Thank you very much. Ok, does this make sense for what I will enter from start to finish? What I want to do is configure only a couple of ports right now for this set up and then I will want to make changes so that all the ports will work the same. This example is to work with only a couple of ports.
configure interface ethernet 1/g1 switchport model general switchport general allowed vlan add 10 switchport general pvid 10 exit
configure interface ethernet 1/g2 switchport model general switchport general allowed vlan add 20 switchport general pvid 20 exit
configure interface vlan 10 ip address 192.168.67.18 255.255.255.0 #the IP address cannot be 192.168.67.1 because our firewall already has that address routing exit
configure interface vlan 20 ip address 192.168.68.2 255.255.254.0 #again the address cannot be 192.168.68.1 because it is reserved routing exit
ip routing
=========END==============
We are planning to have all production servers/printers/etc use the 192.168.67.x subnet as that is what they are using right now. DHCP will only be in charge of releasing addresses from the 192.168.68.x subnet. Do we still need to add the "ip helper-address" command?
We are unsure of what the "switchport general pvid X" command is, can you please explain it to us?
The commands above that assign the PVID are from the example given by Dell's configuration guide. Are those commands required? If not, what do we need to enter to simply set up a couple of ports, one for each VLAN?
Thank you, yes, we have gone through the configuration file but we are still confused as to exactly what we need to do. The example shows configuring two VLANs using two different switches for the VLANs. We don't want to set up extra switches, we just want to have any server/workstation to connect to any port on the 6248 and be able to either have a 192.168.67.x or 192.168.68.x address and still be able to communicate with any server/workstation on either subnet. If possible, can you give us step by step tutorial on what we need to enter through the console? Please let me know if you need more details.
from global configuration mode enter vlan database configuration mode entering vlan database
issue vlan N1, N2 to create 2 VLANs
exit to global config mode and issue int vlan N1, after that enter ip address 192.168.67.1 255.255.255.0 and routing to give VLAN address and enable routing. Also if your DHCP clients and server are located in different VLANs, you need add ip helper-address 192.168.X.X dhcp to VLAN interface where your clients are connected
repeat this for second VLAN (except ip helper-address)
exit to global config mode and issue ip routing, now that's all with VLAN Interfaces
select all interfaces with int range ethernet all
get them into general mode: switchport mode general
now, if you need access VLAN where your PC or server is connected enter interface config mode and issue switchport general pvid X
if you need trunk port where several VLANs are traverse, issue switchport general allowed vlan add X tagged for each VLAN you need on trank
Hope this helps. If something won't work or I didn't mention it, just say
If you use static addresses on your server/printers then you dont need the ip helper-address for that VLAN. If you want to use DHCP reservations and assign a specific IP per MAC address then you will need it. In this way your servers/printers still get an IP address from DHCP but always get the same one.
For each port on the 6200 you need to assign it to either VLAN 20 or 10 based on what your connecting to that port.. Thats what the switchport command does. I prefer to use the "switchport access vlan" command but witht the previously given switchport commands effectivly do the same thing.
If your DHCP server and clients in one VLAN (192.68.68.0/24 as you've mentioned) no additional configuration required. IP Helper redirects broadcast DHCP packets from one VLAN to host (server) in another.
Switchport general pvid 20 means that frames in VLAN 20 are going from port untagged and port is waiting frames untagged from end host.
Switchport general allowed vlan add 20 and switchport general pvid 20 are used to set port in simple access mode (opposite is trunk mode), for one VLAN as you said.
For example, if you need link between two switches that span several VLANs, you must add this VLANs tagged to inter-switch link so switches can distinguish them.
switchport general allowed vlan add 20 switchport general pvid 20
We don't need a link between two switches as this L3 switch is where all the LAN server/workstations will connect to. If we need to connect more workstations after that, we will connect workstations to simple switches.
The IP address of the switch itself is 192.168.67.3. I just tried to configure the IP address of VLAN 10 with 192.168.67.18 but I got this error:
Subnet conflict between specified IP Address and current configuration. All routing interfaces, service ports and network ports must be configured on different subnets.
switchport general allowed vlan add 20 switchport general pvid 20
If your using "switchport mode general" then yes. If your using "switchport mode acces" then no. Those two examples were jsut two different ways to acomplish the same thing.
Make sure you have a console connection because you need to remove the management ip address so you can assign an IP addresses in that subnet to the vlan interface. It might not make you include the subnet.
Thank you Justiny. We had the switch on our LAN because it is currently offsite and we can't easily get to it. If we switch the management IP, how can we set it up so we can still connect to it from the LAN?
Also, if we need to set up a route (Default route 0.0.0.0 192.168.67.1), how do we do it?
Thanks Anaraendil. The plan to have 2 VLANs is what we need and we need to have a management VLAN as well. If I can't set the management VLAN to have an IP from one of the subnets that requires a VLAN, how can I set the switch up so that I can connect to it from either VLAN. The two IP subnets will be 192.168.67.x and 192.168.68.x. Management VLAN is currently 192.168.67.3. We need access to the switch through the LAN since it's located offsite.
FDSCI
14 Posts
0
March 23rd, 2011 09:00
Thank you very much. Ok, does this make sense for what I will enter from start to finish? What I want to do is configure only a couple of ports right now for this set up and then I will want to make changes so that all the ports will work the same. This example is to work with only a couple of ports.
=========START===========================
enable
configure
vlan database
vlan 10
vlan 20
exit
configure
interface ethernet 1/g1
switchport model general
switchport general allowed vlan add 10
switchport general pvid 10
exit
configure
interface ethernet 1/g2
switchport model general
switchport general allowed vlan add 20
switchport general pvid 20
exit
configure
interface vlan 10
ip address 192.168.67.18 255.255.255.0 #the IP address cannot be 192.168.67.1 because our firewall already has that address
routing
exit
configure
interface vlan 20
ip address 192.168.68.2 255.255.254.0 #again the address cannot be 192.168.68.1 because it is reserved
routing
exit
ip routing
=========END==============
We are planning to have all production servers/printers/etc use the 192.168.67.x subnet as that is what they are using right now. DHCP will only be in charge of releasing addresses from the 192.168.68.x subnet. Do we still need to add the "ip helper-address" command?
We are unsure of what the "switchport general pvid X" command is, can you please explain it to us?
The commands above that assign the PVID are from the example given by Dell's configuration guide. Are those commands required? If not, what do we need to enter to simply set up a couple of ports, one for each VLAN?
Thanks very much!
Christian
Anaraendil
72 Posts
0
March 22nd, 2011 10:00
Hi,
Did you see Dell PC 6200 Configuration Guide? In particular chapters Virtual LANs and VLAN Routing?
http://support.dell.com/support/edocs/network/pc62xx/en/Config/config.pdf
If you have more questions, feel free to ask
FDSCI
14 Posts
0
March 22nd, 2011 13:00
Hi there,
Thank you, yes, we have gone through the configuration file but we are still confused as to exactly what we need to do. The example shows configuring two VLANs using two different switches for the VLANs. We don't want to set up extra switches, we just want to have any server/workstation to connect to any port on the 6248 and be able to either have a 192.168.67.x or 192.168.68.x address and still be able to communicate with any server/workstation on either subnet. If possible, can you give us step by step tutorial on what we need to enter through the console? Please let me know if you need more details.
Thanks,
Christian
Anaraendil
72 Posts
0
March 23rd, 2011 04:00
Hi,
Ok. Let's start:
Hope this helps. If something won't work or I didn't mention it, just say
JustinY
1 Rookie
•
117 Posts
0
March 23rd, 2011 10:00
If you use static addresses on your server/printers then you dont need the ip helper-address for that VLAN. If you want to use DHCP reservations and assign a specific IP per MAC address then you will need it. In this way your servers/printers still get an IP address from DHCP but always get the same one.
For each port on the 6200 you need to assign it to either VLAN 20 or 10 based on what your connecting to that port.. Thats what the switchport command does. I prefer to use the "switchport access vlan" command but witht the previously given switchport commands effectivly do the same thing.
configure
interface ethernet 1/g2
switchport mode access
switchport access vlan 20
exit
configure
interface ethernet 1/g2
switchport mode general
switchport general allowed vlan add 20
switchport general pvid 20
exit
Anaraendil
72 Posts
0
March 23rd, 2011 10:00
Hi,
Everything looks ok, except that you need to issue configure just once.
enable
configure
vlan database
vlan 10
vlan 20
exit
configure
interface ethernet 1/g1
...
If your DHCP server and clients in one VLAN (192.68.68.0/24 as you've mentioned) no additional configuration required. IP Helper redirects broadcast DHCP packets from one VLAN to host (server) in another.
Switchport general pvid 20 means that frames in VLAN 20 are going from port untagged and port is waiting frames untagged from end host.
Switchport general allowed vlan add 20 and switchport general pvid 20 are used to set port in simple access mode (opposite is trunk mode), for one VLAN as you said.
For example, if you need link between two switches that span several VLANs, you must add this VLANs tagged to inter-switch link so switches can distinguish them.
FDSCI
14 Posts
0
March 23rd, 2011 14:00
Thanks very much!
So do we need to enter the commands?:
switchport general allowed vlan add 20
switchport general pvid 20
We don't need a link between two switches as this L3 switch is where all the LAN server/workstations will connect to. If we need to connect more workstations after that, we will connect workstations to simple switches.
Thanks,
Christian
FDSCI
14 Posts
0
March 23rd, 2011 15:00
Hi there,
The IP address of the switch itself is 192.168.67.3. I just tried to configure the IP address of VLAN 10 with 192.168.67.18 but I got this error:
Subnet conflict between specified IP Address and current configuration.
All routing interfaces, service ports and network ports must be configured on
different subnets.
What do I need to do?
Thanks,
Christian
JustinY
1 Rookie
•
117 Posts
0
March 23rd, 2011 15:00
If your using "switchport mode general" then yes. If your using "switchport mode acces" then no. Those two examples were jsut two different ways to acomplish the same thing.
JustinY
1 Rookie
•
117 Posts
0
March 23rd, 2011 19:00
Make sure you have a console connection because you need to remove the management ip address so you can assign an IP addresses in that subnet to the vlan interface. It might not make you include the subnet.
config
no ip address 192.168.67.3
exit
FDSCI
14 Posts
0
March 23rd, 2011 23:00
Thank you Justiny. We had the switch on our LAN because it is currently offsite and we can't easily get to it. If we switch the management IP, how can we set it up so we can still connect to it from the LAN?
Also, if we need to set up a route (Default route 0.0.0.0 192.168.67.1), how do we do it?
Thanks,
Christian
Anaraendil
72 Posts
0
March 24th, 2011 03:00
Best option for you will be to leave VLAN 1 with current IP address and create just on more VLAN.
To add default route simply issue ip route default 192.168.67.1
FDSCI
14 Posts
0
March 24th, 2011 08:00
Thank you. What do you mean by create one more VLAN? If we need to create another VLAN, what IP should I set for it?
Thanks,
Christian
FDSCI
14 Posts
0
March 24th, 2011 11:00
Thanks Anaraendil. The plan to have 2 VLANs is what we need and we need to have a management VLAN as well. If I can't set the management VLAN to have an IP from one of the subnets that requires a VLAN, how can I set the switch up so that I can connect to it from either VLAN. The two IP subnets will be 192.168.67.x and 192.168.68.x. Management VLAN is currently 192.168.67.3. We need access to the switch through the LAN since it's located offsite.
Thanks,
Christian
Anaraendil
72 Posts
0
March 24th, 2011 11:00
Initial plan was to create 2 VLANs, but it would be easier for you to leave VLAN 1 and create only more VLAN. That's what I mean.
For a new VLAN you can use any IP that do not overlap with already used. That's the only rule