Vlans with ESX 3.5 and Cat6509

have Esx 3.5 with 6 physical NICs. It connects to my Cat6509 running 12.x IOS code. Have downloaded the Vmware/cisco whitepaper and several vmKB articles. Still have some confusion here.
1) Plan to run ESX in VST (vlan Tagging) mode.
2) What is the deal with Native Vlan ID in Esx VST can't be the same as the native VlanID of the physical switch? Huh? Is this a fancy way of saying change the native Vlan from 1 to "anything" when handing off trunks to ESX?
The vmkb articls 1004048 which outline etherchannel, but doesn't specify changing the native vlan to something else.
Is it possible to etherchannel and trunk over the same nics with ESX?

In ESX Virtual Switch Tagging (VST Mode) mode, you provision one port group on a virtual switch for each VLAN, and then attach the virtual machine's virtual adapter to the port group instead of the virtual switch directly. The virtual switch port group tags all outbound frames and removes tags for all inbound frames. It also ensures that frames on one VLAN do not leak into a different VLAN.
Native VLAN ID on ESX VST Mode is not supported. Do not assign a VLAN to a port group that is same as the native VLAN ID of the physical switch. Native VLAN packets are not tagged with VLAN ID on the out going traffic toward ESX host. Therefore, if ESX is set VST mode, it drops the packets that are lacking a VLAN tag.

Similar Messages

How do I add a Subnet and vlan with a catalyst 3550 and RV120

Hello Friends.
I have a scenario that i'm hoping i can get some help with. I'll be as detailed and descriptive as i can.
This is for a business with 100 employees nodes and 100 camera nodes all needing IP internet through private addressing and public gateway.
I have a business class gateway with a private range of 12 public addresses. Ther modem does nothing but act as a gateway since i have disabled the firewall and DHCP.
In place of the firewall and DCHP from the modem i have installed a RV120 Firewall with VPN. When installing i replicated the IP scheme of the modem as to not disturb and distrup the devices assigned addresses from that scheme from the modem. I did this because the owner could not have any down time or any disruption to the business operations.
The RV120 now acts as firewall , DHCP , and VPN. I'll address the subnet first. I's using 10.0.0.0/24 subnet range.
DHCP is assigning 10.1.10.50 - 10.1.10.100 the rest are static and i plan to use static DHCP with the IP and MAC assigned to each static DHCP address.
There are 100 cameras with static IP addresses in the range of 10.1.10.11 - 10.1.10.40, and 10.1.0.1.101 - 10.1.10.170.
VPN uses PPTP assigned address 10.1.10.6 - 10.1.10.10.
There are no layer 3 switches that i know of. Just a layer two that is the primary swith and ports have run out, and various out of the box switches and wireless access points connected to the primary switch.
I want to implement subnets into the network and VLANS as well on a new Layer 3 switche from cisco. Thinking 3550 from Cisco or one of the older layer 2 switches with layer three capabilities.
I also want to introduce a 192.168.0.0/24 IP range for the existing wireless network and segment the traffic from the rest of the traffic on other ranges.
I want to replace the 10.0.0.0/24 DHCP alltogether and the static addresses for end user nodes on the same network, but keep that range just for camera nodes segmented.
I want to implement a NEW end user IP range and VLAN for employee/guest networks using the 172.16.0.0/24 range.
Iv'e thought of replacing all the wireless nodes with RV120's and use VLAN. Dont know if that strategy works. Need to think it through.
I want the 192.168.0.0/24 IP range comunicate to with the 172.16.0.0/24 and possibly the 10.0.0.0/24 range.
Any advice on how to do this?
As a side note the next step after this is to install a server domain controller as all the computers are all stand alones in their own workgroups. It's a simultaneous project that will introdue a DCHP, WINS, DNS server.

Hi Omid, it sounds like you're proposing the 3550 switch but you're not decided yet. The 3550 switch is a pretty old device and needs enhanced multilayer image. It may be more prudent to use a more current switch such as small business SG300 or SG500 as the feature set is more rich and it supports around 480 LAN connections.
To answer the inquiry, the RV120W, when you create a VLAN it will automatically create an IP interface. From this you may assign subnet as you like along with 'enable or disable' for inter vlan routing. Since the RV120W has this feature, a layer 3 switch is not required unless you are looking to keep the routing load smaller by routing locally with the switch.
With Catalyst or a small business switch you would need to create a VLAN. After creating the VLAN, on a Catalyst you can simply issue "switchport trunk encapsulation dot1q" on the desired interface and all VLAN will passage without issue. For a port connecting a user "switchport mode access" "native vlan xx" This will assign the port as untag member of the desired VLAN.
If using a small business switch, it is slightly different, you still create the VLAN but the command issue is a bit different "switchport trunk allowed vlan add xx" for the link to the router, where xx = the VLAN ID to tag to the router. For access client it remains the same as Catalyst.

Bridging multiple VLAN with sg 200-08 and wap321

Hi all
Equipment:
ASA 5505
2x gs 200-08
2x wap321
Is there a possibility, to bridge 2 VLAN between one and another side with two WAP 321 and use the AP's also as WDS Bridge to extend the Wireless Network?
I need to extend the Range of the WLAN but also want to use 2 different VLAN on both sides of the network. There is no Possibility to establish a wired Connection, so i try to use the AP's in "workgroup bridge" mode, but i always can use only one VLAN on the other side.
Thanks for any help

Hi Luis
The Problem is, there is no wired connection between the WAP321.
The topology is like this:
VLAN1------ASA5505-- --SG200-08---------WAP321             WAP321--------SG200-8-------VLAN1
                                             I                                                                                                 I
VLAN2---------------------------                                                                                               -----------VLAN2
VLAN1 and VLAN2 are also available in the WLAN on 2 Different SSID's:
SSID: inside -> VLAN1
SSID: outside -> VLAN2
If i understand the Cluster mode right,there is a wired connection required between the WAP321 .
In meantime i tried to connect the WAP321 over WDS, but always only VLAN1 is available on the "right" side of the Network.
Is there a Possibility, to Bridge multiple VLAN's over a WDS connection?
Best Regards
Dominique

Configure vlan with SG 300-10P and SA 520

Hi All,
Forgive my ignorance but i need some help for basic configuration.
I bought for a little office a SA520 Security appliance (for future VPN with another distant office) and a SG 300-10P switch for connect 3 PC and 3 IP PHONE. THe SA 520 is the router. I must configure 2 VLANs on the switch :
VLAN2 : DATA (for PC)
VLAN3 : VOICE (for IP PHONE)
VLAN1 : DEFAULT.
How can i simply configure all ports ?
I would like to configure ports 1-4 on VLAN2 and ports 5-8 on VLAN3 and port G10 is reserved for the router SA520.
I want to divise network DATA/VOICE.
I think i must create a trunk on G10 for SA520 ...
Does anyone can help me?

Hi Julien,
Ok sounds like you are using the default vlan for management on the network and vlan 2 for data and vlan3 for voice.
I am using a simulator for this, my SA520 is loaned out at the moment.
Step 1   On the SA520 add vlan 2 and vlan 3 and label them data and voice respectively.
Step 2. Lets use switch port 4 on the SA520 as a trunked port to the SG-300.
            (my intention is to use untagged vlan1, tagged vlan 2 and tagged vlan 3 on the uplink from the switch and the SA500.)
          To do this I have to tell the SA520 that switch port 4 will be in trunking mode and not access mode.
You will have to tick off the membership of vlan 2 and vlan 3 on switch port 4.
Step 3. Now add some IP addresses for VLAN2 and VLAN3
Step 4. Create some DHCP scopes if that is what is needed on the SA520
So by now hopefully we have the SA520 with IP addresses associated with VLAN1, VLAN2 and VLAN3
We also have switch port 4 as a trunk interface
We are propogating untagged vlan1 and tagged vlan2 and tagged vlan3 to the SG-300 switch.
We have to do the opposite on the SG-300 switch.
If you are using G10 as the uplink to the SA520 you will note by default port 10 should already be in trunk mode.
switch port G10 should be tagged for vlan 2 and tagged for vlan3. By default Gi10 it will be untagged for vlan1.
Make sure you set up the rest of the switch ports appropriately.
regards Dave

VLAN With secondary IP address and it's HSRP configuration.

Switch-1
interface Vlan200
ip address 10.X.X.1 255.255.254.0 secondary
ip address 192.X.X.1 255.255.255.0
standby 200 ip 192.X.X.7
standby 200 priority 110
standby 200 preempt
standby 66 ip 10.X.X.7
standby 66 priority 95
standby 66 preempt
Switch-2
interface Vlan200
ip address 10.X.X.4 255.255.254.0 secondary
ip address 192.X.X.2 255.255.255.0
standby 200 ip 192.X.X.7
standby 200 priority 95
standby 200 preempt
standby 66 ip 10.X.X.7
standby 66 priority 110
standby 66 preempt
is the above HSRP configuration correct.

Hi Veera,
I have not tried it before, but the configuration does not seem to work since the syntax seems to wrong as you cannot type an ip address after secondary keyword. An example below.
(config-if)#standby 85 ip 10.127.1.130 secondary ?
<cr>
But your idea seems to work with exception of the above syntax mistake. A useful post can be seen below.
https://supportforums.cisco.com/discussion/9912176/hsrp-secondary-address
Hope this helps. Please always remeber to rate all useful posts.
Thanks
Madhu.

Issues with CWLMS 3.2 RME 4.3.1 cannot fetch vlan.dat off a VSS and 4510.

Hi,
I am having a major headache with RME collecting the vlan.dat from a VSS and 4510, the device and credentials work fine, however when archiving the config i get partial success due to vlan failing. You can see in the IC_Services log that it attempts to TFTP the .dat file off which it fails with, i believe vlan fetch is only supported by SSH or telnet
when you do a CDA test both devices pass on everything..

managed to log on and please see below, tftp on one device works fine but from the 4510 or vss still fails
GRA_CHUB_CR_01#copy cat4000_flash: tftp:
Source filename []? vlan.dat
Address or name of remote host []? 172.20.220.10
Destination filename [vlan.dat]?
%Error opening tftp://172.20.220.10/vlan.dat (Timed out)
GRA_CHUB_CR_01#
DAR_R002_AS_01#
DAR_R002_AS_01#copy flash:vlan.dat tftp:
Address or name of remote host []? 172.20.220.10
Destination filename [vlan.dat]?
616 bytes copied in 0.009 secs (68444 bytes/sec)
DAR_R002_AS_01#

Management vlan with the 1000V and UCS

If I want to use VLAN 10 for management, I would have to configure the following:
1000V -VM vEthernet port profile access port with VLAN 10, Ethernet uplink profile includes VLAN 10
UCS - vNIC in Service Profile, include VLAN 10, and include VLAN 10 in uplink trunk from UCS
Upstream switch: Include VLAN 10 in trunk port.
OK?
Now, this management VLAN, can I Iuse this for everything? I mean for 1000V management VLAN, vSPhere management, FI management and switch management? Or should for instance the 1000V management be different from the others?

Hi Atle,
Yes, what you have mentioned is the correct in terms of activities you need to carry out. However i would like to add a few:
1) define the vlan on the UCS - unless you do this you will not be able to add it to the vnic. Plus once you have the vlan defined it will automatiaclly get added to the trunk list on the uplinks ports (unless you l2-disjoint configured)
You can have the same vlan for all the management, unless you have certain traffic you would not like certain device to see / reach.
./Abhinav

How to create wrielesss vlan with diffrence configuration

how to create wireless vlans with different configuration in network?
device use only :
laptop = 30
desktop = 40
linksys wirelesss router = 1
switch 2960 = 1
router 1841 = 1
vlan 10 = lecturer(1 desktop & 1 laptop)
vlan 20 = student(29 laptop & 39 desktop)
Posted by WebUser ???? ?????????? from Cisco Support Community App

in this case we don't have enough budget t get WLC device....mybe use the autonomous ap....i use the linksys wireless routes as AP that connect to switch and create the VLANs 10 and VLANs 20 in the switch 2960, the switch connect to router 1841 that will ensure vlan connect each other.
Posted by WebUser ???? ?????????? from Cisco Support Community App

Guest VLAN with SG-200

I'd like to use the SG-200 to create an isolated guest VLAN that cannot access the secure LAN, except of course for the router. This post discusses the necessary ACE's to use with an SG-300, but it's not clear that this level of access control exists on the SG-200. Is it possible to isolate a guest VLAN with the SG-200? My network is a roaming (bridged) network that looks like this:
[Modem] — [AE Router] — [Switch] — [Roaming Wifi]

Thank you very much for the pointers. I found a way to use the router as my VLAN, keeping the SG-200 as a simple switch. This turns out to be the best option because my router doesn't support ACL's or multiple VLANs that would be used for isolating VLANs on my level 2 switch.
This router-based solution involved resolving a simple DNS issue. My router gets DNS from the server, which the router's VLAN guests cannot see. Configuring DNS by hand on guest clients (e.g. Google DNS 8.8.8.8, 4.4.4.4) provides guest internet access, isolated from the LAN, all with roaming. And I'm using one less piece of hardware by using the router's VLAN. Thanks again.

Multiple Vlans with multiple Internet connections using PBR

Hello all,
I'm trying to wrap my head around this configuration and not having a lot of success. I have several Vlans 3,6,71,72,160, and 180. I have two internet connections, Internet1 is connected to an ASA5510 and Internet2 is connected to a Meraki MX80. I'm using two 4506 switches on my backbone trunked to 3750 switches that my clients connect to. None of these switches have IP Services and my 4506 supervisor does not have an Enterprise license. However I do have one 3750 100Mbit switch with IP Services so I'm using that to do my PBR. All my routing is currently being done on the 4506 switches and all Internet traffic is going to the ASA. What I would like to do is force vlan160 and vlan180 through the Meraki as their Internet connection and the rest of the Vlans go through the ASA. I'm thinking about trunking my vlans from the 4506 to the 3750 (the one with IP Services) and use policy based routing from there to force vlan160 and vlan180 to the Meraki. But in order to do this I think I would have to move my routing onto the 3750 switch but since that is only 100Mbits I'm thinking this is going to choke my network down and defeat the purpose of the 4506 backbones. Any suggestions or alternate ways to achieve my goal?
Appreciate any help you guys can send my way.
Matt

Matthew
What is the speed of the connection from the 4500 to the ASA and what is the combined speeds of the internet connections ?
You definitely don't want to do all the inter vlan routing on the 3750. You could connect it up as shown in your diagram but leave all the routing between vlans on the 4500s. Then you -
1) connect the 3750 to the 4500 using a L3 point to point link
2) connect the 3750 to the ASA using a L3 point to point link
3) do PBR on the 3750 interface connected to the 4500 for traffic coming from the 4500.
If the 4500 supervisor/IOS version doesn't support routed links on that end just use an access port in a dedicated vlan ie. no other ports in the vlan and create a new SVI for it.
You would need to update your routing to reflect the next hop on the ASA, Meraki, 3750 and the 4500.
Disadvantages are -
1) you only have fast ethernet ports on the 3750 so if the combined internet speed is greater than that then it will be a bottleneck.
2) it is a single point of failure ie. if it is lost all internet via both connections is lost.
The alternative would be to not have the 3750 in the path but connected to the 4500 via a trunk link and then route just vlan 160 and 180 on the 3750 ie. move their SVI(s) onto the 3750. Then the 3750 could have a direct connection to the Meraki device and point the default route that way (no PBR needed). The trunk would only allow those specific vlans on it. This would mean a failure of the 3750 would not mean ASA internet lost but it would mean loss of connectivity for the two vlans routed on the 3750.
You would need to add routes to the Meraki for return traffic plus routes on the 3750 and 4500 for inter vlan routing.
The main disadvantages here are -
1) inter vlan routing between the vlans routed on the 4500s and the vlans on the 3750 will be limited by the 100Mbps connection. However you could use an etherchannel trunk so you could get greater overall throughput and some redundancy
2) more importantly though i suspect you are running HSRP between the 4500s for the client vlans and moving the SVIs onto the 3750 means a single point of failure for those vlans.
Personally i would tend towwards option 1) because of the SVI HSRP issue and perhaps because there may be a lot of inter vlan traffic and even with an etherchannel it would be too much.
But, single point of failure issues aside, a lot does depend on internet bandwidth in option 1) vs inter vlan traffic in option 2).
So it's a tradeoff and personally i don't think either are ideal so i'll have another think on this in the morning to see if there is anything more obvious that i have missed or maybe someone else will add to the post.
Jon

Dynamic vlans with multiple fallback-vlans?

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
I've got a problem with dynamic vlans. Trying to figure out configuration for the topology similar to the one in the picture.
I’ve got four vlans for PCs, one vlan per department. I have to add fifth vlan (50) for devices that can be connected to any of the three switches: A, B, C. these devices need to be on their own vlan, no matter to which switch they are connected to. On the other hand, PCs connected to any port on those switches should be assigned to appropriate vlan (10,20,30 or 40).
I was thinking about using dynamic vlans with list of mac addresses of devices that need to be on vlan 50 but not sure what to do with PCs. I don’t think I can use fallback vlan as I can set up only one fallback vlan for whole network and not per switch or port.
I cannot use list of mac addresses of all pcs as there’s simply too many of them (my network is way bigger than in the picture, I simplified it only to present the idea). I imagine I would need multiple fallback vlans for different switches.
Has anyone got any idea that could help me please? Maybe there’s some other and easier way?

In new software (for Cisco switches) we provide multiple fallbacks for MAC authentication (MAB):
1. 802.1x
2. web authentication
3. guest vlan (if no supplicant on the PC)
4. auth fail vlan (if radius denies you access)
So you could keep a list of MAC addresses for vlan 50 and do MAB for these devices if MAB fails you can use 802.1x for your PCs.
This will require configuring 802.1x supplicants on all PC (Windows comes preloaded with one) and maintaining a radius of users who are able to log into the network. A lot of people use their Active directory pre-existing database as a backend to store their usernames and passwords for user authentication with dot1x.
With using both dot1x and MAB you can now distinguish easily between two different processes and use your radius server to assign vlans based upon almost anything you can think of.
-Elly

CONFIGURE 5 vlan with SRW248G4

I need to solve this problem.
I have a switch SRW248G4.
Port 1 = wired Linksys rv042 dual wan router
Port2= hp network printer1
Port3= hp network printer2Port 4-10= departament1 ( pc running win xp, with internet connection through Linksys rv042 dual wan router ); VLAN 1Port 10-20 = departament2 ( pc running win xp, with internet connection through Linksys rv042 dual wan router ); VLAN 2Port 20-40 = departament3 ( pc running win xp, with internet connection through Linksys rv042 dual wan router ); VLAN 3Port 41,42,43,44 = management ; probably VLAN4
Problems to solve:
VLAN1, VLAN2, VLAN3 cant see eachother;
VLAN4 can see all other VLAN (1,2,3)
VLAN1 can print only to Port2= hp network printer1
VLAN2 can print only to Port3= hp network printer2
Port 41,42,43,44 = management ; probably VLAN4 can print to all printers ( printer1, printer2)
All ports can access the internet through router rv042
Port7 ( from VLAN1 ) need to see/communicate with Port15 (vlan2)
Thank you verry much.

You can create separate VLANs with your SRW248G4. The problem is only that if you connect those VLANs to a non VLAN capable router/switch you interconnect everything. You'll loose the separation because to the RV042 all frames from all VLANs look the same. The RV042 cannot distinguish between them.
Again, think of a VLAN on the SRW as a separate unmanaged switch.
VLAN 1 is on one unmanaged switch.
VLAN 2 is on a second unmanaged switch.
So far both switches are physically separated, thus both VLANs are separated. This is what the SRW can do.
Now you connect those two switches to the RV042 LAN ports. The LAN switch on the RV042 is a simple unmanaged switch. Once you have connected those two switches above to the RV042 you have created a connection between both of them.
You have to connect the SRW to a router which can handle VLANs. That router like the RVL has a managed LAN switch which supports VLANs.
AFAIK, the RV016 and RV082 have VLAN support.
Message Edited by gv on 11-19-2008 06:05 PM

Span Tree Vlan with VTP

I have 2 cisco c2950 switches, I have 2 problems:
1- I can't create more than 1001 vlan..(I have configured the both switches with vtp transparent mode).
2- when I issue the command (sh vtp status), I noticed that vlans supported locally 64 & number of existing vlans are 63.
(a)does that means Spantree won't operate after vlan number 64. If so? how would I solve this issue?
(b) what is the possiblity that allows me to assign more than 1001 (Extended vlans) in cisco c2950 series?

Hi Friend,
Catalyst 2950 switches that run the standard software image (SI) support 64 VLANs; Catalyst 2950 and Catalyst 2955 switches that run the enhanced software image (EI) support 250 VLANs. Refer to the release notes for the list of switches that support each image. VLANs are identified with a number from 1 to 4094 when the EI is installed and 1 to 1005 when the SI is installed. VLAN IDs 1002 through 1005 are reserved for Token Ring and FDDI VLANs. VTP only learns normal-range VLANs, with VLAN IDs 1 to 1005; VLAN IDs greater than 1005 are extended-range VLANs and are not stored in the VLAN database. The switch must be in VTP transparent mode when you create VLAN IDs from 1006 to 4094.
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2950/12119ea1/2950scg/swvlan.htm#1092283
HTH, if yes please rate the post.
Ankur

Vlan With Id 1005 On c1801

Hello,
I try to set a trunk with vlans > 1005 but the command is rejected :(
switchport trunk allowed vlan 2-99,101-1005
and I would like to set
switchport trunk allowed vlan 2-99,101-4094
on a c2950 it's ok but not on a c1801 :(

A 2950 will only support 64 spanning tree instances so you should manually prune everything that you don't need off the link , anything over 64 will not have a spanning tree instance . There really is no reason to allow that many vlans onto a 2950 anyway . I don't think the router supports extended vlans and thats why it is rejecting above 1005.

VLAN with 2 switch ESW - 520

For test I used 2 Switch that name "ESW X" and "ESW Y"
I have 2 network that I named "Network A" and "Network B"
I build 2 VLAN for each network that named Vlan 2 for Network A and Vlan 3 for Network B, I don't use Vlan 1 because it's the default Vlan
Configuration ESW X:
port e1 : ACCESS PORT on UNTTAGGED Vlan 2
port e2 : ACCESS PORT on UNTTAGGED Vlan 2
port e3 : ACCESS PORT on UNTTAGGED Vlan 3
port e4 : ACCESS PORT on UNTTAGGED Vlan 3
port g3 : TRUNK PORT with UNTTAGGED Vlan 1(default) and TAGGED Vlan 2 and Vlan 3
Configuration ESW Y:
port e1 : ACCESS PORT on UNTTAGGED Vlan 2
port e2 : ACCESS PORT on UNTTAGGED Vlan 2
port e3 : ACCESS PORT on UNTTAGGED Vlan 3
port e4 : ACCESS PORT on UNTTAGGED Vlan 3
port g3 : TRUNK PORT with UNTTAGGED Vlan 1(default) and TAGGED Vlan 2 and Vlan 3
I Use for test 2 computer with the same IP class adress.
Test Result :
Communication between ESW X e1 and ESW x e2 =>OK
Communication between ESW X e3 and ESW x e4 =>OK
Communication between ESW Y e1 and ESW Y e2 =>OK
Communication between ESW Y e3 and ESW Y e4 =>OK
Communication between ESW X e1 and ESW Y e1 or e2 =>NOK
Communication between ESW X e2 and ESW Y e1 or e2 =>NOK
Communication between ESW X e3 and ESW Y e3 or e4 =>NOK
Communication between ESW X e4 and ESW Y e3 or e4 =>NOK
Each Vlan can't communicate between the two switch, I think they're a problem in my vlan/port configuration, can you help me.

Hi Thibaud,
Thank you for the purchase of the ESW switches.
Just out of interest, are you using the latest firmware on your ESW switch version 2.1.19
But you sure sound like you have a great understanding of Tagged and untagged VLANs from you posting description..great stuff.
I just tried your configuration, I can communicate between ESW540-24P switch and a SF300-48P switch.
Sorry, I don't have two ESW switches handy. But it should not matter. Standards based Ethernet is hopefully just standards based ethernet
My vlan configuration below for my ESW540-24P, and it's working just fine.
I just connected switch ports 24 between the two switches together, that's why port 24 is tagged in each of the screen shots below.
I would really really doubt you would have a problem, unless there is something fundimental or basic you have done such as not saving the running configuration to the startup configuration. Obviously not backing up tjhe configuration before a power down will kill the configuration.
( saved your configuration within each switch)
Here is a copy of a section of my switch running configuration, that resulted from me playing with the ESW configuration utility.
(note that my switch has all Gigabit ethernet ports;)
interface range ethernet g(1-2)
switchport trunk native vlan 2
exit
interface ethernet g24
switchport trunk allowed vlan add 2
exit
interface range ethernet g(3-4)
switchport trunk native vlan 3
exit
interface ethernet g24
switchport trunk allowed vlan add 3
exit
If you are still having issue, here is the contact URL for the Small Business Support Center, maybe a fresh set of eyes can spot the issue;
http://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html
regards Dave

Vlans with ESX 3.5 and Cat6509

Similar Messages

Maybe you are looking for