Cisco Systems native vlan for mgmt

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
native vlan for mgmt swpa 07-18-09
Posted by swpa on July 18, 2009, 9:20 pm
Please log in for more thread options
I configured two routers each with a trunk port up to a switch. I have
created subinterface and .1q trunking on the sub interfaces and have trunk
mode set on the switch port with the native vlan set for the vlan I am using
for the management vlan. I set the default gateway on the switch to the L3
address of the vlan interface on the router. I set an ip address on the int
vlan on the switch on the management vlan subnet. I am unable to telnet or
ping to the switches ip address on the management vlan. What am I missing?


Posted by Trendkill on July 19, 2009, 8:29 am
Please log in for more thread options
> I configured two routers each with a trunk port up to a switch. =A0I have
> created subinterface and .1q trunking on the sub interfaces and have trun=
k
> mode set on the switch port with the native vlan set for the vlan I am us=
ing
> for the management vlan. =A0 I set the default gateway on the switch to t=
he L3
> address of the vlan interface on the router. =A0I set an ip address on th=
e int
> vlan on the switch on the management vlan subnet. =A0I am unable to telne=
t or
> ping to the switches ip address on the management vlan. =A0What am I miss=
ing?

The default gateway on the switch is only used for the management
interface. So just to be sure I understand what you have done, your
switch should have an IP in the mgmt vlan, and its gateway should be
the router interface in the mgmt vlan. The rest of the vlans on the
switch are layer 2 and no routing or default gateway statements are
needed for those (at least on the switch side). Also make sure that
the trunks are up and trunking, and you can see all the vlans on the
switch, particularly the one you have designated as the 'mgmt' vlan.

Posted by swpa on July 19, 2009, 12:06 pm
Please log in for more thread options
Yes, I dont have access to my router/switch configuration at the moment and
I done this before and had no problem

My configuration is as follows

I have a router with the fa0/0 configured with sub interfaces my mgmt vlan
100 10.1.10.0/24

router

int fa0/0
no ip address

int loop0 10.1.254.1 255.255.255.255

int fa0/0.100
encap dot1x 100
ip address 10.1.10.1 255.255.255.0
.
.
.
int fa0/0.900
enca dot1x 900
ip address 192.168.1.254 255.255.255.0

router eigrp 19
network 10.0.0.0
auto-summary

ip route 0 0 192.168.1.1



switch

vtp domain MAIN-HQ
vtp mode transparent

vlan 100
name MGTM-VLAN100
.
.
.
vlan 900
name INTERNET-VLAN

int fa0/24
switchport
switchport mode trunk
switchport trunk native vlan 100
switchport trunk all vlan add 100, 200, 300, 400, 900

ip default-gateway 10.1.10.1

int vlan 1
shut

int vlan 100
ip address 10.1.10.15 255.255.255.0

My data and voice vlans are working fine and the phones and laptops are
replying and I can http into the 7960's.

I cannot telnet to the switch or ping the switch on 10.1.10.15 or the router
10.1.10.1 from my workstation, router, or switch. If i am on the router and
try to ping the 10.1.10.15 address of the switch I get no reply and not able
to telnet to it. I can only telnet to the loop0 interface which is what I
want, but I cannot access the switch via the mgmt ip address.

All other vlans and subnet works fine and the phones get their ip address
from the router which is a 1760-V running advanceservices and cme 4.1 the
switch is a 2940 Enhanced Image.







> I configured two routers each with a trunk port up to a switch. I have
> created subinterface and .1q trunking on the sub interfaces and have trunk
> mode set on the switch port with the native vlan set for the vlan I am
> using
> for the management vlan. I set the default gateway on the switch to the L3
> address of the vlan interface on the router. I set an ip address on the
> int
> vlan on the switch on the management vlan subnet. I am unable to telnet or
> ping to the switches ip address on the management vlan. What am I missing?

The default gateway on the switch is only used for the management
interface. So just to be sure I understand what you have done, your
switch should have an IP in the mgmt vlan, and its gateway should be
the router interface in the mgmt vlan. The rest of the vlans on the
switch are layer 2 and no routing or default gateway statements are
needed for those (at least on the switch side). Also make sure that
the trunks are up and trunking, and you can see all the vlans on the
switch, particularly the one you have designated as the 'mgmt' vlan.


Posted by Lawrence Houston on July 19, 2009, 1:59 pm
Please log in for more thread options
: I have a router with the fa0/0 configured with sub interfaces my mgmt vlan
: 100 10.1.10.0/24

: router

: int fa0/0
: no ip address

: int fa0/0.100
: encap dot1x 100
: ip address 10.1.10.1 255.255.255.0

To complete a "Router on a Stick" Configuartion with VLAN 100 as the
Management VLAN, then the Router's Subinterface has to be specified as
the "Native" VLAN:

encapsulation dot1Q 99 native
^^^^^^

: switch

: vlan 100
: name MGTM-VLAN100
: .

: int fa0/24
: switchport
: switchport mode trunk
: switchport trunk native vlan 100
: switchport trunk all vlan add 100, 200, 300, 400, 900

: ip default-gateway 10.1.10.1

: int vlan 1
: shut

: int vlan 100
: ip address 10.1.10.15 255.255.255.0


: I cannot telnet to the switch or ping the switch on 10.1.10.15 or the router
: 10.1.10.1 from my workstation, router, or switch. If i am on the router and
: try to ping the 10.1.10.15 address of the switch I get no reply and not able
: to telnet to it. I can only telnet to the loop0 interface which is what I
: want, but I cannot access the switch via the mgmt ip address.

For the Management VLAN to be accessible from the your Workstation, then
it will also have to be on the 10.1.10.0/24 Subnet...

Lawrence Houston -- (houston@greenfield.dyndns.org)

Similar ThreadsPosted
native vlan for mgmt July 18, 2009, 9:20 pm
Native, and management vlan "Vlan 1" September 21, 2005, 2:50 pm
VLAN Project and Native VLAN July 13, 2007, 5:06 am
Native VLAN February 8, 2007, 9:40 pm
native vlan December 18, 2008, 6:45 am
Native VLAN Warning August 23, 2005, 8:24 am
understanding native VLAN September 23, 2005, 10:10 pm
Native VLAN question November 22, 2005, 5:58 am
native vlan question April 15, 2008, 3:51 am
Change native VLAN on ASA 5520 July 5, 2007, 6:17 am
Native Vlan Mismatch error January 20, 2008, 2:09 am
change native vlan globaly on 3560 January 5, 2007, 2:08 pm
Native VLAN mismatch on Cisco 2950 August 9, 2007, 6:30 pm
Changing native vlan on access port August 12, 2009, 6:53 pm
Native Vlan Cisco 1200 Access Point March 11, 2006, 7:50 pm
Residential Cabling Guide

Home Cabling Guide

Finally, an instantly downloadable book that saves you thousands in home improvement dollars! Enjoy living in 21st century technology-advanced home while increasing its selling value and competitive advantage on the real estate market. Whether your cabling is for home office or high-tech leisure, you can wire your home yourself or learn "wirish" to speak with your cabling contractors in their language!

Learn More