IPMP and VLANs

I would like to have two NICs in IPMP configuration and public connections tagged with VLANs.
I know the naming convention when one VLAN tag assigned to the physical NIC but I do not quite understand how to add multiple VLAN tags to one NIC and VLAN tags to pseudo interfaces.
Here is the configuration I have:
/etc/hostname.e1000g8
netmask + broadcast + group ipmpgroup4 deprecated -failover up addif sunsolaris10-6 netmask + broadcast + failover up
/etc/hostname.e1000g9
netmask + broadcast + group ipmpgroup4 deprecated -failover up addif sunsolaris10-7 netmask + broadcast + failover up
netmask + broadcast + group ipmpgroup4 deprecated -failover up addif sunsolaris10-12 netmask + broadcast + failover up
netmask + broadcast + group ipmpgroup4 deprecated -failover up addif sunsolaris10-13 netmask + broadcast + failover up
netmask + broadcast + group ipmpgroup4 deprecated -failover up addif sunsolaris10-14 netmask + broadcast + failover up
... and here how it looks like once configured:
e1000g8: flags=9040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4,NOFAILOVER> mtu 1500 index 13
inet 0.0.0.0 netmask ff000000 broadcast 0.255.255.255
groupname ipmpgroup4
ether 0:50:56:23:29:c8
e1000g8:1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 13
inet 10.10.1.116 netmask ff000000 broadcast 10.255.255.255
e1000g9: flags=9040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4,NOFAILOVER> mtu 1500 index 14
inet 0.0.0.0 netmask ff000000 broadcast 0.255.255.255
groupname ipmpgroup4
ether 0:50:56:24:f:2e
e1000g9:1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 14
inet 10.10.1.117 netmask ff000000 broadcast 10.255.255.255
e1000g9:2: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 14
inet 10.10.1.118 netmask ff000000 broadcast 10.255.255.255
e1000g9:3: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 14
inet 10.10.1.119 netmask ff000000 broadcast 10.255.255.255
e1000g9:4: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 14
inet 10.10.1.120 netmask ff000000 broadcast 10.255.255.255
Regards
Leonid

Does anybody familiar with setting up multiple VLANs tags on network interfaces in Solaris 10?
Regards
Leonid

Similar Messages

How do I add a Subnet and vlan with a catalyst 3550 and RV120

Hello Friends.
I have a scenario that i'm hoping i can get some help with. I'll be as detailed and descriptive as i can.
This is for a business with 100 employees nodes and 100 camera nodes all needing IP internet through private addressing and public gateway.
I have a business class gateway with a private range of 12 public addresses. Ther modem does nothing but act as a gateway since i have disabled the firewall and DHCP.
In place of the firewall and DCHP from the modem i have installed a RV120 Firewall with VPN. When installing i replicated the IP scheme of the modem as to not disturb and distrup the devices assigned addresses from that scheme from the modem. I did this because the owner could not have any down time or any disruption to the business operations.
The RV120 now acts as firewall , DHCP , and VPN. I'll address the subnet first. I's using 10.0.0.0/24 subnet range.
DHCP is assigning 10.1.10.50 - 10.1.10.100 the rest are static and i plan to use static DHCP with the IP and MAC assigned to each static DHCP address.
There are 100 cameras with static IP addresses in the range of 10.1.10.11 - 10.1.10.40, and 10.1.0.1.101 - 10.1.10.170.
VPN uses PPTP assigned address 10.1.10.6 - 10.1.10.10.
There are no layer 3 switches that i know of. Just a layer two that is the primary swith and ports have run out, and various out of the box switches and wireless access points connected to the primary switch.
I want to implement subnets into the network and VLANS as well on a new Layer 3 switche from cisco. Thinking 3550 from Cisco or one of the older layer 2 switches with layer three capabilities.
I also want to introduce a 192.168.0.0/24 IP range for the existing wireless network and segment the traffic from the rest of the traffic on other ranges.
I want to replace the 10.0.0.0/24 DHCP alltogether and the static addresses for end user nodes on the same network, but keep that range just for camera nodes segmented.
I want to implement a NEW end user IP range and VLAN for employee/guest networks using the 172.16.0.0/24 range.
Iv'e thought of replacing all the wireless nodes with RV120's and use VLAN. Dont know if that strategy works. Need to think it through.
I want the 192.168.0.0/24 IP range comunicate to with the 172.16.0.0/24 and possibly the 10.0.0.0/24 range.
Any advice on how to do this?
As a side note the next step after this is to install a server domain controller as all the computers are all stand alones in their own workgroups. It's a simultaneous project that will introdue a DCHP, WINS, DNS server.

Hi Omid, it sounds like you're proposing the 3550 switch but you're not decided yet. The 3550 switch is a pretty old device and needs enhanced multilayer image. It may be more prudent to use a more current switch such as small business SG300 or SG500 as the feature set is more rich and it supports around 480 LAN connections.
To answer the inquiry, the RV120W, when you create a VLAN it will automatically create an IP interface. From this you may assign subnet as you like along with 'enable or disable' for inter vlan routing. Since the RV120W has this feature, a layer 3 switch is not required unless you are looking to keep the routing load smaller by routing locally with the switch.
With Catalyst or a small business switch you would need to create a VLAN. After creating the VLAN, on a Catalyst you can simply issue "switchport trunk encapsulation dot1q" on the desired interface and all VLAN will passage without issue. For a port connecting a user "switchport mode access" "native vlan xx" This will assign the port as untag member of the desired VLAN.
If using a small business switch, it is slightly different, you still create the VLAN but the command issue is a bit different "switchport trunk allowed vlan add xx" for the link to the router, where xx = the VLAN ID to tag to the router. For access client it remains the same as Catalyst.

Logical network to physical network mapping (subnets and VLANS) in SCVMM 2012 R2

In much of the blogs, documentation and literature on VMM, there are examples of deploying multiple logical networks onto one physical network i.e. Cluster (logical) + Storage (logical) + Backup (logical) + Live Migration (logical) + Management
(logical) on top of Datacenter (physical).
Does this mean it would be possible to have one (physical) flat VLAN-less network with one subnet and then have all those logical networks (with subnets and VLANs) on top of it? Even with a simple unmanaged L2 switch that doesn't support VLANs itself?
If not, just how do you map multiple logical networks to just one physical network? How does that work in practice? Is a L3 switch needed to route traffic between logical networks for example?

Hi. VMM Networking may be overwhelmed for the most, at first. But you really need to understand the modeling here and how things are related to each other. Especially if using NIC teaming in WS 2012 (and R2) together with this mix.
I suggest that you read the following whitepaper where we explain how to setup networking in VMM (also to support network virtualization, but that is absolutely not mandatory): http://gallery.technet.microsoft.com/Hybrid-Cloud-with-NVGRE-aa6e1e9a
-kn
Kristian (Virtualization and some coffee: http://kristiannese.blogspot.com )

WLC2112 with Guest / Web-Auth and vlan

Hi
I'm trying to configure my WLC with guest SSID and vlan 10.
The security is only set to Web-auth, and it is all working if the guest network is set to nativ vlan (1) But it seems that the http(s)://1.1.1.1/login.html is not reacheble from the guest SSID/VLAN??
Please help.
Management IP Address 192.168.14.252
Software Version 6.0.182.0
Emergency Image Version
I have tried with ver. 5.2 also -

I think that 1.1.1.1 is only reachable from a wireless client during webauth. They should not be able to reach that address once they have passed through the web auth page.
Don't know if that helps, or not.

Help with wireless controller and VLANs

Hi I'm trying to setup a wireless controller in preparation for a large site go live later this year. I'm struggling to get the controller and the WLAN using the correct VLAN. I want the controller on VLAN 100 and the clients on the WLAN on VLAN 200.
My thought is that I would need a config similar to:
Switchport for wireless controller management port set to trunk VLAN 100 and 200 with no native VLAN set.
The management interface on the controller set to VLAN 100.
A dynamic interface created on VLAN 200.
When setup like this I can get to the controller on its management address but only from VLAN100 not from another VLAN on site or from other sites over the WAN.
I have setup a WLAN which is set to use the dynamic interface on VLAN 200.
I have set the AP to use HREAP and set the native VLAN as 200 and added the dynamic interface into the VLAN mappings
When I connecting a client to the WLAN I get an address on VLAN 100.
The switchport for the AP is set to native VLAN 100 and trunk 200 – this setup works for standalone APs at other sites.
What am I missing?
Also any idea why the management interface address is not routing? The netmask and gateway are set correctly.
Thanks
Paul

Just to add to Steve's post... You only need to create a dynamic interface for vlan 200 if you have ap's also in local mode. If your ap's are in H-REAP/FlexConnect mode, you don't need a dynamic interface for vlan 200.
In you H-REAP/FlexConnect ap, you would set the wlan to vlan mapping there and the switchport configuration would be a trunk allowing vlan 100 (im assuming your native vlan for your ap) and vlan 200. You should see something like the following:
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

VRF configuration on subinterface and VLAN subinterface

Hi
Can I configure VRFs on subinterface (physical and VLAN) basis in a normal BGP/MPLS VPN configuration.
Thanks
VK

Hi Sultan,
You are very welcomed, i'd be more than glade to help you out your confusion, below is the output of one of my lab PEs, and moreover i've in production customers running with this setup, i've never faced the issue you are describing, if you can regenerate the test you are describing we can elaborate on it:
interface FastEthernet0/0
no ip address
interface FastEthernet0/0.1
encapsulation dot1Q 101
ip vrf forwarding a
ip address 101.101.101.1 255.255.255.252
interface FastEthernet0/0.2
encapsulation dot1Q 202
ip vrf forwarding b
ip address 202.202.202.1 255.255.255.252
This is a 7200VXR (NPE-300) running "c7200-p-mz.122-25.S14.bin".
BR,
Mohammed Mahmoud.

AP541N cluster and VLAN

Hi.
Simple but not obvious question.
I've added separated wifi for guest with VLAN ID 300. Now I have 2 more access points. They are in cluster but only one is connected to smart switch SLM2008.
Should I need to connect all of them to smart switch? I do not understand how cluster and VLAN work.

Hello Tomasz,
Yes. I guess you need to connect all APs to the switch (same bridged network). Clustering only makes all your AP act as one single entity ( you don't have to connect to the second AP In a cluster separately. Same wireless configuration will do).
Refer Clustering section under the below manual for further details:
http://www.cisco.com/en/US/docs/wireless/access_point/csbap/AP541N/administration/guide/AP541Nadmin.pdf#page139
Hope this helps,
Vijay
Please rate useful posts.
Sent from Cisco Technical Support iPad App

Difference between bridge-group and VLAN

Hi all,
I don't understand very well the difference between bridge-group and VLAN...
Could someone explain me or give me a site which could help me?
Thx U by advance!

Khay
bridge-group is used on a router to enable bridging on an interface. In terms of functionality a bridge-group is very similar to a VLAN. For example if you create bridge-group 1 and assign it to interfaces FastEthernet 1/0 and 2/0 and you create bridge-group 2 and assign it to interfaces FastEthernt 1/1 and 2/1 it is like creating 2 VLANs. Devices in bridge-group 1 (interfaces 1/0 and 2/0) can communicate with each other but not with devices in bridge-group 2 (intefaces 1/1 and 2/1).
HTH
Rick

How to configure IPMP and PFIL/IPF to work together on Solaris 9?

Hi folks,
See the subject regarding my question.
Is there anyone who has ever accomplished this on Solaris 9? If so, what version of IPMP and PFIL/IPF did you use, and what steps did you take to make it work?
I just can't get it to work, I have tried all tips and tricks I could find on the web so far, most of them are regarding Solaris 10.
Many thanks in advance!
RVDL
PS: Duke Stars available.

Not sure what you mean with IPMP, but if you mean active-active loadsharing among more than one interface in the same ifconfig group and subnet monitored by mpathd,
I'm afraid you can't do that with ipf (AFAIK), as the states (from "keep state") are stored per interface while packets may come in and go out unpredictedly and asymetricly on any relevant interface. You must configure active-standby in /etc/hostname.* (or configure 100% static (stateless) rules, i.e. no "keep state" (or pass in&out all TCP with the established flag set)).
I have used active-standby a lot on T1, E450, V480 etc. I compiled ip_filter from Darren's source 3.4 and 4.1
Note: V210/240 and others with the bge-driver may cause problems as the bge-driver is (was) broken, in the way that the stand-by interface isn't 100% stanby (only 99% standby).
Last I checked with snoop it showed sporadic ssh-packets on the stanby-interface making the session hang for a while or timeout. I had to "ifconfig down" the standby interfaces on all V210/240s thus breaking automatic failover.
Active sessions will hang and timeout on failover, but that is ususally only a problem for long-lived sessions like ssh, and no problem for short lived/retry/reconnecting protocol-sessions like HTTP, DNS etc.

Aironet 1252 doesn't broadcast SSID and VLANs

Best regards.
I have an autonomus AP Aironet 1252 (software version: 12.4(18a)JA1)
I configured 3 SSID and VLANs, but the AP doesn't broadcast SSID, the vlans are working fine because I tested configuring manually the hide SSID on laptops.
Also the AP broadcasts the SSID whe only one SSID is configured!!!
How I can do the AP to broadcast all SSIDs?
Thanks in advance.

From the command line of your AP.
Change each SSID as follows. You want to turn off "guest-mode" and enable "mbssid" at each SSID. Guest-mode will only broadcast one SSID, you must use mbssid to allow all SSIDs to broadcast.
#config t
#dot11 ssid
#no guest-mode
#mbssid
Now from each radio
#int d0
#mbssid
#int d1
#mbssid

IPMP with VLANs

Hi All
Am trying to get my head around the new network config on Solaris 11.
I have 3 interfaces which access 2 VLANS (let's say 1 & 2).
For each VLAN, I wish to setup an IPMP failover connection, so that's 2 IPMP groups per NIC.
Do I have to create a Virtual NIC for each VLAN and add them to the IPMP groups respectively?
I'm attempting to understand the order of things here, since it also seems possible to add a 'blank' NIC to an IPMP group and still assign an IP address to it.
If anyone has any advice regarding the correct order (not a hand holding exercise just a point in the right direction) to set this up I'd be most grateful. (:
Thanks
John

Does anybody familiar with setting up multiple VLANs tags on network interfaces in Solaris 10?
Regards
Leonid

HSRP issues and flapping links and vlans

Hi
My network is having some issues to do with a certain vlan and HSRP. We have 2 x 6509 switches as the distribution switches and access layer stacks. HSRP is running between the 2 6509 switches.
Solarwinds shows the following output when the issues occur
29/11/2014 16:39:26 192.168.10.2 Warning 1166: 001179: Host 0060.d501.9bcf in vlan 101 is flapping between port Gi0/1 and port Fa0/1
About the same time a number of ports on vlan 101 on an access switch start dropping and coming up again. This was followed by the two 6509 switches reporting a large number of vlans switch back and forth between active and standby state in HSRP causing considerable problems on the network. We pulled the plug on the access switch but it didn't resolve the problem.
We had similar behaviour few days ago This time it continued until we shut down one of the 6509s. When we brought it up again la few hours later the problem didn't reoccur. The problem seems to be centred on our vlan 101
Has anyone experienced these sort of issues before or give me a clue what the issue may be. Seems like issues with vlan 101 cause the hsrp states to change but vlan 101 is not used for hsrp.
Thanks

Hi,
HSRP could be a victim here. Main issue could be related to spanning tree flapping or loop.
HTH
Amit

Apple USB Ethernet Adapter and VLAN??

Bought the Apple USB Ethernet Adapter today because my built in ethernetport on my MBP stopped working. What I know I need to replace the motherboard to have it fixed, so I thought the USB adapter could be useful until then.
But, it didn't work! I only got a "Self assigned ip-address". No matter what I do. I also entered an ip-address manually with no success.
Later at home I tested again, and Voila!! It worked perfectly!
Back at the office, same problem... I only get a "Self assigned ip-address"...
My conclusion of this is that the Apple USB Ethernet Adapter doesn't support VLAN?? Could anyone confirm that or better of, suggest a solution??
Would appreciate it a lot!
PS. Yes we do have Wi-Fi, but it's restricted and is not a solution for me. DS.

Create a new network location and try again.
https://discussions.apple.com/thread/2624518?threadID=2624518&tstart=45

Configuring ssid and vlans on autonomous access point ?

here is an a demonstration of how to configure vlans and ssid on a auto-ap , what i dont understand is when i configure the ssid under (interface dot11radio0) and the vlan under that command , why do i need to configure sub-interfaces for the "fastethernet" and the "dot11radio0" if i already configured it under the "interface dot11radio0" , why do i need the "encapsulation dotq x" ? and what is bridge-group ?

If you want to use multiple SSID with multiple vlan, then you have to configure subinterfaces on Radio interfaces (in both Radio 0 & Radio 1 if you want to use both 2.4GHz & 5GHz band) & Ethernet interfaces.
AP simply bridge wireless traffic to wired interface using these sub-interfaces. To specify which radio sub-interface traffic to map to ethernet sub-interface, a Bridge-Group number (1-255) is used.
Bridge-Group 1 always used for native vlan traffic & usually used for AP management.
HTH
Rasika
**** Pls rate all useful responses ****

2 SSIDs and VLANs on each AP

I'm new to configuring IOS wireless APs, in particular, a couple of 1142Ns in autonomous mode and looking for examples/answers. These APs will be connected to the POE ports on an ASA 5505 firewall. I'm also configuring the 5505.
The requirements are that each AP have an "internal" and "external" SSID and each AP will have two VLANS.
The APs should allow roaming between them.
The internal SSID will allow full access to internal corporate networks and the Internet and will use WPA2. It will use the corporate dhcp server or employ the IOS dhcp server to hand out addresses.
The external SSID will only have access to the Internet and will use WEP. The ASA 5505 will provide dhcp services to these clients.
The two PoE ports on the ASA 5505 will be trunked for both the inside and dmz VLANS.
If anyone has examples of any of these requirements, comments, and/or similar config they are willing to share, please post them.
In particular, I would like to see an examples of the roaming config, VLAN config, SSID config, and WPA2 and WEP config.
Thanks in advance.

Hi,
Cisco terms are sometimes Complex!! In English this means.. "broadcasting the SSID or NOT" if you want your laptop to detect the SSID while searching for wireless then this is called BROADCAST if not then NON-BROADCAST.. the command is.. Guest-mode under SSID config.. that is..
en
conf t
dot11 ssid
guest-mode >>>>>>>>>>>> Broadcasting the ssid
end
en
conf t
dot11 ssid
no guest-mode >>>>>>>>>>>> Not Broadcasting the ssid (HIDDEN) MANUALLY WE NEED TO ENTER THE SSID ON THE LAPTOP.
end
Lemme know if this answered your question..
Regards
Surendra
===
Please rate the posts which answered your quiestion or was helpfull

IPMP and VLANs

Similar Messages

Maybe you are looking for