[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


Setting up Cisco 2960 with VLANs

Posted on 2007-07-30
Medium Priority
Last Modified: 2013-11-09
I have the following devices:
- 6 x accesspoints (Cisco AP1131AG)
- 1 x switch (Cisco 2960)
- 1 x Firewall (Cisco ASA5510)

The switch collects the six APs and connects to its own interface on the ASA.
Every AP have 2 SSIDs; a private net and a guest net. These two SSIDs have been given the vlan numbers 2 and 3 in the APs. The six APs are spread widely among the area to provide best coverage and roaming.
The ASA will route clients based on its vlan number.

I have plugged it like this:
F0/1: AP1
F0/2: AP2
F0/3: AP3
F0/4: AP4
F0/5: AP5
F0/6: AP6
F0/11: LAN (for mangement)
F0/12: ASA5510 (unique interface)

How do i configure the switch to allow these two vlans on every port to go forward to the ASA?
And is my solution optimal? I want to get 2 wireless nets that people can access all over the company.
Question by:chanfandk
  • 3
  • 2
LVL 27

Expert Comment

ID: 19591576
You would trunk each connection to the AP's with the two vlans assigned to the trunk - 802.1q trunking.  Then, you would trunk the two vlans to the ASA, or send the vlans seperately per port - vlan A on one port, vlan B on another port.

Optimally, you would use a wirless controller and convert your AP's to "light" AP's so that all the config is done in the controller.  Then the APs build their own tunnels through your network back to the controller and you only have to worry about the vlans in once place, on the controller.


Author Comment

ID: 19591740
Hi pseudocyber,I can see a point with the 2106, but will stick to the equipment i already have.
There is a single line between the 2960 and the ASA. Routing will be done in the ASA, based on VLAN number.
Could you please provide me with the commands needed for configuring the 2960?
LVL 27

Expert Comment

ID: 19591774

Author Comment

ID: 19652505
I saw that doc before i posted this question. You need to understand the theory in full to use it. And i dont.
I guess i should set "switchport mode trunk" on interface 1-6+12 ?
Is that it, or must i specify both vlans on every interface?
LVL 27

Accepted Solution

pseudocyber earned 750 total points
ID: 19653486
You need to define vlans 2 and 3 on the switch.
Then, set the ports to trunking mode.
Then, make the ports members of those vlans.

I'll attempt to give you the commands, though I confess to relying on ? in the cli.

(conf mode)
vlan 2
(vlan conf mode)
name SSID A
cntrl z
vlan 3

(conf int mode)
switchport mode trunk
switchport trunk encap dot1q
switchport trunk allowed vlan add 2
switchport trunk allowed vlan add 3

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
DECT technology has become a popular standard for wireless voice communication. DECT devices are not likely to be affected by other electronic devices and signals because they operate in a separate frequency-band.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

873 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question