SG302-08P & MSTP problem

We've just added some of the SG302 switches to an existing network of (mostly) 2950 switches - to provide some PoE ports for wireless APs.
After configuring MSTP identically to that on the existing network, it looks like the SG302 switches can't handle the pre-standard MSTP from the older switches and are forming their own tree/domain. Or it could be that I just don't understand what I'm seeing ! I'd appreciate some help.
On one of the 2950 :
MST01
Spanning tree enabled protocol mstp
Root ID Priority 24577
Address 000c.ceac.a700
Cost 40000
Port 25 (GigabitEthernet0/1)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 000c.852d.8540
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 0
Interface Port ID Designated Port ID
Name Prio.Nbr Cost Sts Cost Bridge ID Prio.Nbr
Gi0/1 128.25 20000 FWD 20000 32769 000c.852d.6bc0 128.25
Gi0/2 128.26 20000 FWD 40000 32769 000c.852d.8540 128.26
That looks fine, it's correctly identified the root bridge (a 3550) and route to it.
On an SF302 attached to it, I get this :
###### MST 1 Vlans Mapped: 1
Root ID Priority 32768
Address 00:e1:6d:8f:d1:b1
This switch is the regional Root
Interfaces
Name State Prio.Nbr Cost Sts Role PortFast Type
gi1 enabled 128.49 20000 Frw Mstr No P2P Bound (RSTP)
This looks to me like it's oblivious to the real tree root and has elected itself.
But for instance 0, it does seem to recognise the master :
###### MST 0 Vlans Mapped: 99
CST Root ID Priority 24576
Address 00:0c:ce:ac:a7:00
Path Cost 20000
Root Port gi1
This switch is the IST master
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32768
Address 00:e1:6d:8f:d1:b1
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Max hops 20
Name State Prio.Nbr Cost Sts Role PortFast Type
gi1 enabled 128.49 20000 Frw Root No P2P Bound (RSTP)
Configs :
2950 :
sho spanning-tree mst configuration
Name      [main]
Revision  1
Instance  Vlans mapped
0         2-99,300-4094
1         1
2         100-299
And on the 302 :
sho spanning-tree mst-configuration
Gathering information ..........
Current MST configuration
Name: main
Revision: 1
Instance  Vlans Mapped                                       State
0         99                                                 enabled
1         1                                                  enabled
2         100-299                                            enabled
At the moment I've left ports administratively shutdown to avoid any potential loops, but I was hoping as part of the extra work we've done to add some redundancy. Am I missing something ?
Simon

Similar Messages

MSTP Topology Change not in Logging

Hello,
we are trying to get rid ofsome MSTP problems at our campus, for any reason we get 10-15 topology changes per day.
With spanning-tree portfast enabled on all ports, we are still getting 5-10 changes per day.
Now i am trying to get a trap whenever a topology change appears to our cpi, but this event didn't even appears in the logging of the switch.
Configured Trap:
snmp-server enable traps bridge newroot topologychange
Any suggestions?
Greetings

We found it:
Trap ist called "The value of vlanTrunkPortDynamicStatus"

SF302-08P Switch VLAN Problem

Hello
I have a problem configuring a SF 302-08P switch for VLAN. Here is my setup. I have two switches that are configured almost the same. The first switch is a SF200-24P with 12 ports on VLAN1 and twelve ports on VLAN2. The G1 port is the incoming trunk with 1UP, 2T and the G2 port set to 1UP, 2T connecting to the G1 port on the SF302-8 switch. Both Vlans work OK on the SF200-24 switch. The port on the SF200-24 is set to trunk 1UP,2T and the G1 port on the SF302-8 is set to trunk 1UP,2T. The VLAN port membership on the SF302-8 is set to VLAN 1 port 1-4 is 1UP and VLAN 2 port 5-8 is set to 2UP. Ports 1-4 work OK but the 5-8 will not connect to vlan 2. I have downloaded the latest firmware for the SF302 but it did not make any difference. Any suggestions on what I am missing?

Tom
Ok maybe I can explain this a little different. I inherited this project that two parts were built prior to me. The router is a Sonicwall that has too LAN connections with 192.168.1.x on one LAN and 192.168.2.x on the second LAN. That router is connected to a Cisco SF20024P switch on the first floor of a building. The first floor is connected to a second floor switch which is a SF20024P with the same configuration. Both first floor and second floor works great. There is a third floor which is a much small area that only needed an eight port switch. This is where I came in and installed the third switch which is the SF302-8P. The first floor switch passes traffic up to the second floor switch using a trunk with vlan 1 untagged and vlan 2 tagged. The second floor switch takes in traffic fine and works great. Why should the second switch not pass the vlan 2 traffic to the third switch? It should pass it up to the third switch using the same tagging method. As I said the traffic on vlan 1 works on the third switch, just vlan 2 will not.
Thanks

Problems creating 2 networks.

Hello,
Here on my office we have 3 macs, 1 wireless router and 1 gigabit lan switch.
My wireless router only have 100mbps ports and I need a little more speed on my network.
So I want to use my wireless router only as internet via Airport and my gigabit lan as file sharing via gigabit connection.
I can disable the network features on my wireless router so the macs can't see each other on the wireless connection.
The problem is that i can't make them work on the gigabit switch. I need to put some static ips on the macs and I don't know what to put on the default gateway because the gigabit switch doesn't have an IP, its a SWITCH 08P 10/100/1000 D-LINK DGS-1008D.
Can anyone tell me what ips and gateways should I put on my network connection?
PS: I tried putting my wireless router via cable on my gigabit switch but it limited my gigabit switch to 100mbps and started to slow my network traffic.
Thanks.

The simplest and most effective solution is to invest the modest amount of money involved in purchasing a 4 Port gigabit wireless router. The most expensive one I've run across is the Apple Airport Extreme and even it is not outrageously expensive. This would greatly simplify your network and your life.
Hope this helps

IPv6 address autoconfiguration vs static on SF302-08P

I've just installed a 302-08P in my office so that we can get our VoIP trunks into our office, so my officemate and I can actually test
the phones before we hand them out. (Can't do that easily with the 1 RJ-45 facilities gave us...)
I noticed that I can not enable IPv6 address autoconfiguration for the management interface, as well as set a static IPv6 address.
This seems wrong: I want the device to always AC an address: it makes bonjour and renumbering much easier. But,
I want to give the device a static IP for purposes like management, DNS, etc. If this unit failed, I'd replace it but it's address would not change.
IPv6 hosts (which the management interface is) should be completely happy with having multiple addresses on an interface, not just
having addresses from multiple prefixes. What gives?

houmles wrote:I found that I can't have two gateways on one interface, but until now there's no problem.
I suspect it's a problem with that; I've noticed this problem as well.
When trying to add multiple default gateways with iproute2 (ie, `ip r a default via xxx:xxx:xxx::xxxx`) it errors with the error you've mentioned. I'm not sure if this is a kernel bug, iproute2 bug, or not a bug at all.
Having multiple default IPv4 gateways works fine.
I believe netcfg doesn't check for an existing gateway and delete it first (or use `ip r r` instead or `ip r a`) before adding the one; but I haven't checked the code so I could be wrong.
EDIT:
OK, I couldn't resist looking at the code, and it indeed does a 'dumb' addition of the gateway:
112 if [[ -n "$GATEWAY" ]]; then
113 report_debug ethernet_iproute_up ip route add default via "$GATEWAY" dev "$INTERFACE"
114 if ! ip route add default via "$GATEWAY" dev "$INTERFACE"; then
115 report_iproute "Adding gateway $GATEWAY failed"
116 fi
117 fi
I'm looking at making a patch now. Patch and bug report: https://bugs.archlinux.org/task/29480
Last edited by fukawi2 (2012-04-16 01:00:09)

In ASR901 can you tag MSTP BPDU's

I have an ASR901 ring, dual homed to 2 ME3800's with a management VPLS connection between the 3800's. Running MPLS on all interfaces of the ring. Would like to use a VRF for in-band management of the 901's. These devices will be located at customer premises. I am using SVI's for MPLS interfaces and SVI's for in-band Management interfaces on the ring. Untagged encaps for MPLS and Tagged (vlan 2) for Management. In the 3800's, I have a VPLS to bring the traffic back to the Management router. So basically, in-band management uses a Layer 2 vlan switching on the ring, with vlan interfaces attached to a VRF. Customer traffic uses MPLS cross-connects.
Problem is the need for MSTP so management can be dual homed to both 3800's and Layer 2 Protocol forwarding over the VPLS in order for STP to work properly.
This doesn't work because the management traffic is tagged VLAN 2 and the BPDU's are untagged, therefore they are getting dropped at the service instance ingress to the 3800's (encap dot1q 2). Is there a way to tag MTSP BPDU's to make this work? MSTP is the only STP option on the ASR901.
Or is there a way to add a management interface to an EFP cross-connect? Or some other way to dual home the in-band management while using a VRF for management? Note ASR901 doesn't support VPLS.

Thanks for the link but unfortunately it didn't help. Although I did follow the instructions on the link but without success, I noticed that the link spoke of the iPod nano (5th generation). I'm wondering if the tagging feature isn't available for the iphone 4s. I bet it is but something just isnt right.

PoE does no work for my SG 200-08P ?

Hi,
I've bought two SG 200-08P which have their 1-4 ports who can delivered PoE.
Whatever the PoE equipments I plug into those ports, it doesn't work.
If I plug a non PoE equipment in the 1-8 ports it's working fine.
I can log into the web interface of the switch, and when I go to "Port Management > PoE > Properties", I can see the following screen:
I don't know how switch the "Power" option to "On"...
I have the exactly same issue with a second and new SG 200-08P.
I've changed the firmware and I am now in the 1.0.6.2 version but I have the problem with the original version.
I also try to reset the switch several times, but it doesn't change anything.
Is anyone has a idea to what can I do or test ?
Thanks.

Hi Tom,
For now, I only try to connect differents Siemens IP phones (1 or 2 or 3 PoE classes) : OpenStage 20,
OpenStage 40 and OpenStage 60.
Those Siemens phones are working fine with other PoE switches like linksys, HP, catalyst, 300 series, Netgear ...
I've just noticed something interesting, in the "Status and Statistics > View Log > RAM Memory" menu :
When I clear the logs, only my computer is connected on port 8...
I'll try to find other PoE devices, to test with.
Regards.

SF302-08P layer 3 mode

Hi,
i'm trying to configure SF302-08P in layer 3 mode.
ports 1 to 8 have ip phones and desktops, port GE1 in connected to a router (not cisco) that links to the internet.
i created vlan 100 and assigned to ports 1 to 8 (untagged)
i created vlan 200 and assigned to port ge1 (untagged)
activated dhcp server , created pool with 192.168.26.0/24 gw 192.168.26.1
                       |router A| (192.168.16.0/24 gw 192.168.16.1)
                           |
                           |
                           | GE1 (192.168.16.14)
                       | SF302-08P |
                                 |
                                 |
SPA504G+DESKTOP |    SPA504G+DESKTOP
        192.168.26.2                      192.168.26.4
         192.168.26.3                      192.168.26.5
the problem that i'm facing is that SPA504G and desktops access the internet with their inter address 192.168.26.0/24 and not 192.168.16.14.
is there a way to achieve what i'm looking ? how does routing work in this case ? shouldn't there be some kind of NAT ?
thank you

Hello Luis,
Is there a particular reason that the switch needs to be in Layer 3 Mode?
I think your scenario would work better if you configure NAT on your router and let the router act as the DHCP server. Then, the switch could be in Layer 2 Mode.
Alex

MSTP configuration imbalance

I am configuring MSTP for the first time on three switches in my network (lab environment) my running config for the three switches is :
spanning-tree mode mst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
spanning-tree vlan 1 priority 24576
spanning-tree vlan 1 forward-time 12
spanning-tree vlan 1 max-age 16
spanning-tree mst configuration
name Greg_MSTP_Lab_Config
revision 1
instance 1 vlan 1
spanning-tree mst 1 priority 24576
==========================================LabSwitch1
spanning-tree mode rapid-pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
----------------------------------------Server Room Sw
spanning-tree mode mst
spanning-tree portfast bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
no spanning-tree vlan 1
spanning-tree vlan 1 priority 61440
=====================================LabSwitch2
My Problem: 1) I cannot ping the default gateway with LabSwitch 2
2) I cannot telnet from LSW2 to any other devices
I know I have a problem with my MST config, and I think the biggest one is the "no spanning-tree vlan 1" statement in LSW2. I have tried to reconfigure several times with no success. I am trying to put all three switches in the same region, enable them and pass traffic.
Thank you for any help you can provide.

How are these switches physically connected together?
If you are planning to make labswitch1 the root, than your config seems to be correct on that switch.
You also need to configure Server Room Sw and LabSwitch2 with the same mst config as
LabSwitch1 but no need for "spanning-tree mst 1 priority 24576"
This way, both Room Sw and LabSwitch2 will have the default stp config of 32768 and should point to labswitch1 as the root.
HTH

SG 200-08P config and firmware

Hi,
we just got 10 new devices with the actual fw 1.0.6.2.
Two problems were coming up ...
First: user and password ... The other SG 200 switches allow password with special characters like !? ... the SG 200-08 does not! That is not very helpful.
And we would like to have this fixed.
Second: After configuation of VLANs along with CDP an Cisco Phones we always had to restart the device to be sure the configuation change was applied. Otherwiese we were hunting problems that did not really exist. May be this could be fixed in a new version of the firmware, too.
Thanks ;-)
Sent from Cisco Technical Support iPad App

Thanks for the info. I was working off another post where someone laid claim to installing the 1.3.x firmware on their sg200 to enable SNMP protocols for Spiceworks Management software.
Does this mean there is no SNMP options for the SG200-08P switches?

SG 200-08P

Do you know what the applications of the following may be?
We are using a Cisco smart switch (model # SG 200-08P) and pinging the WK2 to check for Ethernet communication. When “DHCP auto configuration” is enabled the Cisco switch generates a consistant TFTP read request:
Opcode: Read Request (1)
Source File: fp-net.cfg
Type: octet
This subsequently locks up the WK2 for a few seconds at a time and disables Ethernet communication. If the “DHCP auto configuration” is disabled on the Cisco switch, then there are no problems.
Test Results:
DHCP Auto Config Enabled:
6ft/Direct PCB – Fail
100m/Direct PCB –Fail
6ft/ Jumper –Fail
100m/ Jumper –Fail
DHCP Auto Config Disabled:
6ft/Direct PCB – Pass
100m/Direct PCB –Pass
6ft/ Jumper –Pass
100m/ Jumper –Pass

Hi Jens-Peter,
I would try disabling smartports and green ethernet on the SG200 switches. Then you will need to hardcode each of the ports to have the necessary settings. Often times when a reboot is required to restore functionality smartports is the cause.
As for the 6921 phones, you need to be sure to have auto voice vlan enabled. Otherwise the phones will not be able to pick up the correct VLAN via CDP. Let me know, if you have any questions.
-Trent Good
** Please rate useful posts! **

SG 200-08P - connecting PCs and Phones

Hello,
we have a serious problem over here with some new SG 200-08P switches firmware: 1.0.6.2
They are setup behind 2 SG-200 50 layer 2 switches - actual firmware 1.3.2.02.
We have 4 VLANs: 1 for DATA and 2 for PHONE, 10 fpr MGMNT and 20 for GUESTS - on the 08-P only VLAN 1+2 is needed. CDR protocoll is active.
Ports 1-7 on the 08-P is setup as "Trunk, 1U, 2T", parameter: Auto Negotiation ON. We tried FlowControl ON and OF - makes no difference. Port 8 is setup as "Trunk, 1U, 2T, 10T" to the floor switch. The connecting port on the floor switch SG-200 50-switch ist setup as "Trunk, 1U, 2T, 10T".
One of the problem switches: on port 1-4 of the 08-P there are connected 4 Cisco 6921 phones . On Port 5-7 there are connected 1 HP Z400 and 2 Elite 7200 PCs. One of the 6921 phones is switching to a DELL Latitude 6420 laptop.
So it happens every morning, that the first staring PC ist working fine, then the switch has to be switched off and on to get the next PCs connected to the network. The switching 6921 phone does not connect at all. But after some more switching off/on it works.
We thried another 08-P hardware with the same config, we tried an older firmware level ... we setup the PoE-phone ports as GENERAL 1U, 2T. We gave external power to the phones so that PoE is not overloaded ... nothing helps. Only some switching off/on helps and the PC gets its IP address from DHCP and the phones all come up an find the CU 6000.
Is there someone outside who may give a helping hand on this?
Thanks so far...

Hi Jens-Peter,
I would try disabling smartports and green ethernet on the SG200 switches. Then you will need to hardcode each of the ports to have the necessary settings. Often times when a reboot is required to restore functionality smartports is the cause.
As for the 6921 phones, you need to be sure to have auto voice vlan enabled. Otherwise the phones will not be able to pick up the correct VLAN via CDP. Let me know, if you have any questions.
-Trent Good
** Please rate useful posts! **

VLAN setup on SF302-08P switch

I have the following setup using two SF302-08P PoE switches:
1st floor
=========
Switch #1 <-------> private network
<-------> public network
2nd floor
=========
Switch #2 <-------> private network
.... public network (visible but devices can't connect)
I have tried to make the config in switch #2 identical to switch #1, but something is still wrong.
Is this most likely a VLAN setup problem, or what?
Thanks.
Ken Watkins

Tom,
Thanks so much for your help. In my case, the second VLAN is VLAN 50. Here are the pics of what I think you are talking about through the web interface. Do these look like what you are suggesting?
Thanks again.
Ken

Two SGE2000 in Stack and MSTP

Hi,
I have Blade Server and Blade Switches from Fujitsu-Siemens. Two Blade Switches are configured with port channel/trunk (2 ports on everyswitch in port-channel/trunk and then interconnected) and MSTP. They are functioning very well. Few days ago I got two SGE2000 switches and connected them in stack config and would like to make such configuration like in this picture : http://www.cisco.com/image/gif/paws/10556/16d.gif
Lets say "B" and "C" switches are mine blade switches. "A" would be mine SGE2000 stack. If I connect all of them this way and configure MSTP on every of them this does not work. As if the switches do not support MSTP and network traffic overall just "dies" as if there were some kind of broadcast storm. Am I missing something ? What should I do ?
Best regards

Hello Sir,
I believe you might do best by calling our support. Here is a link:
http://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html
If you want to check into this a little more, there here are a few thoughts.
The switches do support MSTP. Have you checked for which switch is the root, do all switches agree? You also need to make sure all the configs are the same, native VLANs and allowed VLANs, instance IDs and vlan ranges, etc ...
A "broadcast storm" sounds like you have introduced a loop into the network, all the lights come on, and your network looks like a Christmas Tree. Is this what is happening? If the traffic simply dies, then this might indicate a port mismatch of some kind and the port is getting shut down by either system. Having ports shut down for mismatches is fairly common.
I would suggest placing these switches into your environment one at a time, and then watching to see which switch introduces the problem. Check the configs and make sure everything is compatible.
I would also suggest a call to our support center, as they might be able to answer your questions while you are adding the switches.
HTH,
Andrew Lissitz

Weird Problem with SF302-8P switches. . .

3 Network Engineers later. . . I'm appealing to these boards for ideas.
Situation:
Rolling out new Avaya POE VOIP phone system for our corporate office.
Existing Infrastructure:
1 Core Cisco 3560 connected to 7 Cisco 2960 with ethertrunking enabled and passing VLAN 1, 100, 300, 400, 500.
Data VLAN 1/100 (Split to allow the DHCP requests coming from the diffrent sides ofthe building to hand out VLAN appropriate scop Addresss)
Vlan 1 - 192.168.0.0/24
Vlan 100 - 192.168.0.0/24
Vlan 300 (Avaya Servers and Phone Gear4)
Vlan 400 Avaya DHCP scope for phone addreeses
Vlan 500 Management VLAN for all SF 302 Switches.
Because many of the offices have more PC's and phones in them than network drops we purchased 30 SF302-08P switches to power the phones and PC's in the offices. We started by flashing them all to the current release of the firm ware 1.1.2.0 and successfully configured them to work with Vlan 1. The PC's get vlan specific DHCP addresses as do the phones, PC's connected through phones also grab the correct IP address range. We then setup the configuration for Vlan 1, after monkeying around and testing the only major diffrence being we blocked the inheritence of VLAN 1 at a switch port level on the Access switch so that the Vlan 100 would be the data vlan and the PC's would pull the correct IP addresses from DHCP.
We deployed a few switches on each side and began testing, on the 192.168.0.0/24 side of the network everything is working gloriously, Mac's Windows XP PC's and Windows 7 PC's are all able to conected to the internet and access the pages needed for our call center employees to do what they need to.
However, on the 192.168.1.0/24 side of the network things got interesting. We found that windows xp machines connected to the SF302 switches which have pulled correct DHCP and DNS information. Can ping, for example, www.expedia.com but when you try to navigate to the website with a browser the page times out. Connecting the same PC directly to a wall port connected to the Access 2950 switch and it can reach the website without a problem. Plug a windows 7 PC into the SF302-08P switch and it can surf to the same websites without issues.
I've had three diffrent network engineers look at this and it has them stumped, I'm at a loss and any hel would be greatly appreciated.
here is the running config from one of the SF302 switches that is not working.
interface fa4
spanning-tree link-type point-to-point
exit
vlan database
vlan 1,100,400,500
exit
voice vlan id 400
voice vlan state oui-enabled
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
voice vlan oui-table add 2cf4c5 "new avaya"
interface fastethernet1
voice vlan enable
exit
interface fastethernet2
voice vlan enable
[0mMore: <space>, Quit: q or CTRL+Z, One line: <return>
exit
interface fastethernet3
voice vlan enable
exit
interface fastethernet4
voice vlan enable
exit
interface fastethernet4
voice vlan cos mode all
exit
interface fastethernet5
voice vlan enable
exit
interface fastethernet6
voice vlan enable
exit
interface fastethernet7
voice vlan enable
exit
interface fastethernet8
voice vlan enable
exit
[0mMore: <space>, Quit: q or CTRL+Z, One line: <return>
interface fastethernet1
lldp med disable
exit
interface fastethernet2
lldp med disable
exit
interface fastethernet3
lldp med disable
exit
interface fastethernet4
lldp med disable
exit
interface fastethernet5
lldp med disable
exit
interface fastethernet6
lldp med disable
exit
interface fastethernet7
lldp med disable
exit
interface fastethernet8
[0mMore: <space>, Quit: q or CTRL+Z, One line: <return>
lldp med disable
exit
interface gigabitethernet1
lldp med disable
exit
interface gigabitethernet2
lldp med disable
exit
interface vlan 500
ip address 192.168.100.27 255.255.255.0
exit
ip default-gateway 192.168.100.1
ip dhcp relay address 192.168.0.3
ip dhcp relay enable
interface vlan 100
ip dhcp relay enable
exit
interface vlan 400
ip dhcp relay enable
exit
interface vlan 500
no ip address dhcp
[0mMore: <space>, Quit: q or CTRL+Z, One line: <return>
exit
hostname access-302-18
ip ssh server
no snmp-server server
interface fastethernet4
macro description switch
exit
interface gigabitethernet1
macro description "switch | no_switch | switch | no_switch | switch | no_switch | switch | no_switch"
exit
interface fastethernet1
switchport mode general
switchport general allowed vlan add 100 tagged
switchport general pvid 100
exit
interface fastethernet2
switchport mode general
switchport general allowed vlan add 100 tagged
switchport general pvid 100
exit
interface fastethernet3
switchport mode general
[0mMore: <space>, Quit: q or CTRL+Z, One line: <return>
switchport general allowed vlan add 100 tagged
switchport general pvid 100
exit
interface fastethernet4
!next command is internal.
macro auto smartport dynamic_type unknown
switchport mode general
switchport general allowed vlan add 100 tagged
switchport general pvid 100
exit
interface fastethernet5
switchport mode general
switchport general allowed vlan add 100 tagged
switchport general pvid 100
exit
interface fastethernet6
switchport mode general
switchport general allowed vlan add 100 tagged
switchport general pvid 100
exit
interface fastethernet7
switchport mode general
[0mMore: <space>, Quit: q or CTRL+Z, One line: <return>
switchport general allowed vlan add 100 tagged
switchport general pvid 100
exit
interface fastethernet8
switchport mode general
switchport general allowed vlan add 100 tagged
switchport general pvid 100
exit
interface gigabitethernet1
switchport trunk allowed vlan add 100,400,500
exit
interface gigabitethernet2
switchport mode access
switchport access vlan 500
exit
n

Bear with me, I am a fledgling network guy, I know enough to truly be dangerous, and when the guy who was administering our networks left to move to another company I got tasked with taking over the phone migration, mid stream.
Here is the diagram of our network.
Hope this is legible. . . and expandible so it can be read, here is an overall view of our network. The SF302 Switches Exist in their own management VLAN (500) and use IP addresses 192.168.100.1-30 are connected into the Access switches in this network topology using the Ge1 uplink port. The port on the Access switch is configured for Trunking to pass all the VLAN information to the devices connected to the SF302 switch.
As to the why:
For simplicity, we about 230+ PCs in our office, with this many PC's using so many DHCP addresses along with printers, switches, wifi devices, etc all needing iP addresses to provide enough IP's and limit the broadcast domain the designers split the network into multiple DHCP scopes routed through the core 3560 Switch.
The result was the east half of the building is assigned IP addresses out of the 192.168.0.0/24 subnet and the West side of the building is assigned DHCP Addresses out of the 192.168.1.0/24 subnet. From a centrally located DHCP server (Our Primary DC)
The FastEthernet ports are in general mode; from what the guy who set them explained to me, this allows them to pass both the Tagged Vlan 400 Traffic for the phones and the untagged Vlan 100 traffic for the data vlan. This allows either a PC or a VOIP phone to be plugged into any port on the switch and pull the appropriate DHCP address and as far as I am able to tell is functioning as designed.
The DHCP relay as I understand it, is required to forward dhcp requests to the DHCP Server so that it knows which DHCP scope to assign an IP address to.

SG302-08P & MSTP problem

Similar Messages

Maybe you are looking for