Multiple VLAN Access for PC

I work in a building that has two separate entities, but both work together to accomplish the same goals. The IT admin before me set us up on separate VLANs through many cisco switches. One lady that works here does work for both entities. There are server shares that she needs to be able to access on both VLANs to do her work. The way it is now, she does Company A's work in the morning and then moves to another office to do work for Company B. My question is, can I tag her switch port with both VLANs and then just add a secondary IP to her PC NIC so she is able to access the server shares from both VLANs?

If you can't ping anything on the other vlan does that mean each vlan does not route to anywhere else eg. other vlans or the internet.
If they do route to other vlans you may find that there are SVIs for both vlans but they have acls applied in which case you could just modify the acl.
Or maybe not.
It is doable ie. servers do this all the time but as Rick says it depends on whether the PC supports tagging.
If it does it is really more a question of how to set that up correctly than a networking issue ie. all you need to do on the network side is setup the port on the switch as a trunk allowing both vlans.
There are however a couple of things to be aware of from the network perspective -
a) if the vlan does route to other subnets then you only want one default gateway ie. the current one. There is no need for another gateway as the PC would be directly connected to the other network anyway and multiple default gateways can lead to unexpected issues.
b) you need to make sure you cannot route between vlans on your PC otherwise this could be a security issue. There is no need for the PC to route between these vlans because it has direct connections to both.
From memory when you setup the trunking there is an option to turn off ip forwarding between those subnets.
Sorry I can't be more specific but it was a while ago that I last did this.
Jon

Similar Messages

Multiple vlan on Access point

Hi,
I have three AP but one one is connected with a network cable and the other work on a repeater mode.
I need to create two vlans which will broadcast two ssid one for office and one for guest. I know you can't create multiple vlan on a repeater but is there any way round then with only one AP which connected to the network and other working in repeater mode?
Thanks

You can probably is you configure one radio as a repeater and the other radio for client access, but they will be placed on the same subnet which is your native vlan. I'm not 100% sure that would work anyways, but I know you can't separate the traffic.
Thanks,
Scott Fella
Sent from my iPhone

DLSW ethernet redundancy for multiple vlans

Can dlsw ethernet redundancy support mutliple vlans with the following configuration?
host dlsw router1 host dlsw router2
| |
local dlsw router 1 local dlsw router2
| |
ethernet switch1-------ethernet switch2
Ethernet switch1 and 2 are supporting multiple vlans and connected to local dlsw router1 and 2 through 802.1Q. SNA support is required for the vlans of ethernet switch1 and 2 .
We found that configuration of dlsw ethernet redundancy is not allowed on the 802.1Q sub-interface of the local dlsw router1 and 2. In this case, how can dlsw ethernet redundancy can be supported for SNA server attached to multiple vlans? Can you provide us some reference / sample for dlsw ethernet redundancy to support SNA servers attached to different vlans in a switch environment.
Thanks.

I think that I understand the problem. I am thinking the following:
dlsw local-peer peer-id 2.2.2.2 promiscuous
dlsw transparent switch-support
interface Ethernet0
mac-address 0000.3333.3333
dlsw transparent redundancy-enable 9999.9999.9999 master-priority 10
dlsw transparent map local-mac 0000.6666.0000 remote-mac 0200.eca2.0000 neighbor 0000.5555.5555
interface Ethernet1
mac-address 0000.4444.4444
dlsw transparent redundancy-enable 9999.9999.0001 master-priority 10
dlsw transparent map local-mac 0000.6666.0001 remote-mac 0200.eca2.0000 neighbor 0000.7777.7777
Of course, you need an ethernet interface per VLAN. If you need DLSw ER over dot1q interface, please contact the local Cisco Sales Rep or partner. You are not the first one to ask for it. Hope that there is a strong business case to initiate the new feature.

Scenario for single WLAN to multiple VLANs

Hi there,
I read from this forum some discussion about the WLC VLAN Select feature.
http://www.cisco.com/image/gif/paws/113465/vlan-select-dg-00.pdf
I see that you can use this feature to have multiple VLANS (interfaces) to map to the same WLAN (SSID).
What I try to learn is under what scenarios would people need to have mutliple vlan mapped to single SSID?
In my environment, I have 50+ AP int he campus on 20+ Cisco 4500 switches. I have single WLAN and it is mapped to one subnet. All wireless users would be on that subnets, whereas wired users are on 20+ subnets of their own.
Can someone help me to see under what scenarior (or requirement) that I would want to have multiple vlans mapped to single SSID?
Thanks.

having a large number of users in single subnet is not the best in all designs, since you will have a large single broadcast domain which is a true disaster with dense networks. If you the company policy states that we need only one single ssid
for the whole employees within the company, it doesn't make sense to have them all on the same subnet.
A lot of options are available to overcome such issues :
for example, we might have AP groups feature , dynamic vlan assignment given that we have radius server in place, and vlan pooling.
It might not be feasible to have RADIUS server all the time, and AP groups might be kind of administrtive overhead as well as it might induce a lot of issues when aps fail over from controller to controller --> Vlan select is a good soultion considering the previously mentioned reasons.
Please Make sure to rate correct answers

REQ: VLAN Support for Access Connections

hi,
i would like to see VLAN support for access connections. i have a thinkpad t400
cheers

VPN-User wrote:
What can be understood wrong with "VLAN support in Access Connections"? If you want to know what VLAN stands for, just google.
I know perfectly well what VLAN is since i work with networking every day and that's why i asked because i still cannot understand what maharaja mean by AC VLAN support. I asked because i might be able to help since i use VLAN with AC a lot so don't understand exactly what he find to be missing. I'm pretty sure what he is looking for is already there.
Not sure why you felt it necessary to post such a arrogant reply which is not helpful for anyone, but asking for VLAN support could be several things so that's why some further explaination would be necessary to understand what exactly the request is about. I guess you made you point to tell everyone you know what VLAN is, but then you should also realize that the question in the first post might need some further explanation since the feature might already be there.
Message Edited by gan on 04-13-2009 12:33 AM

File accessability for multiple users

I am designing a we application in which each and every updation done by the users will be written in a text file. I have a question that since this is a web based application there will be multiple users accessing the application. And when many users are trying to update a record then they will be accessing the same file.i.e., writing into the same file at the same time and that will be a problem... Please suggest me a solution for this issue.... Some people suggested to use synchronized methods for writing and some suggested like writing into a temporary file and then once the user has finished updating we have to write from the temporary file to the main text file. So the main file is not directly updated by the users..
Please suggest me if you have any new ideas...Thanks in advance..

Hi Thanks for your explanation...Since I am new to this field i have a doubt. Could you please explain it.
Question:
Will Session affect this logic?
Consider a user A is performing the update action at location 1 and a user B is performing another update action at location 2. My doubt here is will both the updated records will be present in the same Vector even if the users closes the session? Because what if the user closes the application before the "WorkerThread" runs method "performNextUpdate()". And also will the thread start running from the moment the user logs into the application for every 25ms.
Sorry if it is a silly question or if you dont understand it properly.

Multiple Vlans on a single port.

hi,
Can i configure single port with multiple vlans on L2 2950 switch, if yes then what are the commands.
Thanks,
Vishal D.

Paresh,
i think i have not quoted the question properly.
see by doing 'switchport mode trunk' it will flow the traffic of all vlan right.
but if i want to give access of selected vlans then what to do,
i have tried the command 'switchport trunk allowed vlan 1,2,3'
do i have to give encapsulation on that port, but on 2950 encap cannot be configured.
now can u tell me wht is possible to do.
Thanks for ur reply.
Vishal.

Creating multiple vlans across multiple switches

Hi All,
How should I create multiple vlans across multiple switches?
For instance, I have two (primary/redudant) layer 3 (core) switches and four layer 2 access switches (Cisco 2960) for the hosts, and given these are the vlans/subnets to be created. Should I do it in the core switches only and it would just propagate through the access via VTP? Just trying to practice and learn.. Any help will be greatly appreciated:)
VLAN 100: [DHCP-workstations]
172.26.4.0/24
172.26.5.0/24
VLAN 200: [Servers]
172.16.1.0/24
172.16.2.0/24
VLAN 300: [Printers]
192.168.129.0/24
192.168.130.0/24
VLAN 800: [Management for switches/routers]
10.160.1.0/24

Hi
You will have the SVI on the core. Set a VTP domain, make one of the cores as VTP server and rest of the switches as VTP clients. Once you do this, you won't have to login into each switch and create a vlan locally. The vlans will be automatically advertised from the VTP server to all the VTP clients.
Thanks
Ankur
"Please rate the post if found useful"

Bridge with clients & multiple VLANs on 1242 AP

Hi,
I am trying to set up a test as per the attached diagram. I am looking to use 2x 1242 access points to bridge to a remote part of the network.
I currently have 2 VLANs on the network, all network devices are on VLAN 1 for management and client access is on VLAN 2.
What I am trying to achieve is to bridge between the two access points and also have clients connect to VLAN 2 on each access point.
Firstly, are the 1242's capable of this or would I need to look at a 1300 Bridge?
I have attached a copy of the base config I have on both AP's, the only difference between them is the root or non-root role.
My bridge link currently works and I can ping across it on VLAN 1 but I cannot get a client to connect to the SSID on VLAN2. Although the SSID is set to guest mode I cannot see it being broadcast and if I manually try and connect nothing happens.
Is there anything basic I am missing here or can anyone offer advice on bridging multiple VLANs with 1242 AP's?
Thanks,
Paul

Ooops....forgot to add the attachments first time.
Thanks,
Paul.

Binding multiple VLANs to single SSID on WLC

I have a building with over 4000 users and would like to bind multiple VLANs for user access to a single SSID in WLC. Can this be done? I would rather not have 4000 wireless users on a single VLAN.

the question is tough. You can not use the SSID in on AP for multiple vlans. Once you assign the AP to the vlan then you will have to make all traffic in the vlan. With that being said. you could assign the AP's to specific vlans, but if you roam from one vlan to another you will have problems at L3. But you can use WDS to make that happen.
Here are a couple of links tha might help.
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_q_and_a_item09186a00804d4421.shtml
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_guide_chapter09186a0080184ace.html

Multiple VLANs through to layer 2 switch

So long as each switch supports VLANing (which most manageable switches do), then yes. Some model numbers on the switches would help here though to be sure.
Also, keep in mind that assigning VLANs is a layer 2 function, not layer 3. So long as you tag the VLANs you need to pass between the switches on the feed ports between them, you should be able to have them running without issue.
Could you provide a little more detail as to what you're trying to accomplish so that we can better advise you how to proceed?

Hello,
Is it possible to send multiple vlans across a layer 3 dell powerconnect to a Meraki layer 2 switch and configure the ports to access the different vlans?
Is it also multiple vlans across a layer 3 dell powerconnect to a layer 2 dell powerconnect switch and configure the ports to access the different vlans?
I've been playing aound with this and I can't seem to get it done.
Thanks for any help in advance.
This topic first appeared in the Spiceworks Community

Creating multiple vlans on a 877

Hi,
I want to create a default, voice and access vlan on a 877, but just one vlan comes up. On the other two vlan inetrfaces is the protocol down. I guess this has something to do with bridging. I've tried that already, but I can't find documentation about this. Can someone tell me how to bring up the other two vlan interfaces?

You need a trunk in case you are passing multiple VLANs on the port. However, in your configuration you do not need a trunk because each port is assigned to one VLAN.
IN order for all VLANs to go UP all you interface should be Physically and Porotcol UP. Check that all your Fast Ethernet Interfaces are UP.
Let me know how it goes,

Multiple SSID With Multiple VLANs configuration on Cisco Aironet APs: Assotiated clients cannot obtain IP addresses

Hi Surendra,
I was just given this task to see how i can configure a second ssid for guest access in our environment.
this is our network setup prior to this request: Internet----Firewall (not ASA)---ce520---C1131AG and CME router is also connecting to the ce520 switch. we only have two vlans: one for voice and two for data.
Presently, there is no vlan configured on the AP because it on broadcasting ont ssid and wireless users gets IP from a windows DHCP server on the LAN. the configuration on the ce520 switch port for the AP and other switches say access vlan is the DATA vlan which automatically becomes the native vlan for all trunk port connecting the AP and other Stiches to the network.
Now with this new requirement, i have made my research and i have configured the AP to broadcast both the production and the guest Vlans. The two vlans are 20-DATA and 60-Guest. I made the DATA vlan on the AP the native vlan since the poe switch is using the DATA vlan as native on the trunk ports. I configured the firewall to serve as DHCP server for the guest ssid and i have added the ip helper-address on the guest vlan interface on all switches while the windows server remains the dhcp server for the production DATA Vlan. I have confirmed that the AP, switches can ping the default gateway of the guest dhcp server which is another interface on the firewall. I can now see and connect to all broadcasted ssids but the problem is I am not getting IP addresses from both the production dhcp server and guest dhcp server when i connected to the ssid one at a time.
My AP config is attached below.
Please tell me what am I doing wrong.
Do i need to redesign the whole network to have a native vlan other nthan the data vlan?
Does the access point need to be aware of the voice vlan?
Do the native Vlan on the AP need to be in Bridge-group 1 or can i leave it in bridge-group 20?
I will greatly appreciate your urgent response.
Thanks in advanced.

Hi,
As far as i know we dont set the ip helper address on the radio interface. It should be on the L3 interface of corresposding VLANs i.e.
int vlan 20
ip helper-address 192.168.33.xxx
int vlan 60
ip helper-address 130.20.1.xxx
I'm assuming that your using SVI's (int Vlan 20 and int Vlan 60) rahter than physical interfaces. Also hope you have configured switch port as trunk where this AP is connected.
Modify the AP config as below since you are using data vlan as the native vlan
interface Dot11Radio0.20
encapsulation dot1Q 20 native
interface FastEthernet0.20
encapsulation dot1Q 20 native
Ideally your AP fastethernet configuration should looks like below and not sure how you missed this as this comes by default when you have multiple vlans for multiple ssids.
interface FastEthernet0.20
encapsulation dot1Q 20 native
no ip route-cache
bridge-group 20
no bridge-group 20 source-learning
bridge-group 20 spanning-disabled
interface FastEthernet0.60
encapsulation dot1Q 60
no ip route-cache
bridge-group 60
no bridge-group 60 source-learning
bridge-group 60 spanning-disabled
Hope this helps.
Regards
Najaf

3750 - QinQ Multiple VLANS - Vlan mapping

Hi All,
I have a client that uses vlans that already exist on our network (vlan 1,2,3,99,100,200,250...) nethier of us are in a position to change the numbering at this stage.
3750 stacks are on the client side and on my side
what is the best way to configure QinQ or vlan mapping to connect their network to ours without a major outage?
hypothetically, is there a way to have a Ether Channel and trunk all the client vlans to our VMware infrastructure
* map vlan 99 on the client side to vlan 299 on my side
* map vlan 100 on the client side to vlan 298 on my side
* map vlan 200 on the client side to vlan 297 on my side
Thank you in advance
I have googled etc and found alot of info on QinQ for access ports / single vlans but not for multiple vlans / trunks

Janene
The vlan numbering may be the same but what about the IP subnets used per vlan.
If the IP subnets are different why not just route between the two switch stacks then the vlans are not visible to each other.
If you need the throughput you could always use L3 etherchannel for additional links.
You could use static routes between each stack or run a dynamic routing protocol to exchange the routes (dependant on the feature sets on your stacks).
Further advantages would be with L3 each site contains it's own broadcasts and there would be no outage for this.
Obviously if the IP subnets are the same then please ignore the above.
Jon

VLan setup for a 2950 and 2611

Im trying to setup a real basic VLan setup for 1 2950 switch. I would like to have 3 Vlans on it including the default Vlan. So my understanding is that for all 3 of the VLans to talk to each other I will need a router to be the layer 3 device that routes the Vlans.
On my 2611 it looks like this:
interface Ethernet0/0
no ip address
full-duplex
interface Ethernet0/0.1
encapsulation dot1Q 1 native
ip address 172.16.10.1 255.255.255.0
no snmp trap link-status
interface Ethernet0/0.2
encapsulation dot1Q 2
ip address 172.16.20.1 255.255.255.0
no snmp trap link-status
interface Ethernet0/0.3
encapsulation dot1Q 3
ip address 172.16.30.1 255.255.255.0
no snmp trap link-status
Then my 2950 looks like this:
interface FastEthernet0/1
description Connection to router
switchport mode trunk
speed 10
duplex full
interface FastEthernet0/2
switchport access vlan 2
interface FastEthernet0/3
switchport access vlan 3
interface Vlan1
ip address 172.16.10.2 255.255.255.0
no ip route-cache
ip default-gateway 172.16.10.1
Ok so as it currently stands the switch and router will not talk to each other at all. From the switch I can not ping the router and vice a versa. If I plug a laptop into one of the ports using VLan1 I can ping the switch IP 172.16.10.2 but obviously can not ping the default gateway which is the router...
I didnt think this looked very hard but for some reason it does not want to work for me at all...
Any ideas?
LR

I have two things you might try. First set your trunking interface on your switch to auto.
interface fastethernet 0/1
speed auto
duplex auto
This will help to make sure that the ethernet on the 2611 will negotiate the duplex with the switch. I've had issues with 2611's trying to do full duplex on there ethernet ports.
Another Option turn on CDP on your router and switch and do a show cdp neighbor to make sure there plugged into the right ports.
Three you could move the vlan 1 ip address on the 2611 to the main interface. Example below. Then try pinging the switch. Your other tagged vlans should still work at that point. Also if you have multiple switches make sure to setup Vlan Trunk Protocol see NOTE A.
no interface Ethernet0/0.1
no encapsulation dot1Q 1 native
no ip address 172.16.10.1 255.255.255.0
no snmp trap link-status
interface Ethernet0/0
ip address 172.16.10.1 255.255.255.0
NOTE A
Add the following commands to each switch to setup your Vlan Trunk Protocol. These are pretty much the minimum amount of commands you can use to setup VTP.
vtp domain CISCO1
vtp version 2

Multiple VLAN Access for PC

Similar Messages

Maybe you are looking for