[c-nsp] Cisco VLAN configuration - total newbie

[Patrick Bohannon]

Nate,

I suspect that you need to designate your Fa0/23 port as trunking:

int fa0/23
switchport mode trunk

.. So that it will tag your VLAN traffic to the router for you.

Given what you've described, I'm not sure that you'll need to do anything
like restricting what VLANs are allowed over that trunk, so unless I too am
missing something, I think this will do for you.

Best,

Patrick

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Nate Carlson
Sent: Wednesday, August 11, 2004 4:44 PM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] Cisco VLAN configuration - total newbie

Hey all,

I'm a total newbie to Cisco VLAN configuration, and mostly a newbie to
VLAN's in general. I'd like to reconfigure one of my networks so that I have
a bit more control over it; here is what the network currently looks
like:

Cisco 7206VXR
	e2/0	IP: 10.0.0.254/24, connected to a cisco 2950 switch

Cisco 2950
	vlan1: 	IP: 10.0.0.253/24
	fa0/23:	uplink to e2/2
	fa0/24:	monitor
	fa0/1-22:	customers directly connected

The customers directly connected to fa0/1-22 just use IP's out of the /24;
kind of an ugly config, since any of them can just take another person's IP
and such.

I'd like to set up what I believe is called 'VLAN Trunking', where each
individual port of the 2950 is assigned to a VLAN, and a virtual ethernet
interface is created on the 7206 with a gateway IP for them. Here is the
configuration that I tried:

7206 config:

--
interface Ethernet2/2
 ip address 10.0.0.254 255.255.255.252
 no ip directed-broadcast
 ip route-cache flow
 no ip mroute-cache
 full-duplex
!
interface Ethernet2/2.101
 encapsulation dot1Q 101
 ip address 10.0.0.6 255.255.255.248
 no ip directed-broadcast
--

2950 config:

--
interface FastEthernet0/1
 switchport mode access
 switchport access vlan 101

interface FastEthernet0/23
 ip address 10.0.0.253 255.255.255.252
--

When I bring up the 2950, I am able to ping 10.0.0.254, but a box connected
to Fa0/1 with the IP of 10.0.0.1 is not able to ping 10.0.0.6.  
I know I'm missing something basic (may be going around this the totally
wrong way); I'd appreciate it if someone could clue me in. Thanks!

-- 
Nate Carlson <natecars at real-time.com>   | Phone : (952)943-8700
http://www.real-time.com                | Fax   : (952)943-8500

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/