05-20-2016 02:05 PM - edited 03-05-2019 04:03 AM
Does anyone know how to get around Mollom blocking me from a post. If I try to say anything except that they are blocking me it gets blocked
05-20-2016 02:07 PM
Here is the real question: See if I can outsmart the spam filter.
I am a novice cisco person, but felt I was making good progress. I have a school situation where we have a district office connected via 1G fiber to all sites to give us a WAN. I am upgrading and changing closets in the schools to allow smart Cisco POE switches in every site in every closet.. At the district office, we connect to 5 different school sites. The district office is 192.168.20.x and has the configuration of district_office which is attached. In school1 (configuration also attached); everything works beautifully. It is VLAN9 and attaches to port9 on the district switch. The ip address of the main switch at school1 is 192.168.9.10. After getting this one working, I felt I could do essentially the same thing at all other sites. I have tried configuring school 2 to be the same except that it is VLAN10, plugged into port 10 on the district switch and has an ip address of 192.168.10.1. I am testing on port 8 and nothing is working correctly.
1. When I changed from VLAN1 having dhcp assigned ip to having no ipaddress and having VLAN 10 have 192.168.10.1 as the IP address I lose telnet and SSH. So I can only connect to the switch by a cable in the config port.
2. On port 8, it works until I enter in "switchport access vlan10" entering that command drops all communication with the port.
I think the two problems are related, but I do not know where the issue is. The scripts on school1 and school2 look to be the same. Port1 on each switch is where the school connects back to the district office. If I change port1 at school 2 to:
siwtchport access vlan 10;
the entire switch loses all communication with everything which puts off fire alarms and knocks all network and phone access at the school2. So I am looking to see if anyone can give me some insight into where my error is. I am a novice. Everything you see thus far I have completed from reading only --- so please do not be too hard on me.
Thanks and God Bless,
David
Text files to come
05-21-2016 01:36 AM
Hello David,
welcome to the CSC forum!
A couple of weeks ago I also had trouble with the anti-spam filters, it can be really annoying and I guess it's even worse for new members. Unfortunately it is necessary to do something against spam because they had several chinese spam attacks here on CSC.
Regarding your question: Can you confirm that VLAN 10 exists on the switches in school 2 and the district office?
If so, you need at least one operational port in VLAN 10, otherwise the spanning-tree protocol instance for VLAN 10 won't come up. If you change only port 1 to VLAN 10, the VLAN 10 SVI (switched virtual interface - IP 192.168.10.1) should be able to communicate with the district office but all other ports will loose external connectivity as they are now isolated in VLAN 1.
Perhaps we should optimize the configurations of your uplinks and spanning-tree later, but as long as the switch in school 2 doesn't have any redundant connections you could first change the port configurations all simultaneously like this:
HTH
Rolf
05-23-2016 10:14 AM
When I run show vlan ID on the district switch, I get:
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
10 VLAN0010 active Gi0/5, Gi0/10
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
10 enet 100010 1500 - - - - - 0 0
Remote SPAN VLAN
----------------
Disabled
Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------
When I run it at school 2, I get:
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
10 VLAN0010 active
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
10 enet 100010 1500 - - - - - 0 0
Remote SPAN VLAN
----------------
Disabled
Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------
05-23-2016 10:26 AM
I am willing to try the switchport access vlan 10 again on every port, but that has been my downfall. Everytime I add that line, everything goes down. If I run sown vlan id 1 at school 2, i get:
---- -------------------------------- --------- -------------------------------
1 default active Gi1/0/1, Gi1/0/2, Gi1/0/3
Gi1/0/4, Gi1/0/5, Gi1/0/6
Gi1/0/7, Gi1/0/8, Gi1/0/9
Gi1/0/10, Gi1/0/11, Gi1/0/12
Gi1/0/13, Gi1/0/14, Gi1/0/15
Gi1/0/16, Gi1/0/17, Gi1/0/18
Gi1/0/19, Gi1/0/20, Gi1/0/21
Gi1/0/22, Gi1/0/23, Gi1/0/24
Gi1/0/25, Gi1/0/26, Gi1/0/27
Gi1/0/28
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
Remote SPAN VLAN
----------------
Disabled
Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------
and everything works. It seems to me it should not be working. If i run vlan id 1 at the district office, it shows:
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi0/5, Gi0/25, Gi0/26, Gi0/27
Gi0/28
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 1002 1003
Remote SPAN VLAN
----------------
Disabled
Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------
So it seems to me that vlan1 should not even make it to school 2 because school 2 connects to port 10 at district office which is vlan 10, but if I change school 2 from vlan 1 to vlan 10 like it should be, then all ports go offline. This is not the way school 1 worked at all.
Thanks for any help once again.
David
05-20-2016 02:09 PM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide