Avatar of philb19
 asked on

Polycomm IP670 - VOIP VLAN - I can ping the phone from data VLAN - no router between 2 VLANs

This might be a challenge


I have a PC and phone on 1 cable - 2 vlans


PC connected to Phone. - 1 cable back to cisco switches 2960's layer2

users were stealing phones from meeting rooms :)
So I thought I would put a IP monitor on the phones from my PC?
There is no route between the 2 VLANS - So how was I to do this.?

As a rough chance i thought id put a secondary IP on the PC interface I use. This secondary IP being on the same subnet as the Phone VLAN. - to my surprise it worked - I can ping the phones - any phone not just my own.

I had a very experienced Cisco engineer (who setup network) - in - he looked at what id done and couldnt explain how I was able to ping the phones with what I had done - 2 vlans - no route between them. - Im hoping someone here will know the polycom ip670 phones and will explain that they somehow route or bridge the 2 vlans - or other explanation - anyone thanks
Voice Over IPSwitches / HubsRouters

Avatar of undefined
Last Comment

8/22/2022 - Mon

when I do a tracert to the phone IP from the PC - it goes straight there - no hop

View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.

thanks but i dont quite follow. the examples vlan id's i gave are just examples - here is the true vlans

vlan 101 - voice
then vlans for data are by floor

ie floor3 - vlan103

So what does the default vlan1 of the polycom have to do with the pc being able to ping the phones in my scenario?
sorry if ive mis-understood

If I understand you correctly, it looks like the interface your PC is connecting to is a layer 3 interface (it has two IP addresses)... Correct?
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy

Hi BDC_Net - the PC does have 2 address's - yes both static. - 1 on the data VLAN subnet
1 (the secondary) in the same subnet range as the phones - but in theory this shouldnt  mean the pc can ping the phones - due to the VLANs not having a router between them - that we know of that routes between the 2 - you want to segment these vlans for qos of voice - id think in any case - bit of a worry

In a normal situation where you have a person like a receptionist who needs to access the phone system for her console, you have these options:

1) A network card with VLAN capability. You could then issue a VLAN 101 ip address and VLAN 103 address the the computer and it would be able to access both.

2) Two network cards, physically connected to separate VLANs.

3) ip routing setup on your switch or router.

Since you're saying you have an aliased IP on your computer, and it likely is on VLAN 101. I would think that your phones aren't really on a separate VLAN from computers, and they are just numbered differently. I'm betting on that.

hi mikedaddy - i have it answered from another q's  - here is the explanation - it doesnt need to route between vlans as the trunk ports tag the frames - and the pc interface is vlan aware

Brilliant - thanks everyone for answers. glitjr nailed it. - some further explanation below:
Beyond its intended purpose of configuring trunk links between switches, ISL is often used in other ways. For example, it is possible to purchase network interface cards that support ISL. If a server were configured with an ISL-capable network card, it could be connected to an ISL port on a switch. This would allow a server to be made part of multiple VLANs simultaneously, the benefit being that hosts from different broadcast domains could then access the server without the need for their packets to be routed. While this may seem like a perfect solution, you need to remember than the server would now see all traffic from these VLANs, which could negatively impact performance.

A more common alternative use for ISL is to connect a Cisco router to a switch in order to facilitate the routing of traffic between VLANs. For example, if you wanted to route traffic between VLANs 1 and 99 in a non-ISL environment with one switch, you would need to connect the router to both a port on VLAN 1 and a port on VLAN 99, as shown below.
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.

and here - is the accepted answer
route print from pc - said on-link

"On-link means that the IP addresses within that subnet are on the same subnet as this computer.  So it does not need to go through a router.

This indicates to me that VLAN tag'ing is enabled.  The computer has an IP address on both VLAN's so it can talk to the phones without going through a router."