Unsolved

This post is more than 5 years old

62553

January 10th, 2013 23:00

PowerConnect 7024 and 5548/5548P network intermittent down issue

Hi,

I buyed 2 PowerConnect 7024, 2 PowerConnect 5548 and 2 PowerConnect 5548P, all these switches are stacking invidual by model. Everytime I change configuration like vlan, switchport or route. There has certain computer or voip devices are intermittent down. I can ping to vlan 1, 2, 3 and 100 from my pc/switches. But cannot ping vlan 2, 3 and 100 from firewall except vlan 1 and firewall itself. Am i did a wrong on switch configuration?

vlan 1: data network (172.16.20.x)

vlan 2: voip network (172.16.108.x)

vlan 3: vpn server network (172.16.30.x)

vlan 100: firewall/router network (10.1.20.x)

PowerConnect 7024 stacking: core switch

PowerConnect 5548 stacking: server/system farm switch

PowerConnect 5548P stacking: voip phone and computer switch

PowerConnect 7024 configuration:

!Current Configuration:
!System Description "PowerConnect 7024, 5.0.1.3, VxWorks 6.6"
!System Software Version 5.0.1.3
!System Operational Mode "Normal"
!
configure
vlan 2-3,100
exit
hostname "PC7024-KL-CORE"
slot 1/0 2    ! PowerConnect 7024
slot 1/1 9    ! CX4 Card
slot 2/0 2    ! PowerConnect 7024
slot 2/1 9    ! CX4 Card
sntp unicast client enable
sntp server 110.74.135.10
clock timezone 8 minutes 0 zone "MYT"
stack
member 1 2    ! PCT7024
member 2 2    ! PCT7024
exit
ip routing
ip route 0.0.0.0 0.0.0.0 10.1.20.1
interface vlan 1
ip address 172.16.20.1 255.255.252.0
exit
interface vlan 2
ip address 172.16.108.1 255.255.252.0
exit
interface vlan 3
ip address 172.16.30.1 255.255.255.0
exit
interface vlan 100
ip address 10.1.20.4 255.255.255.0
exit
username "admin" password 5f4dcc3b5aa765d61d8327deb882cf99 privilege 15 encrypted
!
interface Gi1/0/1
channel-group 1 mode active
description '####UPLINK_TO_PC5548####'
switchport mode trunk
exit
!
interface Gi1/0/2
channel-group 2 mode active
description '####UPLINK_TO_PC5548P####'
switchport mode trunk
exit
!
interface Gi1/0/3
description '####DATA_VLAN####'
spanning-tree portfast
exit
!
interface Gi1/0/21
description '####TO_CISCO2800-KL-LL-RTR####'
spanning-tree portfast
switchport access vlan 100
exit
!
interface Gi1/0/22
description '####TO_CISCO2900-KL-DMVPN-RTR####'
spanning-tree portfast
switchport access vlan 100
exit
!
interface Gi1/0/24
description '####FW-SC_VLAN_TO_CYBEROAM_FIREWALL####'
spanning-tree portfast
switchport access vlan 100
exit
!
interface Gi2/0/1
channel-group 1 mode active
description '####UPLINK_TO_PC5548####'
exit
!
interface Gi2/0/2
channel-group 2 mode active
description '####UPLINK_TO_PC5548P####'
switchport mode trunk
exit
!
interface Gi2/0/3
description '####DATA_VLAN####'
spanning-tree portfast
exit
!
interface Gi2/0/21
description '####TO_CISCO2800-KL-LL-RTR####'
spanning-tree portfast
switchport access vlan 100
exit
!
interface Gi2/0/22
description '####TO_CISCO2900-KL-DMVPN-RTR####'
spanning-tree portfast
switchport access vlan 100
exit
!
interface Gi2/0/24
description '####FW-SC_VLAN_TO_CYBEROAM_FIREWALL####'
spanning-tree portfast
switchport access vlan 100
exit
!
interface port-channel 1
switchport mode trunk
exit
!
interface port-channel 2
switchport mode trunk
exit
!
snmp-server engineid local 800002a203d067e5a57d0a
enable password 5f4dcc3b5aa765d61d8327deb882cf99 encrypted
exit

PowerConnect 5548 configuration:

port jumbo-frame
vlan database
vlan 2-3
exit
voice vlan oui-table add 000181 Nortel__________________
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 001049 Shoretel________________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00907a Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
voice vlan id 2
iscsi target port 860 address 0.0.0.0
iscsi target port 3260 address 0.0.0.0
iscsi target port 9876 address 0.0.0.0
iscsi target port 20002 address 0.0.0.0
iscsi target port 20003 address 0.0.0.0
iscsi target port 25555 address 0.0.0.0
no eee enable
qos advanced
ip access-list extended VOIP
permit ip any 172.16.108.0 0.0.3.255
exit
ip access-list extended LAN
permit ip any any
exit
class-map VOIP
match access-group VOIP
exit
class-map LAN
match access-group LAN
exit
policy-map voice
class VOIP
set queue 6
exit
class LAN
trust cos-dscp
exit
exit
hostname PC5548
username admin password encrypted 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 privilege 15
clock timezone MYT +8
clock source sntp
sntp unicast client enable
sntp server 110.74.135.10
!
interface vlan 1
 name DATA_VLAN
 ip address 172.16.20.100 255.255.252.0
!
interface gigabitethernet1/0/1
 description ####DATA_VLAN####
 spanning-tree portfast
!
interface gigabitethernet1/0/32
 description ####VOIP_PABX_VLAN####
 spanning-tree portfast
 service-policy input voice
 switchport access vlan 2
!
interface gigabitethernet1/0/46
 description ####VPN_VLAN####
 spanning-tree portfast
 switchport access vlan 3
!
interface gigabitethernet1/0/48
 description ####UPLINK_TO_PC7024####
 channel-group 1 mode auto
 service-policy input voice
 switchport mode trunk
!
interface gigabitethernet2/0/1
 description ####DATA_VLAN####
 spanning-tree portfast
!
interface gigabitethernet2/0/32
 description ####VOIP_PABX_VLAN####
 spanning-tree portfast
 service-policy input voice
 switchport access vlan 2
!
interface gigabitethernet2/0/46
 description ####VPN_VLAN####
 spanning-tree portfast
 switchport access vlan 3
!
interface gigabitethernet2/0/48
 description ####UPLINK_TO_PC7024####
 channel-group 1 mode auto
 service-policy input voice
 switchport mode trunk
!
interface Port-channel1
 switchport mode trunk
!
ip route 0.0.0.0 0.0.0.0 172.16.20.1

Default settings:
Service tag: xxxxxxx  (remove tag for security)

SW version 4.1.0.8 (date  28-Aug-2012 time  11:17:36)

Gigabit Ethernet Ports
=============================
no shutdown
speed 1000
duplex full
negotiation
flow-control on
mdix auto
no back-pressure

interface vlan 1
interface port-channel 1 - 32

spanning-tree
spanning-tree mode RSTP

qos basic
qos trust cos
eee enable

PowerConnect 5548P configuration:

port jumbo-frame
vlan database
vlan 2
exit
voice vlan oui-table add 000181 Nortel__________________
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 001049 Shoretel________________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00907a Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
voice vlan id 2
iscsi target port 860 address 0.0.0.0
iscsi target port 3260 address 0.0.0.0
iscsi target port 9876 address 0.0.0.0
iscsi target port 20002 address 0.0.0.0
iscsi target port 20003 address 0.0.0.0
iscsi target port 25555 address 0.0.0.0
no eee enable
hostname PC5548P
username admin password encrypted 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 pr
ivilege 15
clock timezone MYT +8
clock source sntp
sntp unicast client enable
sntp server 110.74.135.10
!
interface vlan 1
 ip address 172.16.20.108 255.255.252.0
!
interface gigabitethernet1/0/1
 description ####DATA_VLAN####
 spanning-tree portfast
!
interface gigabitethernet1/0/36
 description ####VOIP_Polycom_SoundStation_IP7000_VLAN####
 switchport access vlan 2
!
interface gigabitethernet1/0/48
 description ####UPLINK_TO_PC7024####
 channel-group 2 mode auto
 switchport mode trunk
!
interface gigabitethernet2/0/48
 description ####UPLINK_TO_PC7024####
 channel-group 2 mode auto
 switchport mode trunk
!
interface Port-channel2
 switchport mode trunk
!
ip route 0.0.0.0 0.0.0.0 172.16.20.1

Default settings:
Service tag: xxxxxxx  (remove tag for security)

SW version 4.1.0.8 (date  28-Aug-2012 time  11:17:36)

Gigabit Ethernet Ports
=============================
no shutdown
speed 1000
duplex full
negotiation
flow-control on
mdix auto
no back-pressure

interface vlan 1
interface port-channel 1 - 32

spanning-tree
spanning-tree mode RSTP

qos basic
qos trust cos
eee enable

1 more thing, I would like connect computer and hard ip phone into same network port. Izzit i need to configuration native vlan? Can you provide sample of configuration?

Thanks.

 

802 Posts

January 11th, 2013 08:00

At first glance, it looks like you may have a spanning tree issue.  You have multiple physical ports in VLAN access VLAN 100 with portfast.  Typically portfast is used for end devices and not connections between network devices.  

Can you provide a diagram of you physical network to enable us to see an overview of what devices are connected to what in your environment.  The answer may be as simple as clearing the portfast setting off of your connections for vlan 100 to the firewall and other switches/routers.

Here is a good article on setting up VOIP on the 5548P switch:

en.community.dell.com/.../configuring-dell-powerconnect-55xx-series-switch-voice-vlan.aspx

I hope this helps,

January 11th, 2013 20:00

- interface Gi1/0/24 is connect to firewall Internet gateway for Internet access purpose. - interface Gi1/0/21 is connect to point-to-point link for connection between DMZ subnet in firewall Internet gateway and DMZ subnet in data center via core switch. - interface Gi1/0/22 is connect to DMVPN router for connection of data, VoIP and VPN subnet with other branches. I also refer to the link above to setting up VoIP vlan but the article did not mention how to setting up tagged VoIP phone and untagged computer on same network port. Eg: network cable from switch connect to VoIP phone. Then another network cable of VoIP phone network port connect to computer. Izzit need to use switchport mode general instead of switchport mode trunk on the network port?

802 Posts

January 14th, 2013 11:00

Here is a sample config:

****VLAN 10 is configure for voice****

****VLAN 200 is configure for data. ****

****CoS (802.1p) of 4 is use for the the voice****

Console(config)# voice vlan

Console(config)# interface ethernet 1/g10-1/g15

Console(config-if)# switchport mode general

Console(config-if)# switchport general allowed vlan add 10 tagged

Console(config-if)# switchport general allowed vlan add 200 untagged

Console(config-if)# switchport general pvid 200

Console(config-if)# switchport general allowed vlan remove 1

Console(config-if)# voice vlan 10

Console(config-if)# voice vlan dot1p 4

Console(config-if)# voice vlan data priority untrust

Console(config-if)# end

The PVID command is what tags the incoming traffic that has no voice mac address.

Page 615 of the owners manual goes over the Voice VLAN commands.

support.dell.com/.../cli_en.zip

Page 384 of this manual also takes us step by step on creating a Voice VLAN.

support.dell.com/.../ucg_en.zip

No Events found!

Top