Link to home
Start Free TrialLog in
Avatar of philb19
philb19

asked on

Polycomm IP670 - VOIP VLAN - I can ping the phone from data VLAN - no router between 2 VLANs

This might be a challenge

Scenario:

I have a PC and phone on 1 cable - 2 vlans

vlan1-data
vlan2-voice

PC connected to Phone. - 1 cable back to cisco switches 2960's layer2

users were stealing phones from meeting rooms :)
So I thought I would put a IP monitor on the phones from my PC?
There is no route between the 2 VLANS - So how was I to do this.?

As a rough chance i thought id put a secondary IP on the PC interface I use. This secondary IP being on the same subnet as the Phone VLAN. - to my surprise it worked - I can ping the phones - any phone not just my own.

I had a very experienced Cisco engineer (who setup network) - in - he looked at what id done and couldnt explain how I was able to ping the phones with what I had done - 2 vlans - no route between them. - Im hoping someone here will know the polycom ip670 phones and will explain that they somehow route or bridge the 2 vlans - or other explanation - anyone thanks
Avatar of philb19
philb19

ASKER

when I do a tracert to the phone IP from the PC - it goes straight there - no hop
ASKER CERTIFIED SOLUTION
Avatar of jfaubiontx
jfaubiontx
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of philb19

ASKER

thanks but i dont quite follow. the examples vlan id's i gave are just examples - here is the true vlans

vlan 101 - voice
then vlans for data are by floor

ie floor3 - vlan103

So what does the default vlan1 of the polycom have to do with the pc being able to ping the phones in my scenario?
sorry if ive mis-understood
If I understand you correctly, it looks like the interface your PC is connecting to is a layer 3 interface (it has two IP addresses)... Correct?
Avatar of philb19

ASKER

Hi BDC_Net - the PC does have 2 address's - yes both static. - 1 on the data VLAN subnet
1 (the secondary) in the same subnet range as the phones - but in theory this shouldnt  mean the pc can ping the phones - due to the VLANs not having a router between them - that we know of that routes between the 2 - you want to segment these vlans for qos of voice - id think in any case - bit of a worry
In a normal situation where you have a person like a receptionist who needs to access the phone system for her console, you have these options:

1) A network card with VLAN capability. You could then issue a VLAN 101 ip address and VLAN 103 address the the computer and it would be able to access both.

2) Two network cards, physically connected to separate VLANs.

3) ip routing setup on your switch or router.

Since you're saying you have an aliased IP on your computer, and it likely is on VLAN 101. I would think that your phones aren't really on a separate VLAN from computers, and they are just numbered differently. I'm betting on that.
Avatar of philb19

ASKER

hi mikedaddy - i have it answered from another q's  - here is the explanation - it doesnt need to route between vlans as the trunk ports tag the frames - and the pc interface is vlan aware

Brilliant - thanks everyone for answers. glitjr nailed it. - some further explanation below:
ISL
Beyond its intended purpose of configuring trunk links between switches, ISL is often used in other ways. For example, it is possible to purchase network interface cards that support ISL. If a server were configured with an ISL-capable network card, it could be connected to an ISL port on a switch. This would allow a server to be made part of multiple VLANs simultaneously, the benefit being that hosts from different broadcast domains could then access the server without the need for their packets to be routed. While this may seem like a perfect solution, you need to remember than the server would now see all traffic from these VLANs, which could negatively impact performance.

A more common alternative use for ISL is to connect a Cisco router to a switch in order to facilitate the routing of traffic between VLANs. For example, if you wanted to route traffic between VLANs 1 and 99 in a non-ISL environment with one switch, you would need to connect the router to both a port on VLAN 1 and a port on VLAN 99, as shown below.
Avatar of philb19

ASKER

and here - is the accepted answer
route print from pc - said on-link

"On-link means that the IP addresses within that subnet are on the same subnet as this computer.  So it does not need to go through a router.

This indicates to me that VLAN tag'ing is enabled.  The computer has an IP address on both VLAN's so it can talk to the phones without going through a router."
Avatar of philb19

ASKER

ta