How to "trunk" VLANs between Switches in a Gigastack

I got 3 catalyst 3548XL daisy chained by CX_GIGASTACK modules (half duplex). The 1. switch is connected to a L3 swicth via a trunk. On the 2. and 3. switch connected to the first vis gigastack modules, is it possible 2 have 2 VLANs passing the gigastack links to the 1. Switch?

Hello,
Thanks for your answer. Yes it answers my question - which I admit was not very clear, I was in a hurry. My concern was when the Gigastack module was in half duplex mode, then I was uncertain if it could be configured as trunk. As you se I managed to do that,
Floor1#sh int status | incl Gi0/1
Gi0/1 connected trunk a-half a-1000 1000BaseCX Gigastack
In fact, I was'nt successful until I configured "switchport nonegotiate"
interface GigabitEthernet0/1
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
Once again THANKS.
Simon

Similar Messages

Encrypting vlan-trunk traffic between switches

Hi,
Can anyone guide me to some papers or other resources on how to encrypt traffic between 2 switches. The switchces will be connected with fiber and use dot-1q tagging. And I wan't to encrypt all of the trunked traffic.
I was thinking of L2TP, but I haven't found any good description on how to implement this. I have two 3750 switches I thought I might use.
Thanks for any input,
Regards,
Oyvind Mathiesen
mnemonic
Norway

Hi,
Thanks for the response. I had a look at MACsec and it looks good. I would have liked to employ something P2P though, to also limit the ammount of MAC addresses broadcasted on the "wire". But let me first give you an understanding of the task:
We have two sites, connected via fibre and we want to create a VLAN trunk across and order to expand the broadcast domains to te other site.
The IDIOT carrier, has a limitation on the number of MAC addresses they allow on the fibre service, 100.
We also need to encrypt the datatraversing this connectivity.
MACsec wuold work 100% exept the source and dstination MAC addresses are still sent (at least according to https://docs.google.com/viewer?a=v&q=cache:LEf2qOmYZyYJ:www.ieee802.org/1/files/public/docs2011/bn-hutchison-macsec-sample-packets-0511.pdf+&hl=en&gl=za&pid=bl&srcid=ADGEESgmAHXpDOY0RBAE-Rv1HDpu_C_gkeSPN4cv6NGgyP0M1aXVu0UqzCfxo8t_P41ep6J37k4OLKnjfp1M9hoTDHxY22WGz2h7yB7YRLyPvRUbGS8TICzvEMlG92xqbhy6RWFugmnj&sig=AHIEtbTfu0LQIJejdYidE6yzq4lpPifxjQ
And that would cause me to eat into the 100 MAC limit.
Ridiculous I know, but we are looking for an out-of-the-norm plan...
Thanks

How to connect VLAN between Cat 3750X-24T-S & SG500-52

Does anybody can help me with above topics?
I would like to connect Cat 3750X-24T-S to SG500-52 Uplink (Combo RJ-45 Port).
Thanks,
Willy

In which way do you want to connect these switches? From the information provided, the answer is to connect a RJ45 in to each switch and apply power to both devices and they are connected on VLAN 1.
Can you provide more information such as VLAN and what is your intention to do with the VLANs?

How can I encrypt my data links between switch uplink ports ? I'm unable to use "cts Manual" command in C3560X switch.suggest me

How can I encrypt my data uplinks between switch trunk ports ? I'm unable to use "cts Manual" command in C3560X switch.suggest me as I want to encrypt my switch-to-switch link with Cisco TrustSec.

Hi
Login to switch & go to interface..
There you can give tags.. (ISL & DONT1Q)
Command switch-port mode trunk
Switch-port trunk encapsulation ssl or dot1Q

VLAN between SFE2000P switches

Dear friends,
I've connected two sites with the following configuration:
Site 1:
Stack Linksys SFE2000P - Firmware version 1.0.0.X
Port 1/g3 connected to a FO link to site 2
Oficina 2:
Stack Linksys SFE2000P - Firmware version 3.0.0.X
Port 1/g3 connected to a FO link to site1
I've tried to create a VLAN to communicate only a few ports of both sites:
4/e23 y 4/e24 of site 1
7/e23 y 7/e24 of site 2
To do this, I tried the following:
Port 1/g3 (site1) -> VLAN 50 (tagged) - Trunk
Port 1/g3 (site 2) -> VLAN 50 (tagged) - Trunk
Port 4/e23 y 4/e24 (site1) -> VLAN 50 (untagged)
Port 7/e23 y 7/e24 (site 2) -> VLAN 50 (untagged)
It doesn't work!!!. In the same stack of each site it works without problems. Could you help me??? There is some misconfiguration???
I've stablished other VLANs between Linksys and 3Com Switches, but now it doesn't work at all.
Thanks in advance!

I Did find a same article on this forum. Maybe this would help you. an article coming from GV.
* access mode: an access mode port connects to a normal device like a desktop, printer, or similar. An access mode port can be member of a single VLAN only, i.e. you have to decide to which VLAN it is supposed to belong to. In your case, you configure an access mode port for either VLAN 10 or VLAN 20.
With a single switch things are clear now: some ports are VLAN 10 and some ports are VLAN 20. VLAN 10 can talk to each other. VLAN 20 can talk to each other. No traffic passes between VLAN 10 and VLAN 20.
Of course, now you want to connect this switch to some other network devices, in particular the second SRW because you need additional ports or you have an additional location. And there is the ASA which provides internet access for these VLANs.
* trunk mode: This is where trunk mode comes in. A trunk mode port can carry multiple VLANs on a single port. This is done using 802.1q tags. 802.1q tagged ethernet frames have an additional field for the VLAN to which the frame belongs to. With this, a switch can send frames for VLAN 10 and VLAN 20 through a single port to another switch or router. Each frame sent is tagged with 10 or 20 depending on which VLAN the frame belongs to. The receiver will accept each frame and assign it to the corresponding VLAN on the receiving side. This way the receiving switch or router is able to keep those VLANs strictly separated.
So let's say you want two VLANs 10 & 20 in your network. You would create VLANs 10 & 20 on your ASA and both SRWs. (Create only means that the device knows this VLAN exists and is able to handle traffic for this VLAN). You would configure LAN port 1 of your ASA as trunk with members VLAN 10 & 20. You configure port 1 & 24 of your first SRW in trunk mode with members VLAN 10 & 20. You configure port 1 of your second SRW in trunk mode with members VLAN 10 & 20. Now you wire port 1 of your ASA to port 1 of your first SRW. Then you wire port 24 of your first SRW to port 1 of your second SRW.
This creates the VLAN trunk through your network. Traffic in both VLANs can travel through this trunk between the switches and to the ASA and from there, if properly routed, into the internet.
here is the Link
As the SFE2000P is now part of Cisco Small Business I would recommend you ask your question in the Cisco Small Business Support Community. There are a few Cisco people over there which maybe able to reproduce your problem in a lab environment and check with the developers...

VLANs across switches without trunking

Assuming that you only have one VLAN, is it possible to have that single VLAN reach across multiple switches without trunk ports? I've inherited a network of a handful of Cat 6506s, and Cat4006's, which have one big flat /22 in a single VLAN. I'd like to break it up into smaller chunks and seperate VLANs, but I'm rather suprised that it appears to be working with one VLAN but without trunks.

Actully you can run seperate access port links per vlan, chewing up a seperate physical port per vlan on each switch. There was a 2900 series switch I had a long time ago that supported vlans but not trunks.
It had a feature called multi vlan that you could add to a port, but this was a way of letting one port talk to all vlans and was messy.
But you could run a seperate cable for each vlan. if you have 5 vlans then 5 cables between switch A and switch B, port 1 vlan 1, port 2 vlan2, port 3 vlan3, etc...

Trunk config between two 6500 cat switches

Hi All,
What is the recommended trunk configuration between 2 cisco 6500 switches including hsrp scenario.
Thanks

Hi Samir,
In almost all scenarios, its recommended to have 'dot1q' encapsulation and a static trunk config 'switchport mode trunk'. Matching the native VLAN on both sides is required and will be VLAN1 by default.
When configuring trunks, you should be mindful of VTP, trunk and STP states. Reviewing the following for mismatches between your Cat6K will help:
- show vtp status
- show interfaces trunk
- show spanning-tree
In terms of HSRP, it is also recommended to run HSRP active in the same location as STP Root to avoid any asynchronous routing problems.
/ijay

VLAN between two Cisco 300 switches

Is it possible to share a VLAN between two Cisco 300 series switches?

Make sure that your port 27 is NOT configured as an access port - it should be a trunk (that's the default). I believe the setting is under VLAN Management > Interface settings.
Also ensure you are setup to tag frames (under the "Port to VLAN" settings).

Configure trunk port between 2 SG500 switches

Hi all,
I'm trying to do what seems to be a simple task but cannot get it to work. I've very familiar with the Cisco commands on 2900 all the way up to 6500 series switches. The SG500 has me stumped. I have 3 switches, sw1, sw2, sw3. sw1 and sw2 are stacked. sw3 is standalone and in a different part of the building, maybe 25ft away. All I want to do is set up a trunk port between the stack and the standalone. In going by past experience, I would set the port as :
- switchport mode trunk
- switchport trunk allowed vlan 2,3,4
The SG makes me specify tagged or untagged - which is fine. So any vlan I want to move across the trunk i tag, obviously. I do everything as I've done for years and it doesn't work. VLAN1 is untagged, all VLANs I want to flow are allowed and tagged.
I'm quickly realizing I should have bucked up and just bought what I'm used to but I didn't have a choice in the matter.
Any help would be great!
Shawn

Hi Shawn, something is the matter if the switch is asking you for tagged or untagged. The only reason it should be requesting a tag or untag statement is from a general port mode.
The command syntax for the function is exactly the same as an IOS switch
switchport mode trunk
switchport trunk allowed vlan add 2,3,4
Just like a Catalyst, if you use switchport trunk allowed vlan x,x,x it won't take the command as insufficient privilege or whatever the error it gives, suffice it say it doesn't really do anything without the add(or remove).
-Tom
Please mark answered for helpful posts

Can I use straight cable to connect trunk ports between 2 switches?

Hi,
Am I able to use straight instead of cross cable to connect trunk ports between 2 switches??
thanks!

Hi Devang,
When a 10/100 Fast Ethernet interface is enabled, one end of the link must perform media dependent interface (MDI) crossover (MDIX), so that the transmitter on one end of the data link is connected to the receiver on the other end of the data link (a crossover cable is typically used).
The Auto-MDIX feature eliminates the need for crossover cabling by performing an internal crossover when a straight cable is detected during the auto-negotiation phase.
HTH, if yes please rate the post.
Ankur

How to switch between switches in CLI

Hello,
I have 3 2524's stacked. When I go into CLI mode (telnet) - on the very begining I am asked to choose what switch shoudl I select ..... After selecting, how can I choose other switch without logging out and logging in again ?
Thank you.

Follow the directions here:
http://support.apple.com/kb/ht1311

LAN design - how to implement a core switch?

Hi all,
First post here so please be gentle :-)
I'm looking for a bit of advice with a LAN setup I've been tasked with.
The basic requirements are to have a demonstration suite of servers/storage devices networked with internet access with certain devices segmented in different VLANs. Also, a separate VLAN is required for training and meeting rooms which will receive DHCP addresses from a WIN2K3 server.
The kit I've inherited consists of:
1 ADSL Modem/Router
1 2611XM router
2 Catalyst 4006 switches with Supervisor II engines (CatOS :-( ), one with a layer 3 routing module
Several Catalyst 2950/3500xl switches
Netscreen 100 Firewall
F5 Firepass for VPN
After a lot of fun resetting devices I've currently setup the LAN with a router on a stick configuration which routes between different VLANs (on the 3500/2950s) and which has internet access via the 2611 and ADSL modem router in turn. That's about as far as my current knowledge goes I'm afraid!
What I have to do is incorporate the 4006s but I don't really know how to go about it or what's the best way to use them. How would I use them as core switches?
I was hoping someone could point me in the right direction on the best way to connect the switches up, i.e. network design, cabling (fibre uplinks between switches) and some basic configuration advice with the layer 3 routing module.
Any advice will be most appreciated!! It's my first networking job and I'm a bit lost.
Thanks.

Peter,
I would do the same - with a twist...
Have 1 4006 as a VTP server, also the spanningtree root for all vlans.
Have a trunk between the two 4006's - and make it an etherchannel 2 or 3 ethernet links (redundancy).
Make the second 4006 also a vtp server (redundancy) and have that 4006 the secondary 4006 for spanningtree (more redundancy!)
That way if you decide to have a distribution layer - you have 2 uplinks into the core 1 into 4006-1 as the primary, and the second 4006-2 as the secondary.
You could then have a trunk (etherchannel) between the distribution switches, then have a access layer into the distribution layer with duel links. This way you could have multiple switch and or link failures and still work!!!
You use the layer 3 module to do the inter-vlan routing - correct. Then have your adsl modem/router as the gateway to the internet - you put a default route in the layer 3 module point to the adsl modem! then you have the routes for the various vlan subnets pointing from the modem back to the layer 3 module......done!
HTH.

Trunk to Trunk VLAN

Hi
I have switch A interface 1/0/1 trunk (VLAN 1) is connecting to switch B (VLAN2) interface 1/0/1 trunk. How do I route the packet from VLAN1 in switch A to VLAN 2 in switch B?
Switch A:
interface GigabitEthernet1/0/1
switchport trunk encapsulation dot1q
switchport mode trunk
interface Vlan1
ip address 192.168.1.5 255.255.255.0
Switch B:
interface GigabitEthernet3/0/1
switchport trunk encapsulation dot1q
switchport mode trunk
interface Vlan2
ip address 192.168.1.7 255.255.255.0
Thank you

For Inter-vlan routing you need have a Layer 3 Switch or Router, and use it like a Default Gateway for the Host.
If you have a Layer 3 Switch ( example WS-C3750X-24T-S) you could be try the following:
Switch(config)#ip routing
Switch(config)#vlan 2
Switch(config-vlan)#exit
Switch(config)#vlan 3
Switch(config-vlan)#exit
Switch(config)#interface vlan 2
Switch(config-if)#ip address 192.168.2.1 255.255.255.0
Switch(config-if)#description DEFAULT-GATEWAY FOR VLAN 2
Switch(config-if)#no shutdown
Switch(config-if)#exit
Switch(config)#interface vlan 3
Switch(config-if)#ip address 192.168.3.1 255.255.255.0
Switch(config-if)#description DEFAULT-GATEWAY FOR VLAN 3
Switch(config-if)#no shutdown
Switch(config-if)#exit
Switch(config)#interface fa0/0
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 2
Switch(config-if)#switchport nonegotiate
Switch(config-if)#exit
Switch(config)#interface fa0/1
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 3
Switch(config-if)#switchport nonegotiate
Switch(config-if)#exit
Then connect a Host -> Fa0/0 and Fa0/1
For Host Fa0/0 configure the following addressing:
192.168.2.10
255.255.255.0
192.168.2.1 <- This is the interface vlan on the router, and is the default gateway for the host (vlan 2)
For Host Fa0/1 configure the following addressing:
192.168.3.10
255.255.255.0
192.168.3.1 <- This is the interface vlan on the router, and is the default gateway for the host (vlan 3)
Try executing ping between host, and this will be successful !
You can try this : "show ip route" to verify routing on the switch.
http://www.cisco.com/en/US/tech/tk389/tk815/technologies_configuration_example09186a008019e74e.shtml
Reggards.

How to create VLAN on Cisco PIX 6.3?

Hi,
how to create vlan on pix-6.3? i am bit confused.
how do i assign a single internet face with multiple ip address(not secondary IP address) for each & every vlan?
how to i connect to the switch, i mean if i put "switch port mode trunk" on the switch side, what command should i need on the PIX "inside" interface? in router the command is "encapsulation dot1Q 1"
also is there any restrictions that only limited vlans can be created or it is unlimited?

hi
When you configure your interface, you usualy do it like that
interface ethernet0 auto
interface ethernet1 auto
Let's say that ethernet1 is a trunk with 2 vlan and a native vlan, you need to add to your config:
interface ethernet1 vlan100 logical
interface ethernet1 vlan200 logical
After that you need to name those interfaces and set the security level.
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif vlan200 V200 security4
nameif vlan100 V100 security6
This configuration will give you an interface(eth1) with 1 native vlan(inside) and 2 tagged vlan(v200 and v100)
PIX will not negociate a trunk, your switch config is correct.

AP-1131AG: 2 VLANs/SSIDs, switch port configuration?

We're setting up a (seemingly) simple deployment of some APs, and want 2 SSIDs...one will have Pre-Shared WEP and one will be open and broadcast (with access-lists on the router). My question is how to set up the switch port to match my AP, in order for it to pass both VLANs (in this case I've setup WLAN100=VLAN100 and WLAN101=VLAN101)...Do I have to configure trunking on that switchport? Thanks for any links or answers on this!!!

Hi Vince,
Here is a great doc that goes over this concept in detail. You will need to configure Trunking on the switchport. Have a look at what yours might look like;
switchport mode trunk
switchport trunk encapsulation dot1q
switchport trunk native vlan 1
switchport trunk allowed vlan 1,100,101
From this excellent doc;
Using VLANs with Cisco Aironet Wireless Equipment
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801d0815.shtml#clic2935xl
Hope this helps!
Rob

How to "trunk" VLANs between Switches in a Gigastack

Similar Messages

Maybe you are looking for