GS748TS & vLan Trunks

[ThomasMc]

i thought i would share more info on my setup to see if anyone can spot a problem

Cisco 877 on Port 1 or 1/g1
on the Netgear Switch all ports have PVID of 1
Via the Vlan Mebership page i have added port 1 to all vlans and tagged the port

Port 2 or 1/g2 is an untagged member of vlan2
no DHCP traffic is being serviced on vlan2
from what i have managed to read on the net this should be working so maybe its the router setup thats causing me jip

interface FastEthernet0/0
 switchport mode access
 switchport access vlan 2
!
interface FastEthernet0/1
 switchport mode access
 switchport access vlan 3
!
interface FastEthernet0/2
 switchport mode access
 switchport access vlan 4
!
interface FastEthernet0/3
 switchport mode access
 switchport access vlan 5
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan2
 description NET 2$FW_INSIDE$$ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
 ip address a.b.c.d m.a.s.k
 ip access-group 100 in
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly
 ip route-cache flow
 ip tcp adjust-mss 1452
!
interface Vlan3
 description NET 3$FW_INSIDE$
 ip address a.b.c.d m.a.s.k
 ip access-group 101 in
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly
 ip route-cache flow
!
interface Vlan4
 description NET 4
 ip address a.b.c.d m.a.s.k
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip route-cache flow
!
interface Vlan5
 description NET 5$FW_INSIDE$
 ip address a.b.c.d m.a.s.k
 ip access-group 102 in
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly
 ip route-cache flow
!

[ThomasMc]

after looking at my last post i noticed set my subinterfaces wrong (note to self "/" physical "." sub), will test in the morning and report back

[ThomasMc]

nope that didn't work, shyzer tryed something along the lines of

interface FastEthernet0
 no shutdown
!
interface FastEthernet0.1
 switchport mode access
 switchport access vlan 2
!
interface FastEthernet0.2
 switchport mode access
 switchport access vlan 3
!
interface FastEthernet0.3
 switchport mode access
 switchport access vlan 4
!
interface FastEthernet0.3
 switchport mode access
 switchport access vlan 5
!

[Spice_Weasel]

Try creating a trunk from one of the switchports, e.g.:

int f0
switch mode trunk
switch trunk encap dot1q
switch trunk allow vlan all

Set the ip address for each vlan on the vlan interface. You may have a problem with the number of vlans as the advanced security image only supports a measly 2 vlans, I think. Advanced ip services is the image you'll need.

Also, make sure the native vlan is the same on both the switch and the 877.

Spice_Weasel

[ThomasMc]

Thanks for the reply Spicey, will try this in the morning .

Its a CISCO877-SEC-K9(28/128 although i was thinking about getting a 16mb flash upgarde) : Cisco 877 Security Bundle with Advanced IP Services(would i be correct in saying that it can have a max of 4 vlans?)

[Spice_Weasel]

Yes, 4 vlans max with the advanced ip services. A nice little multifunction router, I like the 870 series - quite a bit of functionality packed into them.

Spice_Weasel

[ThomasMc]

Yip they are pritty cool, and are I'm now even starting to find a little fun in the cisco box but it can still be a little challenging for someone at my level

[ThomasMc]

Originally Posted by Spice_Weasel

Try creating a trunk from one of the switchports, e.g.:

int f0
switch mode trunk
switch trunk encap dot1q
switch trunk allow vlan all

Set the ip address for each vlan on the vlan interface. You may have a problem with the number of vlans as the advanced security image only supports a measly 2 vlans, I think. Advanced ip services is the image you'll need.

Also, make sure the native vlan is the same on both the switch and the 877.

Spice_Weasel

Thanks Spice_Weasel the stick is up and runing now but i made a bit of a booboo i really should have bought a layer 3 switch to route between vlans. After looking at the price of a Layer 3 Gigabit switch i feel i will have to stick with the self impossed bottleneck between vlans and a unorthodox vlan setup

Vlan1 - Management(Routers/Switches etc)
Vlan2 - Gigabit Vlan(3 Servers and 5 Clients)
Vlan3 - FastEthernet Vlan(Remaining Clients with 100FE Cards)
Vlan4 - Voice(Phones)

or try go down the route of teaming the 4 ports from the 877 at the switch side
[rep added]