configuration same as following [code] And we use port 26 on 2 switches SF300-24 is trunk mode then we connect both SF300-24 switches.But on SF300-24 layer 2 cann't inderstand VLAN from Sf300-24 layer 3..How to config VLAN on 2 switches SF300-24 Layer 3 and SF300-24 layer 2?
I have a dell powerconnect 2848 switch and setting up a vlan 3 an make port 1 mngt, port 48 uplink to layer 3 switch and tag vlan 1 and 3 to port 48 with cli commands for this setup. and also to untag ports 2-10 for computers
Now, the management interface is listening on all interfaces (IPs). But I would like to configure the switch to only listen on 10.0.9.254. What I need to configure or whether it is possible?
I'm setting up a Cisco 3750 layer 3 switch with several vlans. I thought enabling routing would route between the vlans, but no such luck.What I want is to share the internet access of vlan 100 with the other vlans/ip-nets.How can I do that?
I have a SG300-28P switch. I just read in the Administration Guide that, when in Layer 3 mode, the switch doesn't support MAC-based VLAN or Dynamic VLAN Assignment.
So, in order to assign a client to a VLAN based on their MAC or based on the response of a RADIUS server, we have to disable layer 3 features. Without layer 3 switching, the switch is unable to act as a default gateway and forward packets between VLANs. As a result, the VLANs can't communicate in any way, or access the internet, unless a separate router is connected to every VLAN. Right? Doesn't this limitation significantly reduce the usefulness of the DVA feature?
I cant find the v LAN-membership command on my 3700 layer 3 switch, I've searched Google on whether the command has upgraded to a new syntax to no avail, I'm using GNS3 and the IOS is c3725-adventerprisek9-mz.124-25d.bin
I have to admit I've never written my own Cisco configuration and I probably know just enough to break things. The last time I configured a Cisco was a few years ago, and the Wachovia people just told me what to type.
I have a Cisco WS-C3548-XL-EN and a Cisco WS-C3524-PWR-XL-EN "Inline Power" with default configurations and I want to setup VLANs. Basically, would this work?
SWITCH 1:Router on port 39, Wifi on Port 47, Uplink to 2nd switch's port 24 on port 48
Code: en conf t interface VLAN10 no ip directed-broadcast no ip route-cache
[code]....
And then I would test that it works, if it does issue #write memory, and it it doesn't powercycle and try again?
I am primarely enquiring whether the setup I have explained below is actually possible, and if so then how I can set this up. I know it isn't the easiest configuration and I need to set this up without purchasing any more equipment if at all possible.I have a Cisco SG 300-28 setup with three VLAN's. [code] Default Gateway is 192.168.10.1 (Netgear Router)I have a Wireless network setup (Netgear WMS and 2 WAP's) configured with the TWO VLAN's (1 and 3). These go into ports on the Cisco SG 300-28 which are tagged on both VLAN's. The Business wireless worked fine but the guest network didn't reout out to the internet.After some troubleshooting I realised the reason the guest wasn't working was because there was no route back from the internet to the router.
The router I have isn't really ideal, it is a Netgear DGN2200, but I managed to create a static route to 192.168.30.1 with a metric of 2, with 192,168,10.254 being the hop. Success, the connection worked, the only problem is that now my guest network can see my business network because the business network is using the static route on my router to route back over to the guest network (due to the limitations of this device I can't do anything about that)Guest network can connect to Business VLAN via switch. I am assuming this is because the router is on the Business VLAN and the default gateway is the router. As they are on the same network the Guest network can inevetably see the business server and network.The Business network can get back to the Guest network via the router using my static route I created. The static route is really basic and I can't create a firewall rule on the router to prevent the Business network speaking to guest network because it only has a LAN - WAN firewall and this connection is LAN - LAN.
What I need is...to somehow stop any traffic from the 192.168.30.0 network routing to anything on the 192.168.10.0 network, appart from the router on 192.168.10.1.Is this possible? I have this setup on a number of different site, the only difference is I have a CIsco Security Router on these with the VLAN's configured so I don't have this problem. Because I have a rather limited Netgear DGN2200 I am unable to setup the VLAN's correctly and as such I need to see if I can do this on the switch in any way.
I got the SG 300-20 small business L2/L3 switch. I've read through the 325 page pdf manual and I still can't figure out how to do what I need to do. Here is my setup using example ips.[code]
I want to be able to have any workstation I put on the workstations vlan to use 69.30.44.2.34 as a gw and from there route to 170.4.5.5 and from there to the outside. Basiclly, I want to be able to route ips from two different subnets on two different vlans. I've read through the docs and so far I have vlan1 setup and vlan 2 setup fine but I have no clue how to get the routing to cross vlans. The docs say the only way to have vlans talk to each other is by routing through the vlans ip interfaces but I have no clue how. There isn't a simple step 1,2,3 chapter that gets you to route between two vlans. What am I doing wrong? I put in some IP route entries but nothing seems to work.
I am trying to set up a VLAN on my Netgear switch (GS105E). I want to create two separate networks and I want both of them have internet access.
I have configured port 1 and port 5 as vlan1 and port 2 to port 4 as vlan2. I plugged a cable from the router to port 5, and the computer on port 1 has internet access. However, the computers on port 2 to port 4 have no internet access.I had tried to create VLANs with the router but had no luck.
I have 1 internet router 2960 and 2 No's ASA firewalls,The issue is Suppose if ASA-1 fails the failover will happen on ASA-2 but The issue is i dont have a layer 2 Switch in between the ASA's and Internet router, i have to manually shift the cable from ASA-1 to ASA-2,what sort of configuration i can do on 2960 router interfaces to support failover from ASA-1 to ASA-2, I have enough interface on 2960 router to occupy ASA-2. These all 3 devices should be in 1 Subnet.
I have a Netgear GSM7248R switch with 5 different Vlans including th management Vlan. Each of the vlans are connected to my layer 3 switch for routing. I want to access the management vlan form any of my Vlans so my layer two switch can be detected by my snmp manager.
I have recently purchased 2 SG 300 switches, 1 x SG 300 52 & 1 x SG 300 10, and I am hoping getting the following set-up working.To assist I have drawn the following simple network diagram (below) which hopefully makes it a little clearer what I am trying to do:I have 2 companies occupying a single office with the requirement to share printers/devices etc... so basically I am looking to set-up 2 VLANS (say VLAN 10 & VLAN 20) with inter-vlan routing. To add a little complexity the main comms area is located in the basement of the building, this houses the 2 DSL routers and 2 Servers, one for each company. I am proposing putting the SG 300 10 port switch in here and then use the 3 uplinks I have been given to connect back to the SG 300 52 which is in a patch cabinent 2 floors up. I want to use 2 uplinks (in a LAG) for Company A and 1 uplink for Company B. FYI. DHCP is being served out by each respective router.
I am trying to set up a network that has 1 internet connection, requires a local LAN for the business, and another LAN for public wireless access. Here is what I have and details on what we want to do.
We have the main LAN set up and all is working well, internet access, 6 WAP's connecting and all is working like a charm. Internal IP range is 192. 168. 0.0/24.We have all 6 WAPs on the internal network, with 2 SSID's on each WAP and each SSID is assigned to a VLAN. One SSID is internal for staff, the other is for guest access for members. The internal staff wireless access is working fine.
We want the guests to be able to access the internet, but not the internal network, but we need to access them for administration from the internal network.
We created a second VLAN on the switch and added the 6 WAP ports to it as tagged for VLAN2. These 6 ports are also on VLAN1 (default). We have a second VLAN on the router, have it handing out DHCP addresses for the 192.168.25.0/24 range with DNS servers.
Where we are having trouble is with getting the guests wireless access to work. Guests can see the wireless, log onto the access point but that's it. They don't appear to get a 192.168.25.0/24 IP, or any IP actually, and thus cannot do anything.
Is there any way to granularly allow hosts from one vlan to be able to access another vlan with Inter-VLAN routing DISABLED?Can the use of an ACL override the setting?In general I don't want any traffic between VLAN's but there are 2 hosts on one VLAN that I would want to allow access to a server on another VLAN.
We have a Cisco slm248gt-na smart switch in our office that I am trying to configure to support and optimize for VoIP. We have desktops hooked up off the phones in most cases. Are there any config guidelines to optimize the switch so it has proper QOS set and VoIP gets higher priority over data.
For test I used 2 Switch that name "ESW X" and "ESW Y" I have 2 network that I named "Network A" and "Network B" I build 2 VLAN for each network that named Vlan 2 for Network A and Vlan 3 for Network B, I don't use Vlan 1 because it's the default Vlan
Configuration ESW X: port e1 : ACCESS PORT on UNTTAGGED Vlan 2 port e2 : ACCESS PORT on UNTTAGGED Vlan 2 port e3 : ACCESS PORT on UNTTAGGED Vlan 3 port e4 : ACCESS PORT on UNTTAGGED Vlan 3 port g3 : TRUNK PORT with UNTTAGGED Vlan 1(default) and TAGGED Vlan 2 and Vlan 3
[code]....
Each Vlan can't communicate between the two switch, I think they're a problem in my vlan/port configuration?
I just purchased a new SF-300 managed switch for the purpose of using it on the DMZ, so we can mirror the internet port and monitor traffic for my company. I have set it up from the web interface to miror port 1 to port 2 and that's pretty much it. I decided to test it before putting it in production, by hooking it up to one of my core network switches, connecting a laptop to it and trying to get online. It doesn't even connect to my DHCP server to get an IP address. If I put the laptop back on the same subnet as the switch management IP, I can still connect to the switches web interface. Isn't the basic functionality of a switch to pass traffic?
I should also mention that I'm not a network engineer, so there might just be something I'm missing with regard to a default setting that needs to be switched off?
i have a SG300-52 Switch, route mode is enabled, and it is using the latest IOS.I have created 4 Vlans in this switch, till this point its OK, but once i try to give ip addres to the created Vlan either from the GUI or CLI the switch is not responding. i have to go and manually reset the switch using a pin.
i was trying to set up a new SG300-52 L3 switch for switching and Vlan. The problem is that the vlans on this switch cannot get their DNS resolved. Probably a stupid thing i can't get to see, but i think it is a simple solution given switchin is not my expertise.So my setup:
- ISP Wan router: LAN ip 10.0.0.1, DMZ: 10.0.0.2 -> i have to use this router for ISP support. But it suckes, that's why we use own router for firewall, port forwarding etc.
- Nice Router: WAN: 10.0.0.2, LAN: 192.168.1.1
- SG300 L3 switch
This works. I can ping switch, nice router, ISP router and google's ip from VLAN 5.But i cannot ping google using host name. From within SG300 i can. So it has something to do with SG300 not doing DNS right.My Client on VLAN 5 has ip 10.1.1.5 / 24, default gateway and dns pointing to switch: 10.1.1.1.I have put an entry in DNS servers in SG300: 192.168.1.1 active (pointing to Nice router). On client leave default gateway pointing to switch. But put DNS server : 192.168.1.1
I have a SF 300-24 24-Port 10/100 Managed Switch and I am trying to set some VLANs. The image below shows how I want it to be setup:Since the remote site goes through the Internet, making port 20 an 802.1Q trunk over the two VLANs will give WAN connectivity to VPN/E-mail.I've tried all sort of settings [ see attachments] but can't get it work.
I currently am using the SGE2000 switches for our datacentre and they have run great. We are looking at replacing them as part of our normal equipment refresh and have questions about what is the best switch for us. We are looking at upgrading to at least 48 port switches which isn't a huge issue.The main purposes of the switches will be for iSCSI traffic between Starwind SANs and Vsphere 5.1 hosts. We had some latency issues with one of the SGE2000s but otherwise they've been great.
We also will use these switches to handle our feeds from our ISP and our normal interserver communications. We have had DDoS attacks in the past of 40k packets per second and 600mbps and the SGE2000 never even flinched. We don't need it for any layer3 routing (which we use virtualized PFsense for). Looking at the Miercom report the SG200 series looks like it would be fine for us but I'm just worried around the part which mentions it becoame unresponsive in a DoS attack and also whther it may be slower for iSCSI. Both series seem to support flow control and jumbo frames.
I start writing this post telling you that I'm not a qualified network admin, so I beg your pardon if I do not use appropriate terms in my question. Also my english in not so good since I'm Italian and my english in almost scholastic.
This is the "story" :
I bought two switches as described above and actually I have to create 2 VLANS as described below :
VLAN id 2 name "Service_A" ports 1-4 VLAN id 3 name "Service_B" ports 7-9
all other ports can stay in default VLAN1.
my network infrastructure have some other very simple swtiches connected and 1 soho router (static ip 192.168.1.1) with dhcp active and ip pool address released from 192.168.1.100 to 200.
the SG200-26 have static ip 192.168.1.254 and 192.168.1.253
MY NEEDS:
I need VLAN for privacy matter so all computer connected to ports in VLAN2 cannot see nor enumerate PCs and resources on other VLANs, but I also absolutely NEED that all computer in every ports (and every VLAN even default VLAN1) can access the internet.
I used two sf-300 switch and create 4 vlans and intervlan routing is working fine.
Port 1 - 10 -------------> Vlan 1 Port 2 -20----------------> Vlan 2 Port 3 - 30------------------> Vlan 3 Port 4 - 40--------------------> Vlan 4
giga1 -----------------> connected to router (This router used for intervlan routing).
SF-300 Port 1 is connected to Internet Modem. This modem worked as dhcp server also for vlan 1, my problem is that when vlan 1 is not communicate to vlan2,3,4 and 2,3,4 are not communicating.
How i can communicate vlan 1 to 2,3,4 vlan.
how i can connect the modem in switch? Access port or Trunk port ( Presently available in vlan 1 Access port)Any route i need to make? sf-300 or modem or router?
If you have two wireless routers on the same private network. On configuring the second router's password and SSID I know the second wireless routers DHCP must be turned off.Can you explain step by step on configuring the second wireless. Must the second wireless be connected to the internet. If yes, how? Must I take the first wireless router off the modem and connect it to the second wireless router for internet connection. (Problem with that is connection from the ISP)
I have large bunglow with 2floors,I would like to have a wireless internet setup in bunglow using 3g usb modem type of internet connection.Advise which router to be used so that I can get good wifi connectivity all over the place so minimum 4 people can use it simaltaneously.
I am trying to connect my xbox360 to my belkin surf n300 router via ethernet cable and my xbox360 cant recognize or get onto my network. i have manually entered the ip address the submask and gateway numbers, idk if they are 100% correct
I have a 4-port Netgear modem/router (DG834), and need to distribute its Internet connection according to the following criteria:
1.There are 11 access points (3 wired, 8 wireless) across 4 floors of a building - all cabling is from a central point, which will connect through a switch.Cat 5e cabling is in place. 2.The wireless points need Power over Ethernet connections 3.The 4 router ports serve 2 PC's and a printer in an office, the fourth being the connection to the switch. 4.There must be network separation so that: - all points have Internet access - there are three separate groups - one for the office, one for staff (wired) and one for guests (the wireless points), the purpose being to ensure that no user in one group can access any user's device in the other 2 groups. I'm assuming VLAN is the method for this. 5.Traffic on the network is likely to be fairly low casual use of the wireless ports, the office PC's only being used for Internet access and email no transactional systems, large databases or other resource / network-intensive functions.
1.Both the Netgear FS726TP and GS724TP look as if they will do what I want, using WNAP210 wireless access points. Could I achieve the same outcome with 2 x GS108PE switches? Any other hardware recommendations? 2.Do I need any additional hardware? 3.Are there any other considerations I have not thought of?
