fre2709 Posted January 25, 2017 Posted January 25, 2017 Hi All, Can anyone help with this please? I have inherited a working Cisco network with VLANS set up by the installer. The edge switches are all Catalyst 2960-S. One stack of switches in our server room seems to be doing something strange compared to all the other hub-room stacks. We have several VLANS set up, but not all are in use yet. The two I have an issue with are: VLAN 301 (PC_Vlan301) and VLAN 410 (VOIP). On the stack in question several ports are showing up on both VLANs at the same time. They are access ports rather than trunks, so I didn't think that was possible. Native VLAN for the stack is the default VLAN 1. If I remove a port or a range of ports from VLAN 410 it also disappears from VLAN 301 and reappears in VLAN 1. When I add it to VLAN 301 it duplicates itself in VLAN 410 automatically. It is almost like the VLANS are linked or are being considered to be the same VLAN even though they have different ID numbers and names. Does anyone know how to unravel this issue? I need to leave all bar five of the ports on the 301 vlan and remove them from the 410 vlan. Thanks in advance
Davit2005 Posted January 25, 2017 Posted January 25, 2017 Can you post a config of the switch in question. Please remove any identifying info. Are you trying to programme the switches from the CLI and are you using VTP. Long term, best practice is not to use vLAN 1 at all. Setup a separate vlan i.e. for switch management.
FN-GM Posted January 25, 2017 Posted January 25, 2017 (edited) Hi, This is possible and you don't have any bugs etc. The switchports will have something like the below configured. The switch will put any IP phones in VLAN 410 and other devices in 301. If you have a PC connected through the phone it will put the PC in one VLAN and the Phone in another. Its a feature of the switch. Switchport Access VLAN 301 Switchport Voice VLAN 410 It allows something like the below to be configured. Edited January 25, 2017 by FN-GM
fre2709 Posted January 25, 2017 Author Posted January 25, 2017 Hi, Thanks for the quick replies. As this is the only stack on our network configured like this and other places in the building have phones with PC's hung off them, the question arises as "why this stack and not the others?" However, our VOIP system is not a Cisco one. We use Snom IP phones. We were told that these phones were not capable of behaving like Cisco phones and perhaps that is why the VLAN's on this stack was configured like this. My new questions are then. Although it is a built-in feature of the switch, as the others aren't doing it, is it possible to... A) Turn the feature off? B) Turn it on only for the ports where the daisychained PC scenario exists? Being a Cisco "noob" If either of the two are possible an dummys guide - step-by-step CLI command list would be appreciated. Thanks again in advance.
sultan966 Posted January 25, 2017 Posted January 25, 2017 If you post the config of the switches then we can try to help. Remove any public ip addresses if there is any.
FN-GM Posted January 25, 2017 Posted January 25, 2017 They don't have to be Cisco phones to use the Switchport Voice vlan. Its an industry standard system. A) Its possible by removing it the voice vlan config of each port. B) It is possible, just apply the config to the ports you want.
fre2709 Posted January 25, 2017 Author Posted January 25, 2017 Here it is guys, Sorry if I removed stuff you needed but removed everything with an IP address or password that I could see... ============================================================ #sh running-config Building configuration... Current configuration : 18260 bytes ! version 15.0 no service pad service timestamps debug datetime msec service timestamps log datetime msec ! boot-start-marker boot-end-marker ! aaa new-model ! aaa session-id common clock summer-time BST recurring last Sun Mar 2:00 last Sun Oct 2:00 switch 1 provision ws-c2960s-48lpd-l switch 2 provision ws-c2960s-48lpd-l ! no ip domain-lookup ip domain-name vtp interface vlan911 ! spanning-tree mode rapid-pvst spanning-tree extend system-id ! errdisable recovery cause udld errdisable recovery cause bpduguard errdisable recovery cause security-violation errdisable recovery cause channel-misconfig (STP) errdisable recovery cause pagp-flap errdisable recovery cause dtp-flap errdisable recovery cause link-flap errdisable recovery cause sfp-config-mismatch errdisable recovery cause gbic-invalid errdisable recovery cause psecure-violation errdisable recovery cause port-mode-failure errdisable recovery cause dhcp-rate-limit errdisable recovery cause pppoe-ia-rate-limit errdisable recovery cause mac-limit errdisable recovery cause vmps errdisable recovery cause storm-control errdisable recovery cause inline-power errdisable recovery cause arp-inspection errdisable recovery cause loopback errdisable recovery cause small-frame errdisable recovery cause psp errdisable recovery interval 60 port-channel load-balance src-dst-ip ! vlan internal allocation policy ascending ! interface Port-channel5 switchport trunk native vlan 51 switchport trunk allowed vlan 20,51,99-107,301-306,325,410,510,598,599,700 switchport trunk allowed vlan add 710-713,911,912 switchport mode trunk ! interface FastEthernet0 no ip address shutdown ! interface GigabitEthernet1/0/1 switchport access vlan 101 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/2 switchport access vlan 101 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/3 switchport access vlan 101 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/4 switchport access vlan 101 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/5 switchport access vlan 100 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/6 switchport access vlan 100 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/7 switchport access vlan 100 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/8 switchport access vlan 100 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/9 switchport access vlan 99 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/10 switchport access vlan 99 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/11 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! Port 12 to 19 same as above ! interface GigabitEthernet1/0/20 spanning-tree portfast ! interface GigabitEthernet1/0/21 switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/22 switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/23 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/24 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/25 switchport access vlan 51 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/26 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/27 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/28 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/29 switchport access vlan 51 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/30 switchport access vlan 51 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/31 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/32 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/33 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/34 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/35 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/36 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/37 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/38 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/39 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/40 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet1/0/41 switchport access vlan 51 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/42 switchport access vlan 51 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/43 switchport trunk native vlan 51 switchport trunk allowed vlan 20,51,99-107,301-306,325,410,510,598,599,700 switchport trunk allowed vlan add 710-713,911,912 switchport mode trunk channel-group 5 mode on ! interface GigabitEthernet1/0/44 switchport trunk native vlan 51 switchport trunk allowed vlan 20,51,99-107,301-306,325,410,510,598,599,700 switchport trunk allowed vlan add 710-713,911,912 switchport mode trunk channel-group 5 mode on ! interface GigabitEthernet1/0/45 switchport trunk native vlan 51 switchport trunk allowed vlan 20,51,99-107,301-306,325,410,510,598,599,700 switchport trunk allowed vlan add 710-713,911,912 switchport mode trunk channel-group 5 mode on ! interface GigabitEthernet1/0/46 switchport trunk native vlan 51 switchport trunk allowed vlan 20,51,99-107,301-306,325,410,510,598,599,700 switchport trunk allowed vlan add 710-713,911,912 switchport mode trunk channel-group 5 mode on ! interface GigabitEthernet1/0/47 switchport trunk native vlan 51 switchport trunk allowed vlan 20,51,99-107,301-306,325,410,510,598,599,700 switchport trunk allowed vlan add 710-713,911,912 switchport mode trunk channel-group 5 mode on ! interface GigabitEthernet1/0/48 switchport trunk native vlan 51 switchport trunk allowed vlan 20,51,99-107,301-306,325,410,510,598,599,700 switchport trunk allowed vlan add 710-713,911,912 switchport mode trunk channel-group 5 mode on ! interface GigabitEthernet1/0/49 ! interface GigabitEthernet1/0/50 ! interface TenGigabitEthernet1/0/1 switchport trunk native vlan 911 switchport trunk allowed vlan 20,51,99-107,301-306,325,410,510,598,599,700 switchport trunk allowed vlan add 710-713,911,912 switchport mode trunk udld port aggressive ! interface TenGigabitEthernet1/0/2 switchport trunk native vlan 911 switchport trunk allowed vlan 20,51,99-107,301-306,325,410,510,598,599,700 switchport trunk allowed vlan add 710-713,911,912 switchport mode trunk udld port aggressive ! interface GigabitEthernet2/0/1 switchport access vlan 101 switchport mode access spanning-tree portfast ! interface GigabitEthernet2/0/2 switchport access vlan 101 switchport mode access spanning-tree portfast ! interface GigabitEthernet2/0/3 switchport access vlan 101 switchport mode access spanning-tree portfast ! interface GigabitEthernet2/0/4 switchport access vlan 101 switchport mode access spanning-tree portfast ! interface GigabitEthernet2/0/5 switchport access vlan 100 switchport mode access spanning-tree portfast ! interface GigabitEthernet2/0/6 switchport access vlan 100 switchport mode access spanning-tree portfast ! interface GigabitEthernet2/0/7 switchport access vlan 100 switchport mode access spanning-tree portfast ! interface GigabitEthernet2/0/8 switchport access vlan 100 switchport mode access spanning-tree portfast ! interface GigabitEthernet2/0/9 switchport access vlan 99 switchport mode access spanning-tree portfast ! interface GigabitEthernet2/0/10 switchport access vlan 99 switchport mode access spanning-tree portfast ! interface GigabitEthernet2/0/11 description ***MAC Server*** switchport access vlan 325 switchport mode access switchport voice vlan 410 spanning-tree portfast ! Port 12 to 15 same a above ! interface GigabitEthernet2/0/16 switchport access vlan 51 switchport mode access spanning-tree portfast ! interface GigabitEthernet2/0/17 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/18 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/19 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/20 switchport access vlan 51 switchport mode access spanning-tree portfast ! interface GigabitEthernet2/0/21 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/22 description ***VOIP*** switchport access vlan 410 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/23 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/24 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/25 description ***VOIP*** switchport access vlan 410 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/26 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/27 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/28 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/29 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/30 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/31 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/32 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/33 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/34 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/35 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/36 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/37 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/38 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/39 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/40 switchport access vlan 51 switchport mode access spanning-tree portfast ! interface GigabitEthernet2/0/41 description ***WIFI*** switchport access vlan 51 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/42 switchport access vlan 51 switchport mode access spanning-tree portfast ! interface GigabitEthernet2/0/43 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/44 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/45 description ***SMOOTHWALL INTERNET*** switchport access vlan 912 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/46 description ***UPS*** switchport access vlan 911 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/47 description ***UPS*** switchport access vlan 911 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/48 switchport access vlan 301 switchport mode access switchport voice vlan 410 spanning-tree portfast ! interface GigabitEthernet2/0/49 ! interface GigabitEthernet2/0/50 ! interface TenGigabitEthernet2/0/1 switchport trunk native vlan 911 switchport trunk allowed vlan 20,51,99-107,301-306,325,410,510,598,599,700 switchport trunk allowed vlan add 710-713,911,912 switchport mode trunk udld port aggressive ! interface TenGigabitEthernet2/0/2 switchport trunk native vlan 911 switchport trunk allowed vlan 20,51,99-107,301-306,325,410,510,598,599,700 switchport trunk allowed vlan add 710-713,911,912 switchport mode trunk udld port aggressive ! interface Vlan1 no ip address shutdown ! interface Vlan911 description ***Network Management*** ip address ! ntp source Vlan911 end
fre2709 Posted January 25, 2017 Author Posted January 25, 2017 Hi, Removing the config for 410 on a particular port also seems to be removing from 301. The port then automatically appears in vlan 1. When I tag the port to vlan 301 the switch automatically applies vlan 410 again. This makes me think I may be typing the commands in wrong. Hence my request for a dummy's guide I do... conf t int gi1/0/19 no switchport mode access no switchport access vlan 410 ... to remove from voice vlan, then... switchport access vlan 301 do wr mem exit copy running-config to start-up config exit ...to add it to vlan 301. Am I missing something? Because it just adds itself back to both...
sultan966 Posted January 26, 2017 Posted January 26, 2017 Hi, Please issue the command show vtp domain, show vtp status and show vlan command. and please post them.
sultan966 Posted January 26, 2017 Posted January 26, 2017 Hi, You have not used switchport mode access command. Try that first. Please issue the command show vtp domain, show vtp status and show vlan command. and please post them.
fre2709 Posted January 26, 2017 Author Posted January 26, 2017 Hi, command show vtp domain does not work... Here are the other two. #sh vtp domain ^ % Invalid input detected at '^' marker. ================================== #sh vtp status VTP Version capable : 1 to 3 VTP version running : 1 VTP Domain Name : GSA-VTP VTP Pruning Mode : Enabled VTP Traps Generation : Disabled Device ID : 68bc.0ca5.9b00 Feature VLAN: -------------- VTP Operating Mode : Client Maximum VLANs supported locally : 255 Number of existing VLANs : 35 Configuration Revision : 45 MD5 digest : 0x3E 0xFF 0xD6 0xD2 0xE2 0x0B 0x18 0x21 0x55 0x9E 0x44 0x0A 0x61 0x1B 0xFA 0x7A ================================================ #sh vl VLAN Name Status Ports ---- -------------------------------- --------- ------------------------------- 1 default active Gi1/0/20, Gi1/0/21, Gi1/0/22 Gi1/0/47, Gi1/0/48, Te1/0/2 Te2/0/2 20 wifi_service active 51 WIFI_mgmt active Gi1/0/15, Gi1/0/16, Gi1/0/18 Gi1/0/25, Gi1/0/29, Gi1/0/30 Gi1/0/41, Gi1/0/42, Gi2/0/16 Gi2/0/20, Gi2/0/40, Gi2/0/41 Gi2/0/42 99 iLO active Gi1/0/9, Gi1/0/10, Gi2/0/9 Gi2/0/10 100 HV_Failover active Gi1/0/5, Gi1/0/6, Gi1/0/7 Gi1/0/8, Gi2/0/5, Gi2/0/6 Gi2/0/7, Gi2/0/8 101 HV_Management active Gi1/0/1, Gi1/0/2, Gi1/0/3 Gi1/0/4, Gi2/0/1, Gi2/0/2 Gi2/0/3, Gi2/0/4 102 iSCSI active 103 Domain_Controllers active 104 Terminal_Servers active 105 Mail_servers active 106 MiS_Servers active 107 File_Print_Service active 208 VLAN0208 active 301 PC_Vlan301 active Gi1/0/11, Gi1/0/12, Gi1/0/13 Gi1/0/14, Gi1/0/17, Gi1/0/19 Gi1/0/23, Gi1/0/24, Gi1/0/26 Gi1/0/27, Gi1/0/28, Gi1/0/31 Gi1/0/32, Gi1/0/33, Gi1/0/34 Gi1/0/35, Gi1/0/36, Gi1/0/37 Gi1/0/38, Gi1/0/39, Gi1/0/40 Gi2/0/13, Gi2/0/14, Gi2/0/15 Gi2/0/17, Gi2/0/18, Gi2/0/19 Gi2/0/21, Gi2/0/23, Gi2/0/24 Gi2/0/26, Gi2/0/27, Gi2/0/28 Gi2/0/29, Gi2/0/30, Gi2/0/31 Gi2/0/32, Gi2/0/33, Gi2/0/34 Gi2/0/35, Gi2/0/36, Gi2/0/37 Gi2/0/38, Gi2/0/39, Gi2/0/43 Gi2/0/44, Gi2/0/48 302 PC_Vlan302 active 303 PC_Vlan303 active 304 PC_VLAN304 active 305 PC_VLAN305 active 306 PC_VLAN306 active 325 MAC active Gi2/0/11, Gi2/0/12 410 VoIP active Gi1/0/11, Gi1/0/12, Gi1/0/13 Gi1/0/14, Gi1/0/17, Gi1/0/19 Gi1/0/21, Gi1/0/22, Gi1/0/23 Gi1/0/24, Gi1/0/26, Gi1/0/27 Gi1/0/28, Gi1/0/31, Gi1/0/32 Gi1/0/33, Gi1/0/34, Gi1/0/35 Gi1/0/36, Gi1/0/37, Gi1/0/38 Gi1/0/39, Gi1/0/40, Gi2/0/11 Gi2/0/12, Gi2/0/13, Gi2/0/14 Gi2/0/15, Gi2/0/17, Gi2/0/18 Gi2/0/19, Gi2/0/21, Gi2/0/22 Gi2/0/23, Gi2/0/24, Gi2/0/25 Gi2/0/26, Gi2/0/27, Gi2/0/28 Gi2/0/29, Gi2/0/30, Gi2/0/31 Gi2/0/32, Gi2/0/33, Gi2/0/34 Gi2/0/35, Gi2/0/36, Gi2/0/37 Gi2/0/38, Gi2/0/39, Gi2/0/41 Gi2/0/43, Gi2/0/44, Gi2/0/45 Gi2/0/46, Gi2/0/47, Gi2/0/48 510 wifi_internal active 598 wifi_external active 599 wifi_guest active 700 printers_projectors active 710 cctv active 711 bms active 712 cashless active 713 digital_signature active 911 mgmt active Gi2/0/46, Gi2/0/47 912 internet_p2p active Gi2/0/45 1002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2 ---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------ 1 enet 100001 1500 - - - - - 0 0 20 enet 100020 1500 - - - - - 0 0 GSA-L2S-SRV-001#
sultan966 Posted January 26, 2017 Posted January 26, 2017 Hi, This switch is a client switch. All Vlan information is configured in another switch. That switch is server switch. Look at the configuration in that switch. 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now