Any Cisco brains out there? Switch question.

[Dman33]

I have a 24 port 3560 switch. It also has two GBIC slots on it. I want to connect this switch to two seperate LANs.

Basically it would look like this:
Ethernet ports 1-12 and the GBIC 1 would go to one switch on a data LAN.
Ethernet ports 13-24 and the GBIC 2 would go to another switch on a VoIP LAN.

I know that I should be able to do this with two VLANs but for some reason I must be messing up on the config for the Gigabit ports. The switches that this switch will connect to will not have to be aware of the VLANs... the VLAN info can reside within this one switch alone for all I care.

I hope this makes sense. I am probably messing up on one simple detail or something. I just do not want data traffic going to the VoIP network and vice-versa.

[rajatQ2]

Hey Dman,
Can you post your config file. Snip out most ports. I work at cisco, i write network access control. I'm using a cat 3750 right now. Might be able to help you :)

[Dman33]

Hey Dman,
Can you post your config file. Snip out most ports. I work at cisco, i write network access control. I'm using a cat 3750 right now. Might be able to help you :)

Thanks for offering to help! Okay, the switch is brand new so you can assume it is in a default state. The beginning of the config starts like this:
hostname BBGNYSW5
!
no aaa new-model
ip subnet-zero
!
no file verify auto
!
spanning-tree mode rapid-pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!

The ports that will go to the phones (13 - 24) are configured like this:

interface FastEthernet0/13
description IP Phone Connection 25th floor
switchport trunk encapsulation dot1q
switchport mode trunk
switchport voice vlan 2
switchport priority extend cos 3
spanning-tree portfast
!

Now, this is the config for the gigabit port that goes to the voice switch:
interface GigabitEthernet0/2
description Connects to BBGNYSW2-Gig4
switchport trunk encapsulation dot1q
switchport mode trunk
!
My guess is that this port should be in access mode instead of trunk? I need to tie the voice vlan (2) to this port and no others. When I try though, it does not seem to work.

The other ports (1-12) will be configured as follows:
interface FastEthernet0/1
description Data Connection
switchport trunk encapsulation dot1q
switchport mode trunk
switchport voice vlan 4
spanning-tree portfast
!

and lastly is the config for the other gigabit connection:
interface GigabitEthernet0/1
description Connects to BBGNY4FL-Gig3
switchport trunk encapsulation dot1q
switchport mode trunk
!
and again, I try to get it running with the vlan4 but it does not seem to take. I suspect that I am missing something rather fundamental.

Thanks!

[IrishSS]

You need to assign what port has access to what VLAN...

switchport trunk allowed vlan 1,4,1001-4092 (or whatever VLANs you want it to have access to.)

Also, ensure the port configs are similar on each side of the connection between the GBICs.

For example...

interface GigabitEthernet0/2
description Connects to BBGNYSW2-Gig4
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 2 (or whatever your vlan needs to be)


The other ports (1-12) will be configured as follows:
interface FastEthernet0/1
description Data Connection
switchport mode access
switchport access allowed vlan 4
switchport voice vlan 4
spanning-tree portfast
!

and lastly is the config for the other gigabit connection:
interface GigabitEthernet0/1
description Connects to BBGNY4FL-Gig3
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 4 (or whatever your vlan needs to be)

Your ports out to your workstations or phones need to be access ports, not trunks. Use trunks between switches.

[Dman33]

I will go give this a try. Thanks!

[rajatQ2]

Dont' forget to define your vlans:


interface Vlan1
ip address 192.168.8.24 255.255.255.0
!