Create vlan on the 1721 subinterface

i have this problelm with 1721 ,i changed IOS many time but result is same ,
i think maybe it's hardware difference ,
if we want to enableISL or Vlan on a 1721 Router:
first we have to define a subinterface,then we have to define the encapculat
ion ,in this case we can make the subinterface but not the encapsulation,the
procedure is as follow:
Router#configur Terminal
Router(config)#ip routing
Router(config)#interface fastethernet 0.10
Router(config-subif)#Encapsulation
here we have to define the "dot1q" encapsulation but the command is not avai
lable the router said
it is unrecognized command)
that was the procedure to defining the Vlan and i am sure it is not depend t
o the software.
please help me to find way to slove this problem ,
Thanks

Dear Ankur
thanks for your attention
I do according to what you say.it means that I upgrade the ios to c1700-sy7-mz.123-14.T3.bin (ip plus feature) ios ,but unfortunately i could not set vlan on subinteface ,i config like this:
#conf t
#int fa0.3
#encap ?
%unrecognized command
could you pls tell me?
thanks

Similar Messages

Creating VLANS on the current subnet

i have recently been tasked to redesign our LAN, its has been one broadcast 192.168.16.0 subnetted 255.255.248.0. may you kindly assist on how to vlan the network that will have about 400 workstations in 8 departments, 105 mitel ip phones, 60 servers and 50 network printers. Also i want to upgrade my core switches to Catalyst 4500 E-Series

Hello, Thembani.
What access leyer devices do you have (and how many)?
Do you have any security requirements to put the devices into separate VLANs? And opposite: do you have a requirements to keep any kind of devices in the same VLAN?
The best design would be to have:
a stack of L3 switches with a set of VLANs for servers and running L3 links with CORE;
each L3 access switch for end-users/devices running L3 links with CORE (or put on cheap access ports of your 4500);
VoIP devices should be put into voice vlan.
As a result you will have pure L3 routing without VLAN extension (but a pair of server switches);

High CPU when tranferring data between VLANs on the same subinterface

Hi
i have Cisco 2821 with 2 subinterfaces on the G0/0, with 2 different VLANs on them.
When i copy about 60 Mb/s between them, the CPU usage increase to 80-90 %, and start to drop the packets.
The CEF is on on all those subinterfaces.
Any recommendations ?
many thanks
Here is the info about those subinterfaces:
#sh cef interface g0/0.10
GigabitEthernet0/0.10 is up (if_number 5)
Corresponding hwidb fast_if_number 21
Corresponding hwidb firstsw->if_number 2
ICMP redirects are always sent
Per packet load-sharing is disabled
IP unicast RPF check is disabled
Input features: Stateful Inspection, Virtual Fragment Reassembly, Virtual Fragment Reassembly After
Output features: Stateful Inspection, TCP Adjust MSS
IP policy routing is disabled
BGP based policy accounting on input is disabled
BGP based policy accounting on output is disabled
Hardware idb is GigabitEthernet0/0
Fast switching type 1, interface type 27
IP CEF switching enabled
IP CEF switching turbo vector
IP prefix lookup IPv4 mtrie 8-8-8-8 optimized
Input fast flags 0x400061, Output fast flags 0x10181
ifindex 2(2)
Slot Slot unit 0 VC -1
IP MTU 1500
#sh cef interface g0/0.117
GigabitEthernet0/0.117 is up (if_number 21)
Corresponding hwidb fast_if_number 5
Corresponding hwidb firstsw->if_number 2
ICMP redirects are always sent
Per packet load-sharing is disabled
IP unicast RPF check is disabled
Input features: Stateful Inspection, Virtual Fragment Reassembly, Virtual Fragment Reassembly After
Output features: Stateful Inspection
IP policy routing is disabled
BGP based policy accounting on input is disabled
BGP based policy accounting on output is disabled
Hardware idb is GigabitEthernet0/0
Fast switching type 1, interface type 27
IP CEF switching enabled
IP CEF switching turbo vector
IP prefix lookup IPv4 mtrie 8-8-8-8 optimized
Input fast flags 0x400061, Output fast flags 0x10181
ifindex 2(2)
Slot Slot unit 0 VC -1
IP MTU 1500
sh int g0/0 st
GigabitEthernet0/0
Switching path Pkts In Chars In Pkts Out Chars Out
Processor 13584490 436643191 27043759 2436202283
Route cache 70111252 1482061430 60433310 610254739
Total 83695742 1918704621 87477069 3046457022

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Recommendation? Yes, you may need a faster router. At 60 Mbps, you might be bumping into the capacity limitations of the 2821.

Creating VLAN

How is VLANs configured on a switch ? What are the parameters defined while creating a VLAN/ Voice VLAN ? Since switch operates on layer 2 switch, is it required to define vlans on router as well. This might be very simple and basics of networking. Need to understand to clarify my doubts.
Thanks
Feroz
Sent from Cisco Technical Support iPhone App

HI Feroz,
VLAN is a virtual LAN. In technical terms, a VLAN is a broadcast domain created by switches. Normally, it is a router creating that broadcast domain. With VLAN’s, a switch can create the broadcast domain.
This works by, you, the administrator, putting some switch ports in a VLAN other than 1, the default VLAN. All ports in a single VLAN are in a single broadcast domain.
Because switches can talk to each other, some ports on switch A can be in VLAN 10 and other ports on switch B can be in VLAN 10. Broadcasts between these devices will not be seen on any other port in any other VLAN, other than 10. However, these devices can all communicate because they are on the same VLAN. Without additional configuration, they would not be able to communicate with any other devices, not in their VLAN.
Please find the details below:
Vlan on Switches:-
Two types of Vlan(Layer 2 - Layer3)
Layer 2 vlan:
config t# vlan
Eg:
Let’s say we wanted to create VLAN’s 5 and 10. We want to put ports 2 in VLAN 5 (Marketing) and port 3 in VLAN 10 (Human Resources). On a Cisco 2950 switch, here is how you would do it:
# vlan 5
#name marketing
vlan 10
name humanresouces
exit
int f0/2
switchport mode access
switchport access vlan 5
int f0/3
switchport mode access
switchport access vlan 10
Layer 3:
conf t# interface vlan 2
followed by ip address.
Please find below link which explains complete info on VLans.
http://www.cisco.com/en/US/docs/switches/lan/catalyst2950/software/release/12.1_9_ea1/configuration/guide/swvlan.html
2- Vlan on Router:
A vlan configuration on a router is slightly different than on a switch. On a switch, you would create the vlan and then the routed vlan interface.
On a router you tie a vlan to a subinterface. You need to create the subinterface and then do the encapsulation dot1q command. This command basically assigned the vlan to the subinterface. In this example, there are 2 vlans, vlan 100 and 201. On the eth 0/0 interface, I created two subinterfaces. fastethernet0/0.100 and f0/0.201. Notice that I matched the subinterface number with the vlan ID. You do not have to do this, but it is a best practice and really helps you as the administrator keep things organized. So, under f0/0.100, there is the encapsulation dot1q 100, which basically binds vlan 100 to subinterface f0/0.100, then I assigned the IP. The same is for the other subinterface. So the router is trunking two vlans on its f0/0 interface, vlan's 100 and 201.
interface FastEthernet0/0
no ip address
speed 100
full-duplex
interface FastEthernet0/0.100
description test Network
encapsulation dot1Q 100
ip address 192.168.102.1 255.255.255.128
no snmp trap link-status
interface FastEthernet0/0.201
description Office
encapsulation dot1Q 201
ip address 205.127.102.129 255.255.255.128
no snmp trap link-status
Kindly go through the same and reply back if you need any clarification on the same.
HTH
Regards
Inayath
*Plz rate the usefull posts.

How to create VLAN on Cisco PIX 6.3?

Hi,
how to create vlan on pix-6.3? i am bit confused.
how do i assign a single internet face with multiple ip address(not secondary IP address) for each & every vlan?
how to i connect to the switch, i mean if i put "switch port mode trunk" on the switch side, what command should i need on the PIX "inside" interface? in router the command is "encapsulation dot1Q 1"
also is there any restrictions that only limited vlans can be created or it is unlimited?

hi
When you configure your interface, you usualy do it like that
interface ethernet0 auto
interface ethernet1 auto
Let's say that ethernet1 is a trunk with 2 vlan and a native vlan, you need to add to your config:
interface ethernet1 vlan100 logical
interface ethernet1 vlan200 logical
After that you need to name those interfaces and set the security level.
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif vlan200 V200 security4
nameif vlan100 V100 security6
This configuration will give you an interface(eth1) with 1 native vlan(inside) and 2 tagged vlan(v200 and v100)
PIX will not negociate a trunk, your switch config is correct.

Creating Vlans at Core layer switches ?

Is there a need to create vlans at core layer switches ? If yes what are the pros and cons for this practice ?
Actually i have seen some networks doing that!

Well this is the topology that i'm working on.
we have implemented the 3 layer approach.
1. At access layer: Switches are all L2 (for sure :) )
2. At distribution layer: All switches are L3 are routes for incoming data.
3. At core we have 2 6500 switches. One is configured as L3 and all vlans are created in it. Second is just as regular L2 device.
and ofcourse there are some switch blocks for server farms and the likes.
My issue is
1. why don't we create vlans at distribution layer switches.
2. Why one core switch is acting as L2 and other is acting as L3. What will happen in case of failure to the one acting as L3.
Ps: the second issue just came up in my mind.

Problem in creating Vlan on 3550

hi,
I have done stacking between two 3550 siwtches. On one switch already a Vlan is created and network is running. On another switch I have created another Vlan using "int Vlan 79" command and gave an ip address for that VLAN. Enabled routing for this ip address and configured many ports to access this VLAN and connected PCs also. When I give command "sh vlan id 79", the message is "No VLAN is found in database". I have checked the VTP domain mode it was in client mode, then I converted it into server mode, reboot the switch and create Int Vlan again. Result was same. Then just for trying I put command "VLAN 79" in config mode and now everything is running fine. It is showing it in database also.
My question is when we put "Int Vlan" command, generally it creates the VLAN, then why I need to out VLAN 79 command.
This is problem related to concept.
Looking forward for the suggestions.
Thanks

Hi Kanupriya,
When you run the command " Int vlan 79 " and assign and IP to this, you are actually creating a SVI or the layer-3 virtual interface on the switch. This will not create Vlan 79 as a L-2 vlan in the Vlan database. When you run the command " Vlan 79 " that created the Vlan 79 in the Vlan database and you were able to see that Vlan interface. Remember to first define a L2- vlan in Vlan databse always, then configure the ports on this vlan and then define the L3 SVI.
You can also configure the L2 vlan by going into vlan datbase :
Switch# Vlan database
Switch(vlan)# Vlan 79 name V79
Switch(vlan)#exit
HTH,
-amit singh

Want to create vlan on asa5510 (8.2)

User want to create on 5 network , 100.x , 200.x , 210.x , 250.x , 220.x .at the ASA5510, no enough port for 5 network.
So I want to create 4 vlans on eth 0/3. I can create vlan but i cannot run this command "
switchport mode trunk"   "
"switchport trunk allowed vlan list" how can be done for that?Thanks
Acctually i want to use like this
ASA5510-----4 vlans on eth 0/3------switch----vlan200,vlan210,vlan250,vlan220.
Ko Htwe

You don't have to configure "switchport mode trunk" on the ASA interface.
You just have to configure the sub interfaces under eth0/3 and configure vlan under that interface.
Eg:
interface eth0/3.200
   vlan 200
   ip address 200.200.200.1 255.255.255.0
   nameif vlan200-dmz
   security-level 50
interface eth0/3.210
   vlan 210
   ip address 210.210.210.1 255.255.255.0
   nameif vlan210-dmz
   security-level 55
Hope that helps.

Can create vlan group on eth0 after OVM Server installation?

Hi,
I have installed OVM server to use eth0 without vlan segment for ovm manager to manage OVM server.
Now if I want to use eth0 for virtual machine management purpose as well, can I edit this network, create vlan group on eth0,
one for server managent + cluster heartbeat + live migration
one for virtual machine management?
Or I have to reinstall OVM server with vlan segment on eth0?
Appreciate any comment on this.

it was the wrong mfc42.dll version

VLANs for the WiSM

Hi Everybody,
we followed the cisco layered model in our campus design where we have 6500 switch at the core, 4500 at the distribution and 3750 at the access layer.
The connectivity between the core and the distribution is layer 3, the connectivity between the distribution and access layer is layer 2.we have all the intervlan routing on the distribution switches.we have recently installed two WiSM controllers in our core and planning to deploy light weight access points.
we want to use the exiting VLANS that we created for the wired users on the distribution switch for Wireless LAN users . I wanted to know if this is possible because as the dynamic interfaces for the Wireless VLANS would be created on the WiSM that is on the core switch and as the dynamic interface are like SVIs for the Wireless VLANS.
Secondly i wanted to know what does it mean to assign a VLAN to the WiSM
Regards,
Ahmed Zubedi

I would recommend keeping the wired vlan separate from the wireless vlan.
You need to assign a vlan for the service port of the controllers. This is local to the 6500 and is not routeable. This is how the controllers talk to the 6500. I normally do like a 192.168.1.x

Creating VLANs on established Pt to Multi Pt links

Hi all,
I have an exisiting Pt to Multipoint network of 1410 bridges. Connected to each bridge is a 1200 AP. I want to put the clients on one VLAN and the "equipment" on another VLAN.
I think I understand that you have to configure both interfaces on each device, starting with the furthest away device finally doing the root bridge last.
Instead of using the GUI to configure I am going to use the CLI. What I want to know is if I use the CLI and give the commands including a new SSID will I lose contact with the radio after I issue the command but havent finished the config?
I want to do this from the NOC and avoid serious ladder work.
Thanks,
Kim

It is a client thing, isn't it?
The first time they start the application the get asked.
If you want to do it afterwards then you run javaws and select Application/Create shortcuts.
I don't know of a way to force this from the jnlp.

Can't create VLAN's with Cisco Network Assistant

Hello everyone
I have a problem with my newest Switch, a WS-C2960X-48TS-L
Normaly I can programm all my Switches with Cisco Network Assistant. But now I have a problem with creating VLAN's. I can create them, safe them but after a refresh, all the new VLAN's are gone!
I updated the CNA to the newest Build 6.0 and updated the Switch to 15.2(2)E, but nothing helps!
Over the CLI I can do everything, but this is not a option for me! To programm sometimes a switch CNA is perfect for me! If it works!!
Thanks
Tobi

yes I can programm the vlan's over CLI. That's works. I have not tested this if its really works, but the VLAN's are programmed.
hmm I checked the STP / VTP settings with a second identical Switch, but there are no differents. Made a backup of one Switch and restore on the other One, but I'm still not able to create VLAN's.
however, I contacted my vendor today, he tell me that it shouldt be a problem to take back the switch.
Best regards
Tobi

Help create VLAN for home use.

I use Cisco switch SG300 and SG200 series. I set my home network as attach picture.
I want set up VLAN with these condition
1.Every port can connect to internet through ADSL router.
2.VLAN10( Home alarm and IP camera ) can access by internat, connect by access point and PC file server
3.Every port can connect the PC file server
I am new for network and fail to try setup myself and not understand static route.
Thank you.
Jarey
[email protected]

Hi Jarey,
Are you sure you want to do this on the switch as opposed to the router? Are you going to use static IP addresses for the vlans or do you want your router to issue DHCP?
To proceed, using the switch for inter-vlan routing, make sure the SG300 is in layer 3 mode.
1. If you are currently in layer 2 mode, open a CLI connection and issue command:
set system mode router
Take note that this will delete your current config and the switch will reboot.
2. Create the vlans on your switch under VLAN Management -> create vlan
3. Go to IP Configuration -> ipv4 interface and assign each vlan a static IP for the switch in the subnet for the new vlan
4. Vlan Management -> Interface settings. I would leave all the ports as trunk ports, or change the ports to trunk if you have previously changed them.
5. Vlan Management -> Port VLAN membership. Assign your vlans to the appropriate ports.
6. When everything is all plugged in, you should be able to see the switch created static routes for you already under IP Configuration -> IPV4 static routes. Make sure all your subnets are there and are showing route type local
7. You may need to add a route such as 0.0.0.0 with the next hop being your router
At this point, you should be up and running, with all vlans connected to each other and to the internet.
If you want to restrict access across the vlans, you'll have to create access control lists.
You need to first create an ACL (Access control -> IPV4 based ACL) and give it a name. then go over to IPV4 based ACE where you put the actual access control rules.
This is a sample set of rules I made, it will block all access between two subnets (each vlan you created above will have to be its own subnet) and allow certain traffic such as 3389 - remote desktop, etc. You'll need to customize based upon your needs and subnet IPs. So for ex, to allow the Xboxes to access the file server, rather than any - any, you put the xbox subnet or specific IPs as the source, the file server as the destination, and the ports used as source ports. Remember to make the converse of the rule as well.
Then, go to Access Control -> ACL bindings and bind the access control list to the applicable ports.
Hope that helps, good luck with your set up.
Best,
David
Please remember to rate helpful posts and identify correct answers.

Creating VLAN on Cisco 3800 Series

Hello
I am new to networking. We have a Cisco 3800 series router with 64 ports. We have connected servers and PC's directly to the back of the router. Almost all of the ports are used with the exception of few. We would like to create a VLAN for the remaining few ports. I am able to telnet to the router or connect directly using hyper terminal.
I have been told that we cannot create VLAN's directly on the router. For that purpose we need to first get a switch and connect the switch to the router, then create VLAN’s using the switch. Can someone please provide some tips? Any suggestions would be nice…Thanks

Appreciate you getting back. Here is the "show vlan-switch" output
----------------------->
#show vlan-switch
VLAN Name                             Status    Ports
1    default                          active
1002 fddi-default                     active
1003 token-ring-default               active
1004 fddinet-default                  active
1005 trnet-default                    active
VLAN Type SAID       MTU   Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
1    enet 100001     1500 -      -      -        -    -        1002   1003
1002 fddi 101002     1500 -      -      -        -    -        1      1003
1003 tr    101003     1500 1005   0      -        -    srb      1      1002
1004 fdnet 101004     1500 -      -      1        ibm -        0      0
1005 trnet 101005     1500 -      -      1        ibm -        0      0
---------------------->
As before I do not see any VLAN's set up. How come all the ports are not showing up on default VLAN 1. Maybe I can create a new VLAN and assign 2 or 3 ports to it. Please advise...Thanks

Vlan in the wireless lan

Hi to all,
if i create 2 vlan and i configure 2 ssid one for each vlan, this two vlan are created only for the wireless interface? Or i need to reconfigure all the lan equipment for this 2 vlan?
If i configure 2 vlan and the relative ssid i need two bvi interface configured with two different ip-address or i can use only one bvi with one ip address?
Thanks and best regards,
Carlo S.

The vlans are not only created for the wireless interface but also for the ethernet. Then the ethernet interface has to be connected with a switch that supports vlans. After that, it's up to you to do whatever you want with the vlans you created.
You don't need 2 BVI IPs. You only need one to be able to manage the AP

Create vlan on the 1721 subinterface

Similar Messages

Maybe you are looking for