Start a Conversation

This post is more than 5 years old

Solved!

Go to Solution

45605

November 4th, 2011 02:00

PowerConnect 6224 and VLANs

Hi,
I am trying to set up an environment test, where my PowerConnect for now is only used with L2 capabilities (no VLANs Routing).
Two hosts on the same VLAN cannot communicate, and I do not understand why.
My switch is a PowerConnect 6224, with Image version 2.1.0.13 . My config is:

!Current Configuration:
!System Description "Dell 24 Port Gigabit Ethernet, 2.1.0.13, VxWorks5.5.1"
!System Software Version 2.1.0.13
!
configure
vlan database
vlan  2-3
exit
stack
member 1 1
exit
ip address 192.168.0.125 255.255.255.0
ip default-gateway 192.168.0.5
no ipv6 forwarding
interface vlan 2
exit
interface vlan 3
exit
!

interface ethernet 1/g3
switchport mode general
switchport general pvid 3
no switchport general acceptable-frame-type tagged-only
switchport general ingress-filtering disable
switchport general allowed vlan add 2-3
switchport general allowed vlan remove 1
exit
!
interface ethernet 1/g5
switchport mode general
no switchport general acceptable-frame-type tagged-only
switchport general allowed vlan add 2
switchport general allowed vlan remove 1
exit
!
interface ethernet 1/g7
switchport mode general
switchport general pvid 3                    
no switchport general acceptable-frame-type tagged-only
switchport general ingress-filtering disable
switchport general allowed vlan add 3
switchport general allowed vlan remove 1
exit

This config does not work even if I enable the "switchport general acceptable-frame-type tagged-only" and "switchport general ingress-filtering" options.
Thank you in advance for your suggestions.

31 Posts

November 4th, 2011 10:00

I'm not sure if I follow  what your looking for. I know as far as the port is concerned, one can confgure it for tagged vlans using truck mode, one untagged and multiple tagged vlans using general mode and access mode only passes untagged traffic.

8 Posts

November 4th, 2011 02:00

Sorry, incomplete informations.

The two hosts are directly connected respectively  on port 1/g3 and port 1/g7 .

31 Posts

November 4th, 2011 08:00

Are the two host configured to pass tagged or untagged traffic? Also, Can you pull a "Console#show interface switchport ether 1/g3" and the same for port 1/g7?

8 Posts

November 4th, 2011 08:00

Do you really need multiple vlans on a single port? You might consider trunking instead so both vlans are tagged. I've never tried using mode general, but mode access and mode trunk work great.

31 Posts

November 4th, 2011 09:00

Are you trying to pass both vlan 1 untagged and vlan 2  traffic tagged to the Linux box? If so, Then you may want to ensure that the linux box is configured to accept both vlans 1 untagged and vlan 2 tagged. Also, If those are the vlans you are looking to pass you may want to have a config like this to allow both vlans.

Console>en

Console#config

Console(config)#interface ether 1/g3

Console(config-if)#switchport mode general

Console(config-if)#switchport general allow vlan add 2 tagged

This config would allow port 1/g3 to accept untagged vlan 1 traffic along with tagged vlan 2 traffic. It has been my experience that trunk mode won’t pass vlan 1 traffic.

8 Posts

November 4th, 2011 09:00

I will take a look at the new firmware, thank you.
Anyway, port 1/g3 is only configured for tagged vlan2 traffic. Yes, if I change the port to access mode for vlan 2, the host is able to pass traffic.
I need that this port will work as a trunked port, because my porpose is to connect to it a linux box that will act as a firewall (I know that I can use the built-in ACl, but for now I want to use the switch as a simple L2 switch).
Thank you again

31 Posts

November 4th, 2011 09:00

Port 1/g3 is now only configured for tagged vlan 2 traffic. I suspect that if we changed it to access mode for vlan 2 that you would then be able to pass traffic. You may also want to look into a firmare update as you are few version behind, 3.3.1.10 is the latest.

8 Posts

November 4th, 2011 09:00

Thank you for the reply.

I have tried, as you suggested, to use mode trunk/access instead of general.

Now my config is:

!Current Configuration:

!System Description "Dell 24 Port Gigabit Ethernet, 2.1.0.13, VxWorks5.5.1"

!System Software Version 2.1.0.13

!

configure

vlan database

vlan  2-3

exit

stack

member 1 1

exit

ip address 192.168.0.125 255.255.255.0

ip default-gateway 192.168.0.5

no ipv6 forwarding

interface vlan 2

exit

interface vlan 3

exit

!

interface ethernet 1/g3

switchport mode trunk

switchport trunk allowed vlan add 1-2

exit

!

interface ethernet 1/g5

switchport access vlan 2

exit

!

interface ethernet 1/g7

switchport access vlan 2

exit

I can ping from the host on port 1/g5 the host on port 1/g7.

In the same way, I can ping from the host on port 1/g7 the host on port 1/g5.

But from the host on 1/g3 (in the trunked port) I cannot ping hosts on 1/g5 and 1/g7 and viceversa.

Thank you again

8 Posts

November 4th, 2011 10:00

Thank you JS :) I will try to load on my linux box the 802.1q kernel module.

Is there a way for untagging the frame directly on the trunked port?

I mean, is there a configuration that permit that my linux box receives frame without the 802.1q header (maybe a port configuration? ), and then filter the traffic on IP based informations?

Thank you again

8 Posts

November 7th, 2011 04:00

Thank you for your support JS.

No Events found!

Top