RE: [enterasys] VLAN Configuration - Email found in subject
Where is the routing being done for these vlan's? Patrick Printz Network Infrastructure Quinsigamond Community College 670 West Boylston Street Worcester, MA 01606-2092 w. 508-854-7517 c. 508-726-9529 If a man is called a street sweeper, he should sweep streets even as Michelangelo painted, or Beethoven composed music, or Shakespeare wrote poetry. He should sweep streets so well that all the hosts of heaven and Earth will pause to say, Here lived a great street sweeper who did his job well. ~Martin Luther King, Jr. From: Gustavo Veras [mailto:gustavo@gmail.com] Sent: Wednesday, July 11, 2012 11:04 AM To: Enterasys Customer Mailing List Subject: Re: [enterasys] VLAN Configuration - Email found in subject Thanks, Erik! Is working well, but VLAN 11 is not working properly. the vlan 11 is only seeing the switches, do not see the vlan100, vlan200. Build 1: Switch IP: 172.16.0.1 Build 2: Switch IP: 172.16.0.2 43 44 was used as a port of management. The following configuration of the switch ports of the second building: B3(su)-show vlan port Port VLAN Ingress Egress Filter Vlan - ge.1.1 11 N tagged: 11,100,200 ge.1.2 100N untagged: 100 ge.1.3 100N untagged: 100 ge.1.4 100N untagged: 100 ge.1.5 100N untagged: 100 ge.1.6 100N untagged: 100 ge.1.7 200N untagged: 200 ge.1.8 200N untagged: 200 ge.1.9 200N untagged: 200 ge.1.10200N untagged: 200 ge.1.11200N untagged: 200 . ge.1.4311 N untagged: 11,100,200 ge.1.4411 N untagged: 11,100,200 Do you know what might be happening? 2012/7/10 Erik Phillips ephill...@ewrsd.k12.nj.usmailto:ephill...@ewrsd.k12.nj.us What about: building 1 set vlan create 11,100,200 set vlan egress 100 ge.1.1 tagged set vlan egress 200 ge.1.2 tagged set host vlan 11 building 2 set vlan create 11,100,200 set port vlan ge.1.1-6 100 modify-egress set port vlan ge.1.7-11 200 modify-egress set host vlan 11 Also, netsight (if you have it) can probably do this as well. Check out the enterasys channel on youtube, http://www.youtube.com/watch?v=HbStJOT_m08 and http://www.youtube.com/watch?v=q4VNhLbrmcUfeature=results_mainplaynext=1list=PLD0A4267BC50654DB. I think it provides a good start for setups. Erik Phillips East Windsor Regional Schools (p) 609.443.7738 x1725 (f) 609.443.7861 From: Gustavo Veras [gustavo@gmail.commailto:gustavo@gmail.com] Sent: Tuesday, July 10, 2012 6:55 PM To: Enterasys Customer Mailing List Subject: [enterasys] VLAN Configuration - Email found in subject How can I create this setup VLANs on Enterasys? There are two building: Building 1: VLAN 100 - Link1 (Link ISP1) VLAN 200 - Link2 (Link ISP2) Management VLAN 11 (Sees ISP1, ISP2, Switches) The two links come into port 1 and 2 on the switch Enterasys B3G124-48. The buildings are connected by the port 3. Building 2: 1 - Switch Enterasys B3G124-48 12 - PC The first vlan (100) would be distributed to 6 computers and vlan 200 for the other 6. Vlan11 management. Is there an easy way to do this? * --To unsubscribe from enterasys, send email to lists...@unc.edumailto:lists...@unc.edumailto:lists...@unc.edumailto:lists...@unc.edu with the body: unsubscribe enterasys ephill...@ewrsd.k12.nj.usmailto:ephill...@ewrsd.k12.nj.us --- To unsubscribe from enterasys, send email to lists...@unc.edumailto:lists...@unc.edu with the body: unsubscribe enterasys gustavo@gmail.commailto:gustavo@gmail.com * --To unsubscribe from enterasys, send email to lists...@unc.edumailto:lists...@unc.edu with the body: unsubscribe enterasys ppri...@qcc.mass.edumailto:ppri...@qcc.mass.edu --- To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys arch...@mail-archive.com
Re: [enterasys] VLAN Configuration - Email found in subject
Build 1: Router has two vlans: VLAN 100: 192.168.1.1/24 (ISP1) VLAN 200: 192.168.2.1/24 (ISP2) Have to see these addresses by VLAN management (11) port 43,44. 2012/7/11 Patrick Printz ppri...@qcc.mass.edu Where is the routing being done for these vlan’s? ** ** *Patrick Printz* *Network Infrastructure* ** ** Quinsigamond Community College 670 West Boylston Street Worcester, MA 01606-2092 w. 508-854-7517 c. 508-726-9529 ** ** ** ** If a man is called a street sweeper, he should sweep streets even as Michelangelo painted, or Beethoven composed music, or Shakespeare wrote poetry. He should sweep streets so well that all the hosts of heaven and Earth will pause to say, Here lived a great street sweeper who did his job well. ~Martin Luther King, Jr. ** ** *From:* Gustavo Veras [mailto:gustavo@gmail.com] *Sent:* Wednesday, July 11, 2012 11:04 AM *To:* Enterasys Customer Mailing List *Subject:* Re: [enterasys] VLAN Configuration - Email found in subject ** ** Thanks, Erik! Is working well, but VLAN 11 is not working properly. the vlan 11 is only seeing the switches, do not see the vlan100, vlan200. Build 1: Switch IP: 172.16.0.1 Build 2: Switch IP: 172.16.0.2 43 44 was used as a port of management. The following configuration of the switch ports of the second building: B3(su)-show vlan port Port VLAN Ingress Egress Filter Vlan - ge.1.1 11 N tagged: 11,100,200 ge.1.2 100N untagged: 100 ge.1.3 100N untagged: 100 ge.1.4 100N untagged: 100 ge.1.5 100N untagged: 100 ge.1.6 100N untagged: 100 ge.1.7 200N untagged: 200 ge.1.8 200N untagged: 200 ge.1.9 200N untagged: 200 ge.1.10200N untagged: 200 ge.1.11200N untagged: 200 . ge.1.4311 N untagged: 11,100,200 ge.1.4411 N untagged: 11,100,200 Do you know what might be happening? 2012/7/10 Erik Phillips ephill...@ewrsd.k12.nj.us What about: building 1 set vlan create 11,100,200 set vlan egress 100 ge.1.1 tagged set vlan egress 200 ge.1.2 tagged set host vlan 11 building 2 set vlan create 11,100,200 set port vlan ge.1.1-6 100 modify-egress set port vlan ge.1.7-11 200 modify-egress set host vlan 11 Also, netsight (if you have it) can probably do this as well. Check out the enterasys channel on youtube, http://www.youtube.com/watch?v=HbStJOT_m08 and http://www.youtube.com/watch?v=q4VNhLbrmcUfeature=results_mainplaynext=1list=PLD0A4267BC50654DB. I think it provides a good start for setups. Erik Phillips East Windsor Regional Schools (p) 609.443.7738 x1725 (f) 609.443.7861 From: Gustavo Veras [gustavo@gmail.com] Sent: Tuesday, July 10, 2012 6:55 PM To: Enterasys Customer Mailing List Subject: [enterasys] VLAN Configuration - Email found in subject How can I create this setup VLANs on Enterasys? There are two building: Building 1: VLAN 100 - Link1 (Link ISP1) VLAN 200 - Link2 (Link ISP2) Management VLAN 11 (Sees ISP1, ISP2, Switches) The two links come into port 1 and 2 on the switch Enterasys B3G124-48. The buildings are connected by the port 3. Building 2: 1 - Switch Enterasys B3G124-48 12 - PC The first vlan (100) would be distributed to 6 computers and vlan 200 for the other 6. Vlan11 management. Is there an easy way to do this? * --To unsubscribe from enterasys, send email to lists...@unc.edu mailto:lists...@unc.edu with the body: unsubscribe enterasys ephill...@ewrsd.k12.nj.us --- To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys gustavo@gmail.com ** ** - --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys ppri...@qcc.mass.edu - --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys gustavo@gmail.com --- To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys arch...@mail-archive.com
RE: [enterasys] VLAN Configuration - Email found in subject
Shouldn't the router have vlan 11 as well? Patrick Printz Network Infrastructure Quinsigamond Community College 670 West Boylston Street Worcester, MA 01606-2092 w. 508-854-7517 c. 508-726-9529 If a man is called a street sweeper, he should sweep streets even as Michelangelo painted, or Beethoven composed music, or Shakespeare wrote poetry. He should sweep streets so well that all the hosts of heaven and Earth will pause to say, Here lived a great street sweeper who did his job well. ~Martin Luther King, Jr. From: Gustavo Veras [mailto:gustavo@gmail.com] Sent: Wednesday, July 11, 2012 11:46 AM To: Enterasys Customer Mailing List Subject: Re: [enterasys] VLAN Configuration - Email found in subject Build 1: Router has two vlans: VLAN 100: 192.168.1.1/24http://192.168.1.1/24 (ISP1) VLAN 200: 192.168.2.1/24http://192.168.2.1/24 (ISP2) Have to see these addresses by VLAN management (11) port 43,44. 2012/7/11 Patrick Printz ppri...@qcc.mass.edumailto:ppri...@qcc.mass.edu Where is the routing being done for these vlan's? Patrick Printz Network Infrastructure Quinsigamond Community College 670 West Boylston Street Worcester, MA 01606-2092 w. 508-854-7517 c. 508-726-9529 If a man is called a street sweeper, he should sweep streets even as Michelangelo painted, or Beethoven composed music, or Shakespeare wrote poetry. He should sweep streets so well that all the hosts of heaven and Earth will pause to say, Here lived a great street sweeper who did his job well. ~Martin Luther King, Jr. From: Gustavo Veras [mailto:gustavo@gmail.commailto:gustavo@gmail.com] Sent: Wednesday, July 11, 2012 11:04 AM To: Enterasys Customer Mailing List Subject: Re: [enterasys] VLAN Configuration - Email found in subject Thanks, Erik! Is working well, but VLAN 11 is not working properly. the vlan 11 is only seeing the switches, do not see the vlan100, vlan200. Build 1: Switch IP: 172.16.0.1 Build 2: Switch IP: 172.16.0.2 43 44 was used as a port of management. The following configuration of the switch ports of the second building: B3(su)-show vlan port Port VLAN Ingress Egress Filter Vlan - ge.1.1 11 N tagged: 11,100,200 ge.1.2 100N untagged: 100 ge.1.3 100N untagged: 100 ge.1.4 100N untagged: 100 ge.1.5 100N untagged: 100 ge.1.6 100N untagged: 100 ge.1.7 200N untagged: 200 ge.1.8 200N untagged: 200 ge.1.9 200N untagged: 200 ge.1.10200N untagged: 200 ge.1.11200N untagged: 200 . ge.1.4311 N untagged: 11,100,200 ge.1.4411 N untagged: 11,100,200 Do you know what might be happening? 2012/7/10 Erik Phillips ephill...@ewrsd.k12.nj.usmailto:ephill...@ewrsd.k12.nj.us What about: building 1 set vlan create 11,100,200 set vlan egress 100 ge.1.1 tagged set vlan egress 200 ge.1.2 tagged set host vlan 11 building 2 set vlan create 11,100,200 set port vlan ge.1.1-6 100 modify-egress set port vlan ge.1.7-11 200 modify-egress set host vlan 11 Also, netsight (if you have it) can probably do this as well. Check out the enterasys channel on youtube, http://www.youtube.com/watch?v=HbStJOT_m08 and http://www.youtube.com/watch?v=q4VNhLbrmcUfeature=results_mainplaynext=1list=PLD0A4267BC50654DB. I think it provides a good start for setups. Erik Phillips East Windsor Regional Schools (p) 609.443.7738 x1725 (f) 609.443.7861 From: Gustavo Veras [gustavo@gmail.commailto:gustavo@gmail.com] Sent: Tuesday, July 10, 2012 6:55 PM To: Enterasys Customer Mailing List Subject: [enterasys] VLAN Configuration - Email found in subject How can I create this setup VLANs on Enterasys? There are two building: Building 1: VLAN 100 - Link1 (Link ISP1) VLAN 200 - Link2 (Link ISP2) Management VLAN 11 (Sees ISP1, ISP2, Switches) The two links come into port 1 and 2 on the switch Enterasys B3G124-48. The buildings are connected by the port 3. Building 2: 1 - Switch Enterasys B3G124-48 12 - PC The first vlan (100) would be distributed to 6 computers and vlan 200 for the other 6. Vlan11 management. Is there an easy way to do this? * --To unsubscribe from enterasys, send email to lists...@unc.edumailto:lists...@unc.edumailto:lists...@unc.edumailto:lists...@unc.edu with the body: unsubscribe enterasys ephill...@ewrsd.k12.nj.usmailto:ephill...@ewrsd.k12.nj.us --- To unsubscribe from enterasys, send email to lists...@unc.edumailto:lists...@unc.edu with the body: unsubscribe enterasys gustavo@gmail.commailto:gustavo@gmail.com * --To unsubscribe from enterasys, send email to lists...@unc.edumailto:lists
Re: [enterasys] VLAN Configuration - Email found in subject
Hi Gustavo, I think what Patrick is eluding to is that in order to route traffic between VLANs, your router must have an interface in each of those VLANs. Based on your description, it seems that your router does not have an interface in VLAN 11. If that is indeed the case, (single-homed) hosts inside VLAN 11 can't reach any hosts outside of VLAN 11. However, based on the port config you posted for the B3 in Building 2, I see you are egressing VLANs 11,100 and 200 to your management hosts on ports 43 and 44. That suggests your management hosts are multi-homed, meaning they have interfaces in each of those three VLANs. If that's what you're doing, the reason you can't see hosts in VLANs 100 and 200 is probably because the B3-management host traffic is untagged instead of tagged. What you likely want to do is this: - Make the switch egress the VLANs tagged (set vlan egress 11,11,200 ge.1.43-44 tagged) - Make sure your management host interfaces are VLAN interfaces. Mike Loosbrock Bethel University Network Services 651-638-6723 On Wed, Jul 11, 2012 at 10:51 AM, Patrick Printz ppri...@qcc.mass.eduwrote: Shouldn’t the router have vlan 11 as well? ** ** *Patrick Printz* *Network Infrastructure* ** ** Quinsigamond Community College 670 West Boylston Street Worcester, MA 01606-2092 w. 508-854-7517 c. 508-726-9529 ** ** ** ** If a man is called a street sweeper, he should sweep streets even as Michelangelo painted, or Beethoven composed music, or Shakespeare wrote poetry. He should sweep streets so well that all the hosts of heaven and Earth will pause to say, Here lived a great street sweeper who did his job well. ~Martin Luther King, Jr. ** ** *From:* Gustavo Veras [mailto:gustavo@gmail.com] *Sent:* Wednesday, July 11, 2012 11:46 AM *To:* Enterasys Customer Mailing List *Subject:* Re: [enterasys] VLAN Configuration - Email found in subject ** ** Build 1: Router has two vlans: VLAN 100: 192.168.1.1/24 (ISP1) VLAN 200: 192.168.2.1/24 (ISP2) Have to see these addresses by VLAN management (11) port 43,44. 2012/7/11 Patrick Printz ppri...@qcc.mass.edu Where is the routing being done for these vlan’s? *Patrick Printz* *Network Infrastructure* Quinsigamond Community College 670 West Boylston Street Worcester, MA 01606-2092 w. 508-854-7517 c. 508-726-9529 If a man is called a street sweeper, he should sweep streets even as Michelangelo painted, or Beethoven composed music, or Shakespeare wrote poetry. He should sweep streets so well that all the hosts of heaven and Earth will pause to say, Here lived a great street sweeper who did his job well. ~Martin Luther King, Jr. *From:* Gustavo Veras [mailto:gustavo@gmail.com] *Sent:* Wednesday, July 11, 2012 11:04 AM *To:* Enterasys Customer Mailing List *Subject:* Re: [enterasys] VLAN Configuration - Email found in subject Thanks, Erik! Is working well, but VLAN 11 is not working properly. the vlan 11 is only seeing the switches, do not see the vlan100, vlan200. Build 1: Switch IP: 172.16.0.1 Build 2: Switch IP: 172.16.0.2 43 44 was used as a port of management. The following configuration of the switch ports of the second building: B3(su)-show vlan port Port VLAN Ingress Egress Filter Vlan - ge.1.1 11 N tagged: 11,100,200 ge.1.2 100N untagged: 100 ge.1.3 100N untagged: 100 ge.1.4 100N untagged: 100 ge.1.5 100N untagged: 100 ge.1.6 100N untagged: 100 ge.1.7 200N untagged: 200 ge.1.8 200N untagged: 200 ge.1.9 200N untagged: 200 ge.1.10200N untagged: 200 ge.1.11200N untagged: 200 . ge.1.4311 N untagged: 11,100,200 ge.1.4411 N untagged: 11,100,200 Do you know what might be happening? 2012/7/10 Erik Phillips ephill...@ewrsd.k12.nj.us What about: building 1 set vlan create 11,100,200 set vlan egress 100 ge.1.1 tagged set vlan egress 200 ge.1.2 tagged set host vlan 11 building 2 set vlan create 11,100,200 set port vlan ge.1.1-6 100 modify-egress set port vlan ge.1.7-11 200 modify-egress set host vlan 11 Also, netsight (if you have it) can probably do this as well. Check out the enterasys channel on youtube, http://www.youtube.com/watch?v=HbStJOT_m08 and http://www.youtube.com/watch?v=q4VNhLbrmcUfeature=results_mainplaynext=1list=PLD0A4267BC50654DB. I think it provides a good start for setups. Erik Phillips East Windsor Regional Schools
[enterasys] VLAN Configuration
How can I create this setup VLANs on Enterasys? There are two building: Building 1: VLAN 100 - Link1 (Link ISP1) VLAN 200 - Link2 (Link ISP2) Management VLAN 11 (Sees ISP1, ISP2, Switches) The two links come into port 1 and 2 on the switch Enterasys B3G124-48. The buildings are connected by the port 3. Building 2: 1 - Switch Enterasys B3G124-48 12 - PC The first vlan (100) would be distributed to 6 computers and vlan 200 for the other 6. Vlan11 management. Is there an easy way to do this? --- To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys arch...@mail-archive.com
RE: [enterasys] VLAN Configuration - Email found in subject
What about: building 1 set vlan create 11,100,200 set vlan egress 100 ge.1.1 tagged set vlan egress 200 ge.1.2 tagged set host vlan 11 building 2 set vlan create 11,100,200 set port vlan ge.1.1-6 100 modify-egress set port vlan ge.1.7-11 200 modify-egress set host vlan 11 Also, netsight (if you have it) can probably do this as well. Check out the enterasys channel on youtube, http://www.youtube.com/watch?v=HbStJOT_m08 and http://www.youtube.com/watch?v=q4VNhLbrmcUfeature=results_mainplaynext=1list=PLD0A4267BC50654DB. I think it provides a good start for setups. Erik Phillips East Windsor Regional Schools (p) 609.443.7738 x1725 (f) 609.443.7861 From: Gustavo Veras [gustavo@gmail.com] Sent: Tuesday, July 10, 2012 6:55 PM To: Enterasys Customer Mailing List Subject: [enterasys] VLAN Configuration - Email found in subject How can I create this setup VLANs on Enterasys? There are two building: Building 1: VLAN 100 - Link1 (Link ISP1) VLAN 200 - Link2 (Link ISP2) Management VLAN 11 (Sees ISP1, ISP2, Switches) The two links come into port 1 and 2 on the switch Enterasys B3G124-48. The buildings are connected by the port 3. Building 2: 1 - Switch Enterasys B3G124-48 12 - PC The first vlan (100) would be distributed to 6 computers and vlan 200 for the other 6. Vlan11 management. Is there an easy way to do this? * --To unsubscribe from enterasys, send email to lists...@unc.edumailto:lists...@unc.edu with the body: unsubscribe enterasys ephill...@ewrsd.k12.nj.us --- To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys arch...@mail-archive.com
[enterasys] VLAN configuration on S-Series
Hi all, I'm configuring up our new S4 before putting it in to production, and I'm getting a bit confused by the VLAN configuration. Firstly, show vlan portinfo is missing, which is a giant pain as it gives a nice overview, but also commands like show vlan 1 and show port egress only work for ports that have link. Is there any way to get an overview of the vlan configuration for all ports, whether they have link or not? The S4 is running firmware 7.21.01. Thanks, -- James Andrewartha Network Projects Engineer Christ Church Grammar School Claremont, Western Australia Ph. (08) 9442 1757 Mob. 0424 160 877 --- To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys arch...@mail-archive.com
Re: [enterasys] VLAN configuration on S-Series
Hi James, I do not have any real experience with S-series, but on C-series for example show config vlan or show config port does provide information about vlan egress configuration or port vlan (pvid) configuration. Kind regards Reinhnard Am 20.04.2011 12:36, schrieb James Andrewartha: Hi all, I'm configuring up our new S4 before putting it in to production, and I'm getting a bit confused by the VLAN configuration. Firstly, show vlan portinfo is missing, which is a giant pain as it gives a nice overview, but also commands like show vlan 1 and show port egress only work for ports that have link. Is there any way to get an overview of the vlan configuration for all ports, whether they have link or not? The S4 is running firmware 7.21.01. Thanks, --- To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys arch...@mail-archive.com
AW: [enterasys] VLAN configuration on S-Series
Hi James, quickest way that works for me: sh conf vlan. A sh port vlan should help as well. Mit freundlichen Grüßen i.A. André Keller Informationssysteme Lokaler Betrieb und Support Volkswagen Original Teile Logistik GmbH und Co. KG Vertriebszentrum Nord Am Stammgleis 6 22844 Norderstedt Tel.: +49 (40) 52200-3211 Fax: +49 40 52200-3209 http://www.volkswagen-otlg.de -Ursprüngliche Nachricht- Von: James Andrewartha [mailto:jandrewar...@ccgs.wa.edu.au] Gesendet: Mittwoch, 20. April 2011 12:37 An: Enterasys Customer Mailing List Betreff: [enterasys] VLAN configuration on S-Series Hi all, I'm configuring up our new S4 before putting it in to production, and I'm getting a bit confused by the VLAN configuration. Firstly, show vlan portinfo is missing, which is a giant pain as it gives a nice overview, but also commands like show vlan 1 and show port egress only work for ports that have link. Is there any way to get an overview of the vlan configuration for all ports, whether they have link or not? The S4 is running firmware 7.21.01. Thanks, -- James Andrewartha Network Projects Engineer Christ Church Grammar School Claremont, Western Australia Ph. (08) 9442 1757 Mob. 0424 160 877 --- To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys andre.kel...@volkswagen-otlg.de --- To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys arch...@mail-archive.com
Re: FW: [enterasys] Vlan configuration issue.
Aern't Siemens and Enterasys joined now? Anyway, here's a DHCP config. You do this in the switch BTW. set dhcp enable set dhcp exclude 10.1.1.94 set dhcp pool data set dhcp pool data dns-server 10.8.4.8 set dhcp pool data default-router 10.1.1.94 set dhcp pool data network 10.1.1.64 255.255.255.224 set dhcp pool data domain-name something.net If you need options for VoIP phones, they'll be something like this Ericcson set dhcp pool data option 43 hex def etc or Cisco set dhcp pool data option 150 hex abc etc If you need to set up reserved pool addresses, then they occupy a pool each, like this set dhcp pool printer set dhcp pool printer default-router 10.1.1.94 set dhcp pool printer hardware-address 00:1f:29:1c:17:82 set dhcp pool printer host 10.1.1.67 255.255.255.224 set dhcp pool UPS set dhcp pool UPS default-router 10.1.1.94 set dhcp pool UPS hardware-address 00:c0:b7:4a:09:90 set dhcp pool UPS host 10.1.1.91 255.255.255.224 Hope it helps Billo Data Communications Co-Ordinator Information Technology Telecommunications Hunter New England Health Service ph 0249 213804 fax 0249 213038 william.ol...@hnehealth.nsw.gov.au Pal, Abhijit IN CCU SISL abhijit@siemens.com Monday, 8 June 2009 Dear All, Now I want to configure DHCP server on the C3 Switch for all the vlan. I have already gone through the configuration guide but not able to understand which steps are enough. Bellow is the IP Pool for Vlans. Vlan10: 192.168.10.XXX Vlan20: 192.168.20.XXX Vlan30:192.168.30.XXX Need your immediate help. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: Pal, Abhijit IN CCU SISL Sent: Friday, June 05, 2009 11:15 AM To: 'stephen.faulk...@rikshospitalet.no' Subject: RE: [enterasys] Vlan configuration issue. Hi Stephen, Thanks a lot... This is certainly going to be great help to configure the required scenario. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: Stephen Faulkner [mailto:stephen.faulk...@rikshospitalet.no] Sent: Thursday, June 04, 2009 8:53 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hello again. I tested something similar to this in our lab using a C3 as a router and a C2 and C3 as VLAN 10 and VLAN20 switches respectively. I have no B3 switches here, but assume they are similar. I did the configs and design in my head and it worked first time (unusual for me!). I had only 2 laptops. Server-laptop in VLAN30 and a client laptop that I used for testing VLAN 10 and 20 respectively. Here are the VLAN configs: This is C3 (router). First we create VLANs and attach to trunk port. I usually clear VLAN 1 from all ports. C3-ruter(su)-clear vlan egress 1 ge.*.*;lag.*.* show config vlan #vlan set vlan create 10 set vlan create 20 set vlan create 30 set vlan name 10 Vlan10 set vlan name 20 Vlan20 set vlan name 30 Vlan30 clear vlan egress 1 ge.1.1-48;lag.0.1-6 set vlan egress 10 ge.1.1 tagged set vlan egress 20 ge.1.2 tagged set vlan egress 30 ge.1.30 untagged # My server-laptop port set port vlan ge.1.30 30 modify-egress # Untagged to server-laptop This is the 'L2' switch for Vlan10 (a C2 in this case): show config vlan #vlan set vlan create 10 set vlan name 10 Vlan10 clear vlan egress 1 ge.1.10 set vlan egress 10 ge.1.1 tagged set vlan egress 10 ge.1.10 untagged ! set port vlan ge.1.10 10 modify-egress # Port for client-laptop - untagged And for VLAN 20 L2 switch: show conf vlan #vlan set vlan create 20 set vlan name 20 Vlan20 clear vlan egress 1 ge.1.10 set vlan egress 20 ge.1.1 tagged set vlan egress 20 ge.1.10 untagged set port vlan ge.1.10 20 modify-egress # Port for client-laptop - untagged I tested L2 VLAN connectivity by checking MAC tables with cleint laptop in VLAN 10: C3-ruter(su)-show mac MAC Address FID Port Type - - 00-11-88-13-40-21 1ge.1.1Learned 00-11-88-13-40-22 1ge.1.1Learned 00-1F-45-09-F2-11 1ge.1.2Learned 00-1F-45-09-F6-38 1host Management 00-16-D4-E7-10-9F 10 ge.1.1Learned # Laptop-client 00-24-81-B1-E6-F2 30 ge.1.30 Learned # Laptop-server Move laptop-client to Vlan20 switch. Can now see it in VLAN 20: C3-ruter(su)-show mac MAC Address FID Port Type - - 00-11-88-13-40-21 1ge.1.1Learned 00-11-88-13-40-22 1ge.1.1Learned 00-1F-45-09-F2-10 1ge.1.2Learned 00-1F-45-09-F2
Re: FW: [enterasys] Vlan configuration issue.
BTW Should have mentioned, you do not need to include a IP helper-address in the router (seems obvious, but you never know). Billo Data Communications Co-Ordinator Information Technology Telecommunications Hunter New England Health Service ph 0249 213804 fax 0249 213038 william.ol...@hnehealth.nsw.gov.au Pal, Abhijit IN CCU SISL abhijit@siemens.com Monday, 8 June 2009 Dear All, Now I want to configure DHCP server on the C3 Switch for all the vlan. I have already gone through the configuration guide but not able to understand which steps are enough. Bellow is the IP Pool for Vlans. Vlan10: 192.168.10.XXX Vlan20: 192.168.20.XXX Vlan30:192.168.30.XXX Need your immediate help. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: Pal, Abhijit IN CCU SISL Sent: Friday, June 05, 2009 11:15 AM To: 'stephen.faulk...@rikshospitalet.no' Subject: RE: [enterasys] Vlan configuration issue. Hi Stephen, Thanks a lot... This is certainly going to be great help to configure the required scenario. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: Stephen Faulkner [mailto:stephen.faulk...@rikshospitalet.no] Sent: Thursday, June 04, 2009 8:53 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hello again. I tested something similar to this in our lab using a C3 as a router and a C2 and C3 as VLAN 10 and VLAN20 switches respectively. I have no B3 switches here, but assume they are similar. I did the configs and design in my head and it worked first time (unusual for me!). I had only 2 laptops. Server-laptop in VLAN30 and a client laptop that I used for testing VLAN 10 and 20 respectively. Here are the VLAN configs: This is C3 (router). First we create VLANs and attach to trunk port. I usually clear VLAN 1 from all ports. C3-ruter(su)-clear vlan egress 1 ge.*.*;lag.*.* show config vlan #vlan set vlan create 10 set vlan create 20 set vlan create 30 set vlan name 10 Vlan10 set vlan name 20 Vlan20 set vlan name 30 Vlan30 clear vlan egress 1 ge.1.1-48;lag.0.1-6 set vlan egress 10 ge.1.1 tagged set vlan egress 20 ge.1.2 tagged set vlan egress 30 ge.1.30 untagged # My server-laptop port set port vlan ge.1.30 30 modify-egress # Untagged to server-laptop This is the 'L2' switch for Vlan10 (a C2 in this case): show config vlan #vlan set vlan create 10 set vlan name 10 Vlan10 clear vlan egress 1 ge.1.10 set vlan egress 10 ge.1.1 tagged set vlan egress 10 ge.1.10 untagged ! set port vlan ge.1.10 10 modify-egress # Port for client-laptop - untagged And for VLAN 20 L2 switch: show conf vlan #vlan set vlan create 20 set vlan name 20 Vlan20 clear vlan egress 1 ge.1.10 set vlan egress 20 ge.1.1 tagged set vlan egress 20 ge.1.10 untagged set port vlan ge.1.10 20 modify-egress # Port for client-laptop - untagged I tested L2 VLAN connectivity by checking MAC tables with cleint laptop in VLAN 10: C3-ruter(su)-show mac MAC Address FID Port Type - - 00-11-88-13-40-21 1ge.1.1Learned 00-11-88-13-40-22 1ge.1.1Learned 00-1F-45-09-F2-11 1ge.1.2Learned 00-1F-45-09-F6-38 1host Management 00-16-D4-E7-10-9F 10 ge.1.1Learned # Laptop-client 00-24-81-B1-E6-F2 30 ge.1.30 Learned # Laptop-server Move laptop-client to Vlan20 switch. Can now see it in VLAN 20: C3-ruter(su)-show mac MAC Address FID Port Type - - 00-11-88-13-40-21 1ge.1.1Learned 00-11-88-13-40-22 1ge.1.1Learned 00-1F-45-09-F2-10 1ge.1.2Learned 00-1F-45-09-F2-11 1ge.1.2Learned 00-1F-45-09-F6-38 1host Management 00-16-D4-E7-10-9F 10 ge.1.1Learned # Old entry not timed-out 00-16-D4-E7-10-9F 20 ge.1.2Learned # Maptop-client now moved to VLAN 20 00-24-81-B1-E6-F2 30 ge.1.30 Learned We have established L2 between all 3 switches, now let's try routing: Addresses I used: Laptop-server in VLAN 30 10.30.30.30/16 Laptop-client in VLAN 10 (and later VLAN 20) 10.10.10.10/16 (10.20.20.20/16) C3-ruter(su)-router#configure t Enter configuration commands: C3-ruter(su)-router(Config)#interface vlan 10 C3-ruter(su)-router(Config-if(Vlan 10))#ip address 10.10.10.1 255.255.0.0 C3-ruter(su)-router(Config-if(Vlan 10))#no sh C3-ruter(su)-router(Config-if(Vlan 10))#ex C3-ruter(su)-router(Config)#interface vlan 20 C3-ruter(su)-router(Config-if(Vlan 20))#ip address
RE: FW: [enterasys] Vlan configuration issue.
Hi, Not so clear. The DHCP server will serve ip to all the bellow mentioned vlans. So the DHCP server will hold different ip pool. But what about the Relay agent? Without relay agent will the DHCP server be able to serve ip to separate vlans? And one more help I need. I have issued set ip address command with the ip address on all the switches. But not able to telnet them from a PC. How to set up ip addresses on all the Switches so that I can telnet to them from any PC in the N/W? Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 -Original Message- From: William Olive [mailto:william.ol...@hnehealth.nsw.gov.au] Sent: Monday, June 08, 2009 1:15 PM To: Enterasys Customer Mailing List Subject: Re: FW: [enterasys] Vlan configuration issue. Aern't Siemens and Enterasys joined now? Anyway, here's a DHCP config. You do this in the switch BTW. set dhcp enable set dhcp exclude 10.1.1.94 set dhcp pool data set dhcp pool data dns-server 10.8.4.8 set dhcp pool data default-router 10.1.1.94 set dhcp pool data network 10.1.1.64 255.255.255.224 set dhcp pool data domain-name something.net If you need options for VoIP phones, they'll be something like this Ericcson set dhcp pool data option 43 hex def etc or Cisco set dhcp pool data option 150 hex abc etc If you need to set up reserved pool addresses, then they occupy a pool each, like this set dhcp pool printer set dhcp pool printer default-router 10.1.1.94 set dhcp pool printer hardware-address 00:1f:29:1c:17:82 set dhcp pool printer host 10.1.1.67 255.255.255.224 set dhcp pool UPS set dhcp pool UPS default-router 10.1.1.94 set dhcp pool UPS hardware-address 00:c0:b7:4a:09:90 set dhcp pool UPS host 10.1.1.91 255.255.255.224 Hope it helps Billo Data Communications Co-Ordinator Information Technology Telecommunications Hunter New England Health Service ph 0249 213804 fax 0249 213038 william.ol...@hnehealth.nsw.gov.au Pal, Abhijit IN CCU SISL abhijit@siemens.com Monday, 8 June 2009 Dear All, Now I want to configure DHCP server on the C3 Switch for all the vlan. I have already gone through the configuration guide but not able to understand which steps are enough. Bellow is the IP Pool for Vlans. Vlan10: 192.168.10.XXX Vlan20: 192.168.20.XXX Vlan30:192.168.30.XXX Need your immediate help. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: Pal, Abhijit IN CCU SISL Sent: Friday, June 05, 2009 11:15 AM To: 'stephen.faulk...@rikshospitalet.no' Subject: RE: [enterasys] Vlan configuration issue. Hi Stephen, Thanks a lot... This is certainly going to be great help to configure the required scenario. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: Stephen Faulkner [mailto:stephen.faulk...@rikshospitalet.no] Sent: Thursday, June 04, 2009 8:53 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hello again. I tested something similar to this in our lab using a C3 as a router and a C2 and C3 as VLAN 10 and VLAN20 switches respectively. I have no B3 switches here, but assume they are similar. I did the configs and design in my head and it worked first time (unusual for me!). I had only 2 laptops. Server-laptop in VLAN30 and a client laptop that I used for testing VLAN 10 and 20 respectively. Here are the VLAN configs: This is C3 (router). First we create VLANs and attach to trunk port. I usually clear VLAN 1 from all ports. C3-ruter(su)-clear vlan egress 1 ge.*.*;lag.*.* show config vlan #vlan set vlan create 10 set vlan create 20 set vlan create 30 set vlan name 10 Vlan10 set vlan name 20 Vlan20 set vlan name 30 Vlan30 clear vlan egress 1 ge.1.1-48;lag.0.1-6 set vlan egress 10 ge.1.1 tagged set vlan egress 20 ge.1.2 tagged set vlan egress 30 ge.1.30 untagged # My server-laptop port set port vlan ge.1.30 30 modify-egress # Untagged to server-laptop This is the 'L2' switch for Vlan10 (a C2 in this case): show config vlan #vlan set vlan create 10 set vlan name 10 Vlan10 clear vlan egress 1 ge.1.10 set vlan egress 10 ge.1.1 tagged set vlan egress 10 ge.1.10 untagged ! set port vlan ge.1.10 10 modify-egress # Port for client-laptop - untagged And for VLAN 20 L2 switch: show conf vlan #vlan set vlan create 20 set vlan name 20 Vlan20 clear vlan egress 1 ge.1.10
RE: FW: [enterasys] Vlan configuration issue.
Hmmm. Most of this stuff is in the manuals!! I cannot answer regarding DHCP server features/functionality on the C3 itself. I have set up UDP forwarding (ip-helper) on these - that's all. If the C3 ITSELF is the DHCP server then I don't see the need for the relay function except in neighbouring routers where there may be DHCP clients. The 'set ip address' stuff. These Enterasys boxes (at least most of those that I know) are basically switches with some routing 'added'. That's why anything to do with the ROUTER functions has to be defined in the ROUTER context and not in the basic switch CLI. This may appear strange to those of us accustomed to IOS, but as long as it works Makes SNMP configuration interesting too, especially when the SNMP poller doesn't understand contexts. When you set the SWITCH IP address, you have to define which VLAN this IP address should belong to by setting the HOST VLAN on the switch. You must also be able to ROUTE to this 'host' VLAN (typically the switch's management VLAN). I have had problems with this myself, and found it easiest to access the switch through one of its router interface addresses (in some cases). Could be that newer firmware has made life easier. Regards Stephen (In compliance with the Security Policy of Rikshospitalet HF , the content of this message (including any attachments) is of a non-sensitive nature) - -Original Message- - From: Pal, Abhijit IN CCU SISL [mailto:abhijit@siemens.com] - Sent: Monday, June 08, 2009 11:13 AM - To: Enterasys Customer Mailing List - Cc: william.ol...@hnehealth.nsw.gov.au - Subject: RE: FW: [enterasys] Vlan configuration issue. - - Hi, - - Not so clear. - - The DHCP server will serve ip to all the bellow mentioned vlans. So - the DHCP server will hold different ip pool. But what about the Relay - agent? Without relay agent will the DHCP server be able to serve ip to - separate vlans? - - And one more help I need. I have issued set ip address command with - the ip address on all the switches. But not able to telnet them from a - PC. - - How to set up ip addresses on all the Switches so that I can telnet to - them from any PC in the N/W? - - Best Regards, - Abhijit Pal - - SIEMENS Information systems Limited. - GO/ GTAS(Global Technology Application Services) 13th Floor, Tower- - 2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. - DID:+91 33 2339 9396 - Board:+91 33 2339 9000 - Fax:+91 33 2339 9001 - - -Original Message- - From: William Olive [mailto:william.ol...@hnehealth.nsw.gov.au] - Sent: Monday, June 08, 2009 1:15 PM - To: Enterasys Customer Mailing List - Subject: Re: FW: [enterasys] Vlan configuration issue. - - Aern't Siemens and Enterasys joined now? - - Anyway, here's a DHCP config. You do this in the switch BTW. - - set dhcp enable - set dhcp exclude 10.1.1.94 - - set dhcp pool data - set dhcp pool data dns-server 10.8.4.8 - set dhcp pool data default-router 10.1.1.94 set dhcp pool data network - 10.1.1.64 255.255.255.224 set dhcp pool data domain-name something.net - - If you need options for VoIP phones, they'll be something like this - - Ericcson - set dhcp pool data option 43 hex def etc - - or Cisco - set dhcp pool data option 150 hex abc etc - - If you need to set up reserved pool addresses, then they occupy a pool - each, like this - - set dhcp pool printer - set dhcp pool printer default-router 10.1.1.94 set dhcp pool printer - hardware-address 00:1f:29:1c:17:82 set dhcp pool printer host - 10.1.1.67 255.255.255.224 - - set dhcp pool UPS - set dhcp pool UPS default-router 10.1.1.94 set dhcp pool UPS hardware- - address 00:c0:b7:4a:09:90 set dhcp pool UPS host 10.1.1.91 - 255.255.255.224 - - Hope it helps - - - Billo - Data Communications Co-Ordinator - Information Technology Telecommunications Hunter New England Health - Service ph 0249 213804 fax 0249 213038 - william.ol...@hnehealth.nsw.gov.au - - Pal, Abhijit IN CCU SISL abhijit@siemens.com Monday, 8 - June - 2009 - Dear All, - - Now I want to configure DHCP server on the C3 Switch for all the vlan. - I have already gone through the configuration guide but not able to - understand which steps are enough. Bellow is the IP Pool for Vlans. - - Vlan10: 192.168.10.XXX - Vlan20: 192.168.20.XXX - Vlan30:192.168.30.XXX - - Need your immediate help. - - Best Regards, - Abhijit Pal - - SIEMENS Information systems Limited. - GO/ GTAS(Global Technology Application Services) 13th Floor, Tower- - 2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. - DID:+91 33 2339 9396 - Board:+91 33 2339 9000 - Fax:+91 33 2339 9001 - - - From: Pal, Abhijit IN CCU SISL - Sent: Friday, June 05, 2009 11:15 AM - To: 'stephen.faulk...@rikshospitalet.no' - Subject: RE: [enterasys] Vlan configuration issue. - - Hi Stephen, - - Thanks a lot... This is certainly going to be great help to configure - the required scenario. - - Best Regards
Re: FW: [enterasys] Vlan configuration issue.
Hi Abhijit, If you want the switch to be the DHCP server on your VLANs you have to define a pool for each of the VLANs, and be sure the switch has an active IP address on each of the VLANs. If you have a central DHCP server, then you need to define an IP address for the switch on each of the VLANs and then use the ip helper-address command on each of the vlan interfaces. For example setting ip helper-address 192.168.100.100 on VLAN10 will make the switch relay DHCP requests to the DHCP server on IP 192.168.100.100. Regards, Kim Pedersen -- #dhcps ! set dhcp enable set dhcp pool pool-bms set dhcp pool pool-bms default-router 192.168.93.254 set dhcp pool pool-bms network 192.168.93.0 255.255.255.0 set dhcp pool pool-amx set dhcp pool pool-amx dns-server 192.168.92.254 set dhcp pool pool-amx default-router 192.168.92.254 set dhcp pool pool-amx network 192.168.92.0 255.255.255.0 set dhcp pool pool-wlan set dhcp pool pool-wlan dns-server 192.168.90.3 set dhcp pool pool-wlan default-router 192.168.91.254 set dhcp pool pool-wlan network 192.168.91.0 255.255.255.0 set dhcp pool pool-security set dhcp pool pool-security dns-server 192.168.90.3 set dhcp pool pool-security default-router 192.168.95.254 set dhcp pool pool-security network 192.168.95.0 255.255.255.0 set dhcp pool pool-lutron set dhcp pool pool-lutron default-router 192.168.94.254 set dhcp pool pool-lutron network 192.168.94.0 255.255.255.0 set dhcp pool pool-guest set dhcp pool pool-guest default-router 192.168.99.254 set dhcp pool pool-guest network 192.168.99.0 255.255.255.0 set dhcp pool MGMT set dhcp pool MGMT default-router 192.168.100.254 set dhcp pool MGMT network 192.168.100.0 255.255.255.0 ! #Router Configuration router enable configure interface vlan 90 no shutdown ip address 192.168.90.250 255.255.255.0 exit interface vlan 91 no shutdown ip address 192.168.91.254 255.255.255.0 exit interface vlan 92 no shutdown ip address 192.168.92.250 255.255.255.0 exit interface vlan 93 no shutdown ip address 192.168.93.254 255.255.255.0 exit interface vlan 94 no shutdown ip address 192.168.94.250 255.255.255.0 exit interface vlan 95 no shutdown ip address 192.168.95.254 255.255.255.0 exit interface vlan 96 no shutdown ip address 192.168.96.250 255.255.255.0 exit interface vlan 99 no shutdown ip address 192.168.99.250 255.255.255.0 exit interface vlan 100 no shutdown ip address 192.168.100.250 255.255.255.0 exit -- Stephen Faulkner wrote: Hmmm. Most of this stuff is in the manuals!! I cannot answer regarding DHCP server features/functionality on the C3 itself. I have set up UDP forwarding (ip-helper) on these - that's all. If the C3 ITSELF is the DHCP server then I don't see the need for the relay function except in neighbouring routers where there may be DHCP clients. --- To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys arch...@mail-archive.com
Re: [enterasys] Vlan configuration issue. Default GW
Title: Re: [enterasys] Vlan configuration issue. Default GW Hi Fransisco, Thanks for your suggestions - yes, I know the B3s don't do routing. I am trying to get it routing working on the central C3 switch. When I first worked on the problem, I was using a sniffer to monitor the traffic, and plugging into various ports on the different VLANs. On each VLAN I used the C3 switch as the default GW, and routing between VLANs was working perfectly fine, but as soon as I started to include Internet addresses the traffic stopped on the C3 switch (No arp requests were sent out, or any routing/traffic to the default GW. The immediate problem obviously had to be that there was no default route set. This was a couple of months ago now, and someone has suggested I set the default route on the router by using "ip route 0.0.0.0 0.0.0.0 (gateway address)" I think I've already tried this, but I will give it a go again now that it has been suggested. Kind regards, Kim Pedersen CNCS Ltd. Francisco Garcia Alvarez wrote: Hi Kim: >From the info you mention, I don't get clear if you are sure that the default route isn't working for the B3's. I mean, have you tried to sniff packets at the firewall internal segment to see if the data is getting there? Have you checked the fw logs? Another thing that you can try to rule out any issue w the fw is putting any switch or router on the same internal segment of the fw and pointing the default route to that device and see if the packets go the device. One good example, to check if the data goes the way it should is to ping anything within the range of the default route; if the packets are routed correctly, you should go to the arp table of that B3 switch and see the mac address of the router/switch or fw that manages the route to get to that destination. If it works, then the conf is correct and maybe the issue is with firewall. Francisco J Gar�Álvarez Administrador Redes Director��a Infor���tica Rama Judicial Puerto Rico (939)389-3059 francisco.gar...@ramajudicial.pr - Original Message - From: Kim Pedersen k...@cncsltd.com To: Enterasys Customer Mailing List enterasys@listserv.unc.edu Sent: Sun Jun 07 23:50:42 2009 Subject: Re: [enterasys] Vlan configuration issue. Default GW Hi Michael, With last resort I presume you mean default route/gw? This is what I would like to accomplish, but I don't know the command that will do it, and have either misunderstood the documentation or been unable to find out which command to use. I did try and specify a default route by defining a static route as 0.0.0.0/0.0.0.0, but it didn't work out. I did not spend too much time on the whys as I felt I was on shaky ground trying a configuration that wasn't directly mentioned in the product documentation. I have included the router specific configuration below: -- C2(rw)-router(Config)#show running-config ! interface vlan 90 no shutdown ip address 192.168.90.250 255.255.255.0 interface vlan 91 no shutdown ip address 192.168.91.254 255.255.255.0 interface vlan 92 no shutdown ip address 192.168.92.250 255.255.255.0 interface vlan 93 no shutdown ip address 192.168.93.254 255.255.255.0 interface vlan 94 no shutdown ip address 192.168.94.250 255.255.255.0 interface vlan 95 no shutdown ip address 192.168.95.254 255.255.255.0 interface vlan 96 no shutdown ip address 192.168.96.250 255.255.255.0 interface vlan 99 no shutdown ip address 192.168.99.250 255.255.255.0 interface vlan 100 no shutdown ip address 192.168.100.250 255.255.255.0 ! router rip -- Regards, Kim Pedersen Pasetta, Michael wrote: Have you tried to add a route of last resort in the switches router configuration? From: Kim Pedersen To: Enterasys Customer Mailing List Sent: Sat Jun 06 21:23:38 2009 Subject: Re: [enterasys] Vlan configuration issue. Default GW I have a question to add into this interesting thread, which adds a twist to Abhijit's scenario. I have a very similar setup to the diagram below, with the added difference that on my setup the IP addresses of the C3 switch on each of the VLANs (10,20 and 30) is set as the default gateway for the clients connected to the B3 switches. Above C3 switch in the diagram below, I have a firewall / internet router on VLAN 40, and I would like the C3 switch to route all non-local traffic to this firewall. I have been unable to get this to work, as the default route command on the C3 switch seems only to work for the C3 switch itself, and not for any routed networks. Does anyone have experience with this? Regards, Kim Pedersen CNCS Ltd. Pal, Abhijit IN CCU SISL wrote:
RE: FW: [enterasys] Vlan configuration issue.
If you like, you could look on the C3 as a Cisco Hybrid (CatOS + IOS). You do not require a relay agent in the router interface. You configure a pool for each address range you need to serve and the 'pool network' command defines the addresses that each pool will serve. The 'set IP address' command can be a tough concept to grasp. However, unlike the E1 for example, the IP address on the switch cannot be in a subnet that is on the router (NB this may change). What this means in practice is that, if the C3 is your only router then you manage the C3 by telnet to one of the router interfaces and don't bother with the set IP address' command. You will need to set an IP address on the B3s in order to manage them, of course. Billo Data Communications Co-Ordinator Information Technology Telecommunications Hunter New England Health Service ph 0249 213804 fax 0249 213038 william.ol...@hnehealth.nsw.gov.au Pal, Abhijit IN CCU SISL abhijit@siemens.com 06/08/09 7:12 PM Hi, Not so clear. The DHCP server will serve ip to all the bellow mentioned vlans. So the DHCP server will hold different ip pool. But what about the Relay agent? Without relay agent will the DHCP server be able to serve ip to separate vlans? And one more help I need. I have issued set ip address command with the ip address on all the switches. But not able to telnet them from a PC. How to set up ip addresses on all the Switches so that I can telnet to them from any PC in the N/W? Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 -Original Message- From: William Olive [mailto:william.ol...@hnehealth.nsw.gov.au] Sent: Monday, June 08, 2009 1:15 PM To: Enterasys Customer Mailing List Subject: Re: FW: [enterasys] Vlan configuration issue. Aern't Siemens and Enterasys joined now? Anyway, here's a DHCP config. You do this in the switch BTW. set dhcp enable set dhcp exclude 10.1.1.94 set dhcp pool data set dhcp pool data dns-server 10.8.4.8 set dhcp pool data default-router 10.1.1.94 set dhcp pool data network 10.1.1.64 255.255.255.224 set dhcp pool data domain-name something.net If you need options for VoIP phones, they'll be something like this Ericcson set dhcp pool data option 43 hex def etc or Cisco set dhcp pool data option 150 hex abc etc If you need to set up reserved pool addresses, then they occupy a pool each, like this set dhcp pool printer set dhcp pool printer default-router 10.1.1.94 set dhcp pool printer hardware-address 00:1f:29:1c:17:82 set dhcp pool printer host 10.1.1.67 255.255.255.224 set dhcp pool UPS set dhcp pool UPS default-router 10.1.1.94 set dhcp pool UPS hardware-address 00:c0:b7:4a:09:90 set dhcp pool UPS host 10.1.1.91 255.255.255.224 Hope it helps Billo Data Communications Co-Ordinator Information Technology Telecommunications Hunter New England Health Service ph 0249 213804 fax 0249 213038 william.ol...@hnehealth.nsw.gov.au Pal, Abhijit IN CCU SISL abhijit@siemens.com Monday, 8 June 2009 Dear All, Now I want to configure DHCP server on the C3 Switch for all the vlan. I have already gone through the configuration guide but not able to understand which steps are enough. Bellow is the IP Pool for Vlans. Vlan10: 192.168.10.XXX Vlan20: 192.168.20.XXX Vlan30:192.168.30.XXX Need your immediate help. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: Pal, Abhijit IN CCU SISL Sent: Friday, June 05, 2009 11:15 AM To: 'stephen.faulk...@rikshospitalet.no' Subject: RE: [enterasys] Vlan configuration issue. Hi Stephen, Thanks a lot... This is certainly going to be great help to configure the required scenario. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: Stephen Faulkner [mailto:stephen.faulk...@rikshospitalet.no] Sent: Thursday, June 04, 2009 8:53 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hello again. I tested something similar to this in our lab using a C3 as a router and a C2 and C3 as VLAN 10 and VLAN20 switches respectively. I have no B3 switches here, but assume they are similar. I did the configs and design in my head and it worked first time (unusual for me!). I had only 2 laptops. Server-laptop in VLAN30 and a client laptop that I used for testing VLAN 10 and 20 respectively
Re: [enterasys] Vlan configuration issue. Default GW
Hi Kim: What happens if you try out this: modify the config on the C3 eliminating all the vlans and routes and just put the default route 0.0.0.0 0.0.0.0 pointing to the fw-ip-interface. Does it works!!! The thing is to figure out if the issue is the default route per se or the combination of routes. Francisco J Gar�Álvarez Administrador Redes Direct��ía Inform��tica Rama Judicial Puerto Rico (939)389-3059 francisco.gar...@ramajudicial.pr - Original Message - From: Kim Pedersen k...@cncsltd.com To: Enterasys Customer Mailing List enterasys@listserv.unc.edu Sent: Mon Jun 08 08:04:52 2009 Subject: Re: [enterasys] Vlan configuration issue. Default GW Hi Fransisco, Thanks for your suggestions - yes, I know the B3s don't do routing. I am trying to get it routing working on the central C3 switch. When I first worked on the problem, I was using a sniffer to monitor the traffic, and plugging into various ports on the different VLANs. On each VLAN I used the C3 switch as the default GW, and routing between VLANs was working perfectly fine, but as soon as I started to include Internet addresses the traffic stopped on the C3 switch (No arp requests were sent out, or any routing/traffic to the default GW. The immediate problem obviously had to be that there was no default route set. This was a couple of months ago now, and someone has suggested I set the default route on the router by using ip route 0.0.0.0 0.0.0.0 (gateway address) I think I've already tried this, but I will give it a go again now that it has been suggested. Kind regards, Kim Pedersen CNCS Ltd. Francisco Garcia Alvarez wrote: Hi Kim: From the info you mention, I don't get clear if you are sure that the default route isn't working for the B3's. I mean, have you tried to sniff packets at the firewall internal segment to see if the data is getting there? Have you checked the fw logs? Another thing that you can try to rule out any issue w the fw is putting any switch or router on the same internal segment of the fw and pointing the default route to that device and see if the packets go the device. One good example, to check if the data goes the way it should is to ping anything within the range of the default route; if the packets are routed correctly, you should go to the arp table of that B3 switch and see the mac address of the router/switch or fw that manages the route to get to that destination. If it works, then the conf is correct and maybe the issue is with firewall. Francisco J G�Álvarez Administrador Redes Directo���a Inf���tica Rama Judicial Puerto Rico (939)389-3059 francisco.gar...@ramajudicial.pr - Original Message - From: Kim Pedersen k...@cncsltd.com mailto:k...@cncsltd.com To: Enterasys Customer Mailing List enterasys@listserv.unc.edu mailto:enterasys@listserv.unc.edu Sent: Sun Jun 07 23:50:42 2009 Subject: Re: [enterasys] Vlan configuration issue. Default GW Hi Michael, With last resort I presume you mean default route/gw? This is what I would like to accomplish, but I don't know the command that will do it, and have either misunderstood the documentation or been unable to find out which command to use. I did try and specify a default route by defining a static route as 0.0.0.0/0.0.0.0, but it didn't work out. I did not spend too much time on the whys as I felt I was on shaky ground trying a configuration that wasn't directly mentioned in the product documentation. I have included the router specific configuration below: -- C2(rw)-router(Config)#show running-config ! interface vlan 90 no shutdown ip address 192.168.90.250 255.255.255.0 interface vlan 91 no shutdown ip address 192.168.91.254 255.255.255.0 interface vlan 92 no shutdown ip address 192.168.92.250 255.255.255.0 interface vlan 93 no shutdown ip address 192.168.93.254 255.255.255.0 interface vlan 94 no shutdown ip address 192.168.94.250 255.255.255.0 interface vlan 95 no shutdown ip address 192.168.95.254 255.255.255.0 interface vlan 96 no shutdown ip address 192.168.96.250 255.255.255.0 interface vlan 99 no shutdown ip address 192.168.99.250 255.255.255.0 interface vlan 100 no shutdown ip address 192.168.100.250 255.255.255.0 ! router rip -- Regards, Kim Pedersen Pasetta, Michael wrote
Re: [enterasys] Vlan configuration issue. Default GW
Thank you everyone for the suggestions. The correct command was the "ip route 0.0.0.0 0.0.0.0 GWIP", and it worked out well. What gave me trouble earlier on was a combination of having multiple IPs on a single interface on the firewall, a unused but configured port on the firewall messing up the return routing and not doing the packet sniffing with the correct options set. With the support from this list I went ahead and made the necessary changes (on a production system) and worked my way through the setup piece by piece. With 32 vlans each using /24 networks I now have to implement switch access controls. Thanks again for the assistance. Regards, Kim Pedersen CNCS Ltd. Pasetta, Michael wrote: Try adding the following: ip route 0.0.0.0 0.0.0.0 (IP of your gateway router) You also need to make sure that the default router know how to get bac�� If your having issue, you can certainly contact the Enterasys GTAC at (800) 872-8440. From: Kim Pedersen [mailto:k...@cncsltd.com] Sent: Sunday, June 07, 2009 8:51 PM To: Enterasys Customer Mailing List Subject: Re: [enterasys] Vlan configuration issue. Default GW Hi Michael, With last resort I presume you mean default route/gw? This is what I would like to accomplish, but I don't know the command that will do it, and have either misunderstood the documentation or been unable to find out which command to use. I did try and specify a default route by defining a static route as 0.0.0.0/0.0.0.0, but it didn't work out. I did not spend too much time on the whys as I felt I was on shaky ground trying a configuration that wasn't directly mentioned in the product documentation. I have included the router specific configuration below: -- C2(rw)-router(Config)#show running-config ! interface vlan 90 no shutdown ip address 192.168.90.250 255.255.255.0 interface vlan 91 no shutdown ip address 192.168.91.254 255.255.255.0 interface vlan 92 no shutdown ip address 192.168.92.250 255.255.255.0 interface vlan 93 no shutdown ip address 192.168.93.254 255.255.255.0 interface vlan 94 no shutdown ip address 192.168.94.250 255.255.255.0 interface vlan 95 no shutdown ip address 192.168.95.254 255.255.255.0 interface vlan 96 no shutdown ip address 192.168.96.250 255.255.255.0 interface vlan 99 no shutdown ip address 192.168.99.250 255.255.255.0 interface vlan 100 no shutdown ip address 192.168.100.250 255.255.255.0 ! router rip -- Regards, Kim Pedersen Pasetta, Michael wrote: Have you tried to add a route of last resort in the switches router configuration? From: Kim Pedersen To: Enterasys Customer Mailing List Sent: Sat Jun 06 21:23:38 2009 Subject: Re: [enterasys] Vlan configuration issue. Default GW I have a question to add into this interesting thread, which adds a twist to Abhijit's scenario. I have a very similar setup to the diagram below, with the added difference that on my setup the IP addresses of the C3 switch on each of the VLANs (10,20 and 30) is set as the default gateway for the clients connected to the B3 switches. Above C3 switch in the diagram below, I have a firewall / internet router on VLAN 40, and I would like the C3 switch to route all non-local traffic to this firewall. I have been unable to get this to work, as the default route command on the C3 switch seems only to work for the C3 switch itself, and not for any routed networks. Does anyone have experience with this? Regards, Kim Pedersen CNCS Ltd. Pal, Abhijit IN CCU SISL wrote: Hello, I am describing the scenario. Five B3 switches will be connected with one C3 switch. Each B3 SW will be used as L2 SW and they will be in separate Vlan. One server which will be in separate vlan, will be directly connected to C3 switch. Now in C3 SW Vlan routing will happen. Attaching the worst Diagram came out of my best effort. What should I do? Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID: +91 33 2339 9396 Board:+91 33 2339 9000 Fax: +91 33 2339 9001 --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys mpase...@enterasys.com --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys k...@cncsltd.com --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys mpase...@enterasys.com --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys k...@cncsltd.com --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe
Re: [enterasys] Vlan configuration issue. Default GW
Hi Michael, With last resort I presume you mean default route/gw? This is what I would like to accomplish, but I don't know the command that will do it, and have either misunderstood the documentation or been unable to find out which command to use. I did try and specify a default route by defining a static route as 0.0.0.0/0.0.0.0, but it didn't work out. I did not spend too much time on the whys as I felt I was on shaky ground trying a configuration that wasn't directly mentioned in the product documentation. I have included the router specific configuration below: -- C2(rw)-router(Config)#show running-config ! interface vlan 90 no shutdown ip address 192.168.90.250 255.255.255.0 interface vlan 91 no shutdown ip address 192.168.91.254 255.255.255.0 interface vlan 92 no shutdown ip address 192.168.92.250 255.255.255.0 interface vlan 93 no shutdown ip address 192.168.93.254 255.255.255.0 interface vlan 94 no shutdown ip address 192.168.94.250 255.255.255.0 interface vlan 95 no shutdown ip address 192.168.95.254 255.255.255.0 interface vlan 96 no shutdown ip address 192.168.96.250 255.255.255.0 interface vlan 99 no shutdown ip address 192.168.99.250 255.255.255.0 interface vlan 100 no shutdown ip address 192.168.100.250 255.255.255.0 ! router rip -- Regards, Kim Pedersen Pasetta, Michael wrote: Have you tried to add a route of last resort in the switches router configuration? From: Kim Pedersen <k...@cncsltd.com> To: Enterasys Customer Mailing List <enterasys@listserv.unc.edu> Sent: Sat Jun 06 21:23:38 2009 Subject: Re: [enterasys] Vlan configuration issue. Default GW I have a question to add into this interesting thread, which adds a twist to Abhijit's scenario. I have a very similar setup to the diagram below, with the added difference that on my setup the IP addresses of the C3 switch on each of the VLANs (10,20 and 30) is set as the default gateway for the clients connected to the B3 switches. Above C3 switch in the diagram below, I have a firewall / internet router on VLAN 40, and I would like the C3 switch to route all non-local traffic to this firewall. I have been unable to get this to work, as the default route command on the C3 switch seems only to work for the C3 switch itself, and not for any routed networks. Does anyone have experience with this? Regards, Kim Pedersen CNCS Ltd. Pal, Abhijit IN CCU SISL wrote: Hello, I am describing the scenario. Five B3 switches will be connected with one C3 switch. Each B3 SW will be used as L2 SW and they will be in separate Vlan. One server which will be in separate vlan, will be directly connected to C3 switch. Now in C3 SW Vlan routing will happen. Attaching the worst Diagram came out of my best effort. What should I do? Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID: +91 33 2339 9396 Board:+91 33 2339 9000 Fax: +91 33 2339 9001 --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys mpase...@enterasys.com --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys k...@cncsltd.com --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys arch...@mail-archive.com
Re: [enterasys] Vlan configuration issue. Default GW
Hi Kim: From the info you mention, I don't get clear if you are sure that the default route isn't working for the B3's. I mean, have you tried to sniff packets at the firewall internal segment to see if the data is getting there? Have you checked the fw logs? Another thing that you can try to rule out any issue w the fw is putting any switch or router on the same internal segment of the fw and pointing the default route to that device and see if the packets go the device. One good example, to check if the data goes the way it should is to ping anything within the range of the default route; if the packets are routed correctly, you should go to the arp table of that B3 switch and see the mac address of the router/switch or fw that manages the route to get to that destination. If it works, then the conf is correct and maybe the issue is with firewall. Francisco J Garc��a���lvarez Administrador Redes Directo���a Info��ática Rama Judicial Puerto Rico (939)389-3059 francisco.gar...@ramajudicial.pr - Original Message - From: Kim Pedersen k...@cncsltd.com To: Enterasys Customer Mailing List enterasys@listserv.unc.edu Sent: Sun Jun 07 23:50:42 2009 Subject: Re: [enterasys] Vlan configuration issue. Default GW Hi Michael, With last resort I presume you mean default route/gw? This is what I would like to accomplish, but I don't know the command that will do it, and have either misunderstood the documentation or been unable to find out which command to use. I did try and specify a default route by defining a static route as 0.0.0.0/0.0.0.0, but it didn't work out. I did not spend too much time on the whys as I felt I was on shaky ground trying a configuration that wasn't directly mentioned in the product documentation. I have included the router specific configuration below: -- C2(rw)-router(Config)#show running-config ! interface vlan 90 no shutdown ip address 192.168.90.250 255.255.255.0 interface vlan 91 no shutdown ip address 192.168.91.254 255.255.255.0 interface vlan 92 no shutdown ip address 192.168.92.250 255.255.255.0 interface vlan 93 no shutdown ip address 192.168.93.254 255.255.255.0 interface vlan 94 no shutdown ip address 192.168.94.250 255.255.255.0 interface vlan 95 no shutdown ip address 192.168.95.254 255.255.255.0 interface vlan 96 no shutdown ip address 192.168.96.250 255.255.255.0 interface vlan 99 no shutdown ip address 192.168.99.250 255.255.255.0 interface vlan 100 no shutdown ip address 192.168.100.250 255.255.255.0 ! router rip -- Regards, Kim Pedersen Pasetta, Michael wrote: Have you tried to add a route of last resort in the switches router configuration? From: Kim Pedersen To: Enterasys Customer Mailing List Sent: Sat Jun 06 21:23:38 2009 Subject: Re: [enterasys] Vlan configuration issue. Default GW I have a question to add into this interesting thread, which adds a twist to Abhijit's scenario. I have a very similar setup to the diagram below, with the added difference that on my setup the IP addresses of the C3 switch on each of the VLANs (10,20 and 30) is set as the default gateway for the clients connected to the B3 switches. Above C3 switch in the diagram below, I have a firewall / internet router on VLAN 40, and I would like the C3 switch to route all non-local traffic to this firewall. I have been unable to get this to work, as the default route command on the C3 switch seems only to work for the C3 switch itself, and not for any routed networks. Does anyone have experience with this? Regards, Kim Pedersen CNCS Ltd. Pal, Abhijit IN CCU SISL wrote: Hello, I am describing the scenario. Five B3 switches will be connected with one C3 switch. Each B3 SW will be used as L2 SW and they will be in separate Vlan. One server which will be in separate vlan, will be directly connected to C3 switch. Now in C3 SW Vlan routing will happen. Attaching the worst Diagram came out of my best effort. What should I do? Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 * --To unsubscribe from enterasys, send email to lists...@unc.edu with the body
Re: [enterasys] Vlan configuration issue. Default GW
I have a question to add into this interesting thread, which adds a twist to Abhijit's scenario. I have a very similar setup to the diagram below, with the added difference that on my setup the IP addresses of the C3 switch on each of the VLANs (10,20 and 30) is set as the default gateway for the clients connected to the B3 switches. Above C3 switch in the diagram below, I have a firewall / internet router on VLAN 40, and I would like the C3 switch to route all non-local traffic to this firewall. I have been unable to get this to work, as the default route command on the C3 switch seems only to work for the C3 switch itself, and not for any routed networks. Does anyone have experience with this? Regards, Kim Pedersen CNCS Ltd. Pal, Abhijit IN CCU SISL wrote: Hello, I am describing the scenario. Five B3 switches will be connected with one C3 switch. Each B3 SW will be used as L2 SW and they will be in separate Vlan. One server which will be in separate vlan, will be directly connected to C3 switch. Now in C3 SW Vlan routing will happen. Attaching the worst Diagram came out of my best effort. What should I do? Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID: +91 33 2339 9396 Board:+91 33 2339 9000 Fax: +91 33 2339 9001 --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys arch...@mail-archive.com
Re: [enterasys] Vlan configuration issue. Default GW
Have you tried to add a route of last resort in the switches router configuration? From: Kim Pedersen To: Enterasys Customer Mailing List Sent: Sat Jun 06 21:23:38 2009 Subject: Re: [enterasys] Vlan configuration issue. Default GW I have a question to add into this interesting thread, which adds a twist to Abhijit's scenario. I have a very similar setup to the diagram below, with the added difference that on my setup the IP addresses of the C3 switch on each of the VLANs (10,20 and 30) is set as the default gateway for the clients connected to the B3 switches. Above C3 switch in the diagram below, I have a firewall / internet router on VLAN 40, and I would like the C3 switch to route all non-local traffic to this firewall. I have been unable to get this to work, as the default route command on the C3 switch seems only to work for the C3 switch itself, and not for any routed networks. Does anyone have experience with this? Regards, Kim Pedersen CNCS Ltd. Pal, Abhijit IN CCU SISL wrote: Hello, I am describing the scenario. Five B3 switches will be connected with one C3 switch. Each B3 SW will be used as L2 SW and they will be in separate Vlan. One server which will be in separate vlan, will be directly connected to C3 switch. Now in C3 SW Vlan routing will happen. Attaching the worst Diagram came out of my best effort. [cid:part1.05090001.05040003@cncsltd.com] What should I do? Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 * --To unsubscribe from enterasys, send email to lists...@unc.edumailto:lists...@unc.edu with the body: unsubscribe enterasys mpase...@enterasys.com --- To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys arch...@mail-archive.com inline: ATT1.jpg
[enterasys] Vlan configuration issue.
Hello, We have recently bought 10-12 Enterasys switches out of which 2-3 are SecureStack C3 and rest are SecureStack B3. We have planned to use B3 switches as L2 and C3 as L3. L2 switches will have vlan configured in it. The L3 switches will be used for Vlan routing. The links between L3 and L2 switches will be trunks. So how will I define a port as trunk port??? Need immediate help. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply e-mail and delete this e-mail and its attachments from your system. Thank You. --- To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys arch...@mail-archive.com
Re: [enterasys] Vlan configuration issue.
Set vlan egress ge.1.49 tagged The tagged option is the 801.Q trunk that you need. Regards, Hugo Veiga Hello, We have recently bought 10-12 Enterasys switches out of which 2-3 are SecureStack C3 and rest are SecureStack B3. We have planned to use B3 switches as L2 and C3 as L3. L2 switches will have vlan configured in it. The L3 switches will be used for Vlan routing. The links between L3 and L2 switches will be trunks. So how will I define a port as trunk port??? Need immediate help. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID: 91 33 2339 9396 Board:91 33 2339 9000 Fax: 91 33 2339 9001 Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply e-mail and delete this e-mail and its attachments from your system. Thank You. --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys hve...@ubi.pt UBI amiga do ambiente: Antes de imprimir este e-mail pense bem se tem mesmo que o fazer. As árvores são um bem imprescindível. --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys arch...@mail-archive.com
RE: [enterasys] Vlan configuration issue.
Hello, Appreciate your quick response. But still it's not so clear. Cause Cisco concepts are not getting out of my mind. Oh God please help...:). Suppose ge.1.1 is the L2 switch port which is connected to L3 switch. And I want all traffic from different vlan configured on that L2 switch will reach the L3 switch through the same ge.1.1 port and vlan routing will take place. What should be the configuration in L2 and L3 switch Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: Adell Querol, Christian [mailto:cadel...@tv3.cat] Sent: Wednesday, June 03, 2009 4:19 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hi, You don't need to define a port as trunk port, you only have to put the port in the egress table for the vlans you need. For example, set vlan create 2 set vlan create 3 set vlan egress 2 ge.1.1 set vlan egress 3 ge.1.1 With this configuration you are sending frames from vlans 2 and 3 through this port. You can check it using show port egress ge.1.1 You can implement more options, but this is the basic configuration. Regards, Christian Adell Querol Servei Informàtic de Comunicacions de Producció c/ de la TV3 s/n · 08970 Sant Joan Despí (Baix Llobregat) Telèfon 93 552 80 88 www.tv3.cathttp://www.tv3.cat/ http://www.tv3.cat/ De: Pal, Abhijit IN CCU SISL [mailto:abhijit@siemens.com] Enviat: miércoles, 03 de junio de 2009 12:43 Per a: Enterasys Customer Mailing List Tema: [enterasys] Vlan configuration issue. Hello, We have recently bought 10-12 Enterasys switches out of which 2-3 are SecureStack C3 and rest are SecureStack B3. We have planned to use B3 switches as L2 and C3 as L3. L2 switches will have vlan configured in it. The L3 switches will be used for Vlan routing. The links between L3 and L2 switches will be trunks. So how will I define a port as trunk port??? Need immediate help. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply e-mail and delete this e-mail and its attachments from your system. Thank You. * --To unsubscribe from enterasys, send email to lists...@unc.edumailto:lists...@unc.edu with the body: unsubscribe enterasys cadel...@tv3.cat * --To unsubscribe from enterasys, send email to lists...@unc.edumailto:lists...@unc.edu with the body: unsubscribe enterasys abhijit@siemens.com Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply e-mail and delete this e-mail and its attachments from your system. Thank You. --- To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys arch...@mail-archive.com
AW: [enterasys] Vlan configuration issue.
Hello Pal, as you know Cisco`s solution is only to define a port as a trunk port to send all vlan packets to a router or layer-3-engine. This trunk port sends all traffic from VLAN 1 to 4xxx as dot1q or isl tagged. You could achieve the same (trunk port) with Enterasys when setting set vlan egress 3 ge.1.1 tagged for each vlan, where 3 is the vlan. -- or Management with NetSight Console VLAN Tab ... Best regards, Andreas Schießlbauer Senior Consultant EDV-BV GmbH Wernberger Str. 44 92536 Pfreimd Fon: +49 9606 9201 37 Fax: +49 9606 9201937 Mail: andreas.schiesslba...@edv-bv.de Internet: www.edv-bv.dehttp://www.edv-bv.de/ Ab sofort sind wir ebenfalls unter zwei neuen Support Hotlines erreichbar: Abteilung Durchwahl E-Mailadresse Hotline Netzwerktechnik 09606-9201-88 netzwerktech...@edv-bv.demailto:netzwerktech...@edv-bv.de Hotline Druckertechnik 09606-9201-99 druckertech...@edv-bv.demailto:druckertech...@edv-bv.de Naeheres dazu finden Sie HIERhttp://www.edv-bv.de/. hr Rechtsform: Gesellschaft mit beschraenkter Haftung (GmbH) Sitz der Gesellschaft: Pfreimd Registergericht: Amtsgericht Amberg HRB 564 Geschaeftsfuehrerin: Alexandra Reis Ust.ID DE 131 833 341 Steuer-Nr. 211 125 2001 Hinweis: Die E-Mail kann vertrauliche Informationen enthalten. Wenn Sie nicht in der Adressaten Liste aufgefuehrt sind, ignorieren Sie diese E-Mail bitte, oeffnen Sie keine Anhaenge und kontaktieren Sie bitte umgehend den Absender (siehe oben). This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. Von: Pal, Abhijit IN CCU SISL [mailto:abhijit@siemens.com] Gesendet: Mittwoch, 3. Juni 2009 13:50 An: Enterasys Customer Mailing List Betreff: RE: [enterasys] Vlan configuration issue. Hello, Appreciate your quick response. But still it's not so clear. Cause Cisco concepts are not getting out of my mind. Oh God please help...:). Suppose ge.1.1 is the L2 switch port which is connected to L3 switch. And I want all traffic from different vlan configured on that L2 switch will reach the L3 switch through the same ge.1.1 port and vlan routing will take place. What should be the configuration in L2 and L3 switch Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: Adell Querol, Christian [mailto:cadel...@tv3.cat] Sent: Wednesday, June 03, 2009 4:19 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hi, You don't need to define a port as trunk port, you only have to put the port in the egress table for the vlans you need. For example, set vlan create 2 set vlan create 3 set vlan egress 2 ge.1.1 set vlan egress 3 ge.1.1 With this configuration you are sending frames from vlans 2 and 3 through this port. You can check it using show port egress ge.1.1 You can implement more options, but this is the basic configuration. Regards, Christian Adell Querol Servei Informàtic de Comunicacions de Producció c/ de la TV3 s/n · 08970 Sant Joan Despí (Baix Llobregat) Telèfon 93 552 80 88 www.tv3.cathttp://www.tv3.cat/ De: Pal, Abhijit IN CCU SISL [mailto:abhijit@siemens.com] Enviat: miércoles, 03 de junio de 2009 12:43 Per a: Enterasys Customer Mailing List Tema: [enterasys] Vlan configuration issue. Hello, We have recently bought 10-12 Enterasys switches out of which 2-3 are SecureStack C3 and rest are SecureStack B3. We have planned to use B3 switches as L2 and C3 as L3. L2 switches will have vlan configured in it. The L3 switches will be used for Vlan routing. The links between L3 and L2 switches will be trunks. So how will I define a port as trunk port??? Need immediate help. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 Important notice: This e-mail and any attachment there to contains corporate proprietary
RE: [enterasys] Vlan configuration issue.
Hi, On the L2 you simply have to modify the egress list as stated below. If you create for example two VLANs on the L2, you just have to include the uplink port in the VLAN egress list. I will copy Christians example: # create first vlan with id 2 set vlan create 2 # create second vlan with id 3 set vlan create 3 # Now tell both VLANs to send their packets over the trunk port: # include the uplink port in the egress list of vlan id 2 set vlan egress 2 ge.1.1 tagged # include the uplink port in the egress list of vlan id 3 set vlan egress 3 ge.1.1 tagged That's it! A 802.1q VLAN trunk port means only that you have multiple VLANs going over the same wire. In the default configuration, the L3 will accept all incoming VLAN tagged packets, coming over the trunk. Just don't enable ingress filtering on the uplink port on the L3. Take care Tom From: Pal, Abhijit IN CCU SISL [mailto:abhijit@siemens.com] Sent: Wednesday, June 03, 2009 1:50 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hello, Appreciate your quick response. But still it's not so clear. Cause Cisco concepts are not getting out of my mind. Oh God please help...J. Suppose ge.1.1 is the L2 switch port which is connected to L3 switch. And I want all traffic from different vlan configured on that L2 switch will reach the L3 switch through the same ge.1.1 port and vlan routing will take place. What should be the configuration in L2 and L3 switch Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: Adell Querol, Christian [mailto:cadel...@tv3.cat] Sent: Wednesday, June 03, 2009 4:19 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hi, You don't need to define a port as trunk port, you only have to put the port in the egress table for the vlans you need. For example, set vlan create 2 set vlan create 3 set vlan egress 2 ge.1.1 set vlan egress 3 ge.1.1 With this configuration you are sending frames from vlans 2 and 3 through this port. You can check it using show port egress ge.1.1 You can implement more options, but this is the basic configuration. Regards, Christian Adell Querol Servei Informàtic de Comunicacions de Producció c/ de la TV3 s/n · 08970 Sant Joan Despí (Baix Llobregat) Telèfon 93 552 80 88 www.tv3.cat http://www.tv3.cat/ De: Pal, Abhijit IN CCU SISL [mailto:abhijit@siemens.com] Enviat: miércoles, 03 de junio de 2009 12:43 Per a: Enterasys Customer Mailing List Tema: [enterasys] Vlan configuration issue. Hello, We have recently bought 10-12 Enterasys switches out of which 2-3 are SecureStack C3 and rest are SecureStack B3. We have planned to use B3 switches as L2 and C3 as L3. L2 switches will have vlan configured in it. The L3 switches will be used for Vlan routing. The links between L3 and L2 switches will be trunks. So how will I define a port as trunk port??? Need immediate help. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply e-mail and delete this e-mail and its attachments from your system. Thank You. * --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys cadel...@tv3.cat * --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys abhijit@siemens.com Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply e-mail and delete this e-mail and its attachments from your system. Thank You. * --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys thomas.hofm...@elektrobit.com Please note: This e-mail may contain confidential information intended solely for the addressee. If you have received this e-mail in error, please do not disclose it to anyone, notify the sender promptly, and delete the message from your system. Thank you. --- To unsubscribe from
RE: [enterasys] Vlan configuration issue.
I would suggest something like this (assuming you have cleared configs on the switches just in case something in the old config conflicts with the new): L2 switch as follows: set vlan create 2 set vlan create 3 set vlan egress 2 ge.1.1 tagged set vlan egress 3 ge.1.1 tagged (you must tag the VLAN on transmit (egress) else the other end won't know which packet belongs to which VLAN when it receives it!!) L3 switch: set vlan create 2 set vlan create 3 set vlan egress 2 ge.1.1 tagged set vlan egress 3 ge.1.1 tagged (this mirrors the L2 switch VLAN and port config) To verify that your VLANs are OK across the trunk, try attaching PCs to some test ports (one in each VLAN on each switch) and pinging between the switches. Test port: Set port vlan ge.1.2 2 modify-egress (i.e. untagged) Set port vlan ge.1.3 3 modify-egress Do this on each switch. If ping doesn't work, check MAC-tables e.g. show mac fid 2 and look for LEARNED MAC addresses. If all is well, then you can try the router config. In the router config you must assign IP-addresses to these VLANs and remember 'no shutdown'. As I recall, the VLAN must be UP in order for the router interface to work! Hope I didn't miss anything - was writing from memory. Regards Stephen Oslo University Hospital (In compliance with the Security Policy of Rikshospitalet HF , the content of this message (including any attachments) is of a non-sensitive nature) From: Pal, Abhijit IN CCU SISL [mailto:abhijit@siemens.com] Sent: Wednesday, June 03, 2009 1:50 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hello, Appreciate your quick response. But still it's not so clear. Cause Cisco concepts are not getting out of my mind. Oh God please help...:). Suppose ge.1.1 is the L2 switch port which is connected to L3 switch. And I want all traffic from different vlan configured on that L2 switch will reach the L3 switch through the same ge.1.1 port and vlan routing will take place. What should be the configuration in L2 and L3 switch Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: Adell Querol, Christian [mailto:cadel...@tv3.cat] Sent: Wednesday, June 03, 2009 4:19 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hi, You don't need to define a port as trunk port, you only have to put the port in the egress table for the vlans you need. For example, set vlan create 2 set vlan create 3 set vlan egress 2 ge.1.1 set vlan egress 3 ge.1.1 With this configuration you are sending frames from vlans 2 and 3 through this port. You can check it using show port egress ge.1.1 You can implement more options, but this is the basic configuration. Regards, Christian Adell Querol Servei Informàtic de Comunicacions de Producció c/ de la TV3 s/n · 08970 Sant Joan Despí (Baix Llobregat) Telèfon 93 552 80 88 www.tv3.cathttp://www.tv3.cat/ De: Pal, Abhijit IN CCU SISL [mailto:abhijit@siemens.com] Enviat: miércoles, 03 de junio de 2009 12:43 Per a: Enterasys Customer Mailing List Tema: [enterasys] Vlan configuration issue. Hello, We have recently bought 10-12 Enterasys switches out of which 2-3 are SecureStack C3 and rest are SecureStack B3. We have planned to use B3 switches as L2 and C3 as L3. L2 switches will have vlan configured in it. The L3 switches will be used for Vlan routing. The links between L3 and L2 switches will be trunks. So how will I define a port as trunk port??? Need immediate help. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply e-mail and delete this e-mail and its attachments from your system. Thank You. * --To unsubscribe from enterasys, send email to lists...@unc.edumailto:lists...@unc.edu with the body: unsubscribe enterasys cadel...@tv3.cat * --To unsubscribe from enterasys, send email to lists...@unc.edumailto:lists...@unc.edu with the body: unsubscribe enterasys abhijit@siemens.com Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply e-mail and delete this e-mail and its attachments from your system. Thank You. * --To unsubscribe from
RE: [enterasys] Vlan configuration issue.
Hello, If I create vlan20 and vlan 30 on L3 switch then do I have to issue any other command on that switch for inter vlan routing? Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: thomas.hofm...@elektrobit.com [mailto:thomas.hofm...@elektrobit.com] Sent: Wednesday, June 03, 2009 5:51 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hi, On the L2 you simply have to modify the egress list as stated below. If you create for example two VLANs on the L2, you just have to include the uplink port in the VLAN egress list. I will copy Christians example: # create first vlan with id 2 set vlan create 2 # create second vlan with id 3 set vlan create 3 # Now tell both VLANs to send their packets over the trunk port: # include the uplink port in the egress list of vlan id 2 set vlan egress 2 ge.1.1 tagged # include the uplink port in the egress list of vlan id 3 set vlan egress 3 ge.1.1 tagged That's it! A 802.1q VLAN trunk port means only that you have multiple VLANs going over the same wire. In the default configuration, the L3 will accept all incoming VLAN tagged packets, coming over the trunk. Just don't enable ingress filtering on the uplink port on the L3. Take care Tom From: Pal, Abhijit IN CCU SISL [mailto:abhijit@siemens.com] Sent: Wednesday, June 03, 2009 1:50 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hello, Appreciate your quick response. But still it's not so clear. Cause Cisco concepts are not getting out of my mind. Oh God please help...:). Suppose ge.1.1 is the L2 switch port which is connected to L3 switch. And I want all traffic from different vlan configured on that L2 switch will reach the L3 switch through the same ge.1.1 port and vlan routing will take place.. What should be the configuration in L2 and L3 switch Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: Adell Querol, Christian [mailto:cadel...@tv3.cat] Sent: Wednesday, June 03, 2009 4:19 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hi, You don't need to define a port as trunk port, you only have to put the port in the egress table for the vlans you need. For example, set vlan create 2 set vlan create 3 set vlan egress 2 ge.1.1 set vlan egress 3 ge.1.1 With this configuration you are sending frames from vlans 2 and 3 through this port. You can check it using show port egress ge.1.1 You can implement more options, but this is the basic configuration. Regards, Christian Adell Querol Servei Informàtic de Comunicacions de Producció c/ de la TV3 s/n · 08970 Sant Joan Despí (Baix Llobregat) Telèfon 93 552 80 88 www.tv3.cathttp://www.tv3.cat/ De: Pal, Abhijit IN CCU SISL [mailto:abhijit@siemens.com] Enviat: miércoles, 03 de junio de 2009 12:43 Per a: Enterasys Customer Mailing List Tema: [enterasys] Vlan configuration issue. Hello, We have recently bought 10-12 Enterasys switches out of which 2-3 are SecureStack C3 and rest are SecureStack B3. We have planned to use B3 switches as L2 and C3 as L3. L2 switches will have vlan configured in it. The L3 switches will be used for Vlan routing. The links between L3 and L2 switches will be trunks. So how will I define a port as trunk port??? Need immediate help. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply e-mail and delete this e-mail and its attachments from your system. Thank You. * --To unsubscribe from enterasys, send email to lists...@unc.edumailto:lists...@unc.edu with the body: unsubscribe enterasys cadel...@tv3.cat * --To unsubscribe from enterasys, send email to lists...@unc.edumailto:lists...@unc.edu with the body: unsubscribe enterasys abhijit@siemens.com Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply e-mail and delete this e-mail and its
Re: [enterasys] Vlan configuration issue.
Tell us exactly what you need. All the vlans, the ip address for all of them and also the uplink ports for the L3 and the L2. Also send witch vlans you need in the access ports of the L2. Me or someone else will send you a complete config. Regards, Hugo Veiga Hello, If I create vlan20 and vlan 30 on L3 switch then do I have to issue any other command on that switch for inter vlan routing? Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID: 91 33 2339 9396 Board:91 33 2339 9000 Fax: 91 33 2339 9001 From: thomas.hofm...@elektrobit.com [mailto:thomas.hofm...@elektrobit.com] Sent: Wednesday, June 03, 2009 5:51 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hi, On the L2 you simply have to modify the egress list as stated below. If you create for example two VLANs on the L2, you just have to include the uplink port in the VLAN egress list. I will copy Christians example: # create first vlan with id 2 set vlan create 2 # create second vlan with id 3 set vlan create 3 # Now tell both VLANs to send their packets over the trunk port: # include the uplink port in the egress list of vlan id 2 set vlan egress 2 ge.1.1 tagged # include the uplink port in the egress list of vlan id 3 set vlan egress 3 ge.1.1 tagged That’s it! A 802.1q VLAN trunk port means only that you have multiple VLANs going over the same wire. In the default configuration, the L3 will accept all incoming VLAN tagged packets, coming over the trunk. Just don’t enable ingress filtering on the uplink port on the L3. Take care Tom From: Pal, Abhijit IN CCU SISL [mailto:abhijit@siemens.com] Sent: Wednesday, June 03, 2009 1:50 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hello, Appreciate your quick response. But still it’s not so clear. Cause Cisco concepts are not getting out of my mind. Oh God please help…J….. Suppose ge.1.1 is the L2 switch port which is connected to L3 switch. And I want all traffic from different vlan configured on that L2 switch will reach the L3 switch through the same ge.1.1 port and vlan routing will take place.. What should be the configuration in L2 and L3 switch Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID: 91 33 2339 9396 Board:91 33 2339 9000 Fax: 91 33 2339 9001 From: Adell Querol, Christian [mailto:cadel...@tv3.cat] Sent: Wednesday, June 03, 2009 4:19 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hi, You don't need to define a port as trunk port, you only have to put the port in the egress table for thevlans you need. For example, set vlan create 2 set vlan create 3 set vlan egress 2 ge.1.1 set vlan egress 3 ge.1.1 With this configuration you are sending frames from vlans 2 and 3 through this port. You can check itusing show port egress ge.1.1 You can implement more options, but this is the basic configuration. Regards, Christian Adell Querol Servei Informàtic de Comunicacions de Producció c/ de la TV3 s/n · 08970 Sant Joan Despí (Baix Llobregat) Telèfon 93 552 80 88 www.tv3.cat De: Pal, Abhijit IN CCU SISL [mailto:abhijit@siemens.com] Enviat: miércoles, 03 de junio de 2009 12:43 Per a: Enterasys Customer Mailing List Tema: [enterasys] Vlan configuration issue. Hello, We have recently bought 10-12 Enterasys switches out of which 2-3 are SecureStack C3 and rest are SecureStack B3. We have planned to use B3 switches as L2 and C3 as L3. L2 switches will have vlan configured in it. The L3 switches will be used for Vlan routing. The links between L3 and L2 switches will be trunks. So how will I define a port as trunk port??? Need immediate help. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID: 91 33 2339 9396 Board:91 33 2339 9000 Fax: 91 33 2339 9001 Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply e-mail and delete this e-mail and its attachments from your system. Thank You. --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys cadel...@tv3.cat --To unsubscribe from enterasys, send email to lists...@unc.edu with the body: unsubscribe enterasys abhijit@siemens.com Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply
RE: [enterasys] Vlan configuration issue.
Abhijit To get the C3s to route between the vlans, you enter 'router' mode. #router #enable #configure t #(conf) interface vlan 20 #(conf interface) ip address n.n.n.n m.m.m.m #(conf interface) no shutdown #(conf interface) exit $(conf). Very Cisco like and easy to understand. Billo Data Communications Co-Ordinator Information Technology Telecommunications Hunter New England Health Service ph 0249 213804 fax 0249 213038 william.ol...@hnehealth.nsw.gov.au Pal, Abhijit IN CCU SISL abhijit@siemens.com Wednesday, 3 June 2009 Hello, If I create vlan20 and vlan 30 on L3 switch then do I have to issue any other command on that switch for inter vlan routing? Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: thomas.hofm...@elektrobit.com [mailto:thomas.hofm...@elektrobit.com] Sent: Wednesday, June 03, 2009 5:51 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hi, On the L2 you simply have to modify the egress list as stated below. If you create for example two VLANs on the L2, you just have to include the uplink port in the VLAN egress list. I will copy Christians example: # create first vlan with id 2 set vlan create 2 # create second vlan with id 3 set vlan create 3 # Now tell both VLANs to send their packets over the trunk port: # include the uplink port in the egress list of vlan id 2 set vlan egress 2 ge.1.1 tagged # include the uplink port in the egress list of vlan id 3 set vlan egress 3 ge.1.1 tagged That's it! A 802.1q VLAN trunk port means only that you have multiple VLANs going over the same wire. In the default configuration, the L3 will accept all incoming VLAN tagged packets, coming over the trunk. Just don't enable ingress filtering on the uplink port on the L3. Take care Tom From: Pal, Abhijit IN CCU SISL [mailto:abhijit@siemens.com] Sent: Wednesday, June 03, 2009 1:50 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hello, Appreciate your quick response. But still it's not so clear. Cause Cisco concepts are not getting out of my mind. Oh God please help...:). Suppose ge.1.1 is the L2 switch port which is connected to L3 switch. And I want all traffic from different vlan configured on that L2 switch will reach the L3 switch through the same ge.1.1 port and vlan routing will take place.. What should be the configuration in L2 and L3 switch Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 From: Adell Querol, Christian [mailto:cadel...@tv3.cat] Sent: Wednesday, June 03, 2009 4:19 PM To: Enterasys Customer Mailing List Subject: RE: [enterasys] Vlan configuration issue. Hi, You don't need to define a port as trunk port, you only have to put the port in the egress table for the vlans you need. For example, set vlan create 2 set vlan create 3 set vlan egress 2 ge.1.1 set vlan egress 3 ge.1.1 With this configuration you are sending frames from vlans 2 and 3 through this port. You can check it using show port egress ge.1.1 You can implement more options, but this is the basic configuration. Regards, Christian Adell Querol Servei Informàtic de Comunicacions de Producció c/ de la TV3 s/n · 08970 Sant Joan Despí (Baix Llobregat) Telèfon 93 552 80 88 www.tv3.cathttp://www.tv3.cat/ De: Pal, Abhijit IN CCU SISL [mailto:abhijit@siemens.com] Enviat: miércoles, 03 de junio de 2009 12:43 Per a: Enterasys Customer Mailing List Tema: [enterasys] Vlan configuration issue. Hello, We have recently bought 10-12 Enterasys switches out of which 2-3 are SecureStack C3 and rest are SecureStack B3. We have planned to use B3 switches as L2 and C3 as L3. L2 switches will have vlan configured in it. The L3 switches will be used for Vlan routing. The links between L3 and L2 switches will be trunks. So how will I define a port as trunk port??? Need immediate help. Best Regards, Abhijit Pal SIEMENS Information systems Limited. GO/ GTAS(Global Technology Application Services) 13th Floor, Tower-2,Millenium City Bldg, DN-62,Sector-5,SaltLake, Kolkata-700091. DID:+91 33 2339 9396 Board:+91 33 2339 9000 Fax:+91 33 2339 9001 Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply e-mail and delete this e-mail and its attachments from your system. Thank You. * --To unsubscribe
