If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.
i've just spent an entire day (and several total previous to today) troubleshooting vlan issues on enterasys securestack switches so if they are similar (sorry have no exp. with matrix line) then I can help:
on the switch cli enter command:
set create vlan X
set vlan name X "VLAN_name"
(X=the vlan id)
this will create vlan X, and name it "VLAN_name"
then assign the ports you want in each vlan. enterasys handles ingress and egress separately. assign ingress vlan using:
set port vlan [port-string] X
port string is the port number. for me it was ge.1.x. you can specify multiple ports using * or - (ports 1-48 would be ge.1.* or ge.1.1-48)
assign egress vlan:
set vlan egress X ge.1.x untagged
(note the syntax is reversed between the 'set port vlan' and 'set vlan egress' commands.)
assign an ip address to the vlan interface:
router
enable
config
interface vlan X
ip address a.b.c.d m.a.s.k
no shutdown
exit
exit
exit
exit
example -- for shoretel phones and PCs on ports 1-40 shoretel switches/server on 41-44, and vlan 1 traffic on ports 45-48
set vlan name 1 "Management"
set create vlan 10
set vlan name 10 "Voice"
set port vlan ge.1.41-44 10
clear vlan egress 1 ge.1.41-44
set vlan egress 10 ge1.1-40 tagged
set vlan egress 10 ge.1.41-44 untagged
router
enable
config
interface vlan 1
no shutdown
ip address 192.168.1.1 255.255.255.0
exit
interface vlan 10
no shutdown
ip address 192.168.10.1 255.255.255.0
exit
exit
exit
exit
note: i've found that having your internet gateway on the same vlan/subnet as your hosts can cause web browsing problems. YMMV. And I'll leave it up to you to decide whether to use vlan 1 for hosts.
I had the same issue with my Extreme switches... ended up to be that I forgot to make the switch port that had my dhcp server on it to be a trunk port so it would see all vlans
Comment