PowerConnect 3424/2724 & VLANs

Here is the base network diagram http://shieldsproductions.com/vlans.php

VLAN 10 is for public IPs
VLAN 20 is for DMZ IPs
VLAN 40 is for private IPs

I currently have VLAN 10 public, VLAN 20 DMZ and VLAN 40 private working on the 3424. I would like the VLANs to work no matter what switch I put them on, but I can't figure out how to get the 3424 and the 2724 to pass the VLAN "stuff" between them.

Currently the ports on the 3424 that the 2724's are plugged into are on VLAN 40, so all the servers on the 2724's only can talk to other servers on VLAN 40.

NOTE: I have read through all the doc's. And I have tried to do "trunking" but when I do the 2724's get cut off. What would be nice is a step by step guide to setup VLANs with multiple switches.

Here is the 3424. The 2724's don't have telnet access, it's web access only. Username/Password have been removed.


console# sh run
vlan database
vlan 10,20,40
exit
interface range ethernet e(1-3)
switchport access vlan 10
exit
interface range ethernet e(4-24),g(1-4)
switchport access vlan 40
exit
interface vlan 10
name Untrusted
exit
interface vlan 20
name DMZ
exit
interface vlan 40
name "Private - Trusted"
exit
interface range ethernet e(23-24)
no negotiation
exit
interface vlan 40
ip address 10.10.0.10 255.255.255.0
ip address 192.168.1.2 255.255.255.0
exit

snmp-server community Dell_Network_Manager rw view DefaultSuper






Default settings:
Service tag: 1LK0L71

SW version 1.0.0.112 (date 20-Jun-2005 time 22:04:47)

Fast Ethernet Ports
==========================
no shutdown
speed 100
duplex full
negotiation
flow-control off
mdix auto
no back-pressure

Gigabit Ethernet Ports
=============================
no shutdown
speed 1000
duplex full
negotiation
flow-control off
mdix auto
no back-pressure

interface vlan 1
interface port-channel 1 - 8

spanning-tree
spanning-tree mode STP

qos basic

Yes...you are right about 2724.  Can you tell me how you tried to configured 2724 for trunking?  Just summarize what you tried to do on the 2724 for this.  In the meanwhile I'll look at your config and will let you know in a bit.

Cuong.

One more thing, I just looked at the network diagram you posted and I don't see where the 2724 is in your picture.  Is it between the PCs and the 3424?

Cuong.

Both the 3424 and the 2724's I have created VLANs 10, 20 & 40. On the 3424 ports where the 2724's are connected I set them to Trunk in the Port Settings. On the 2724's I have set every port to VLAN40. When I turn trunk on in the 3424 the 2724's are unreachable and anything connected to them is unreachable.

Oh yes...I remember your picture before :-).  But can you send me your configuration for your switches please (do a "show running-config" from the CLI console and then capture the text and post it).  I need to see what you are configuring.  Show me a configuration that you tried and didn't work.  I will look to see if I can spot the problem.

Cuong.

Your configuration on 3424 doesn't seem to match your network diagram.  From the configuration it seems that ports 1, 2, and 3 are member of VLAN 10; ports 1-24 are member of VLAN 40 (so 1,2,3 are member of both 10 and 40).  I don't see any port assigned to VLAN 20.  There are no trunk ports at all.  All ports are configured as access mode.  So which ports are you connecting to the 2724?

Anyway, I'm not sure where to start so instead, I'll refer you to these documents which describe how to setup VLAN trunking and segmentation:

http://www.dell.com/downloads/global/products/pwcnt/en/app_note_8.pdf

This one shows a more complex scenario with a trunk port on multiple VLANs:

http://www.dell.com/downloads/global/products/pwcnt/en/app_note_4.pdf

If you try this and still don't get the result you want then post your issue again with exactly what you tried (including switch configuration for 3424 and overview of your attempts on 2724 or screen snapshot showing VLAN config on 2724) then I'll try to see if I can help you figure out the problem.

Sorry for not being more helpful in this case.

Cuong.

I've had to revert to the current config to get everyone on the private network. I've read the docs you said.

Ports 22, 23 & 24 are uplinked to the 2724's. When I turn trunking on, the 2724's get disconnected. On the 2724's all ports are members of VLAN 40 Untagged.

So, what are the exact steps that I need to use to have VLANs across my network?