Solved

VLAN config, Dell 6224, not passing tagged packets xg4

Posted on 2013-01-18
10
906 Views
Last Modified: 2016-11-23
Working for a WISP, trying to configure a Dell PowerConnect 6224 to pass both tagged and untagged packets. Was running as only untagged and service runs correctly. Some new equipment we are using requires a management vlan along with a customer data vlan. I have configured port xg4 (fiber port) as general with both the default untagged (1) and also with vlan tag 20. I have done the same to the additional ports that are required for our services to work. Port g23 is a backup line ran to our Ceragon radio equipment. The test piece of equipment only requires the management vlan, and must request DHCP from the EMS server. This is why I have not configured the customer vlan yet. I would like to see the requests coming back all the way to the server before enabling, as this requires me to move all of the customers to the new DHCP system. 1 step at a time, right?

To monitor this, I am watching for DHCP requests coming from a SkyPilot radio out in the field that is my test equipment. I see the DHCP requests coming back to the headend at the Ceragon but can not see the same requests at the switch using port mirroring of xg4 to g13, or when I set g13 as general and tagged as part of the same 20 vlan.

Below is a piece of the config file.

Thanks!

interface ethernet 1/g13
sflow 1 sampling 1024              
sflow 1 polling 30
switchport mode general
switchport general allowed vlan add 20 tagged
exit
!
interface ethernet 1/g14
sflow 1 sampling 1024
sflow 1 polling 30
switchport mode general
switchport general allowed vlan add 20 tagged
exit
!
interface ethernet 1/g17
sflow 1 sampling 1024
sflow 1 polling 30
switchport mode general
switchport general allowed vlan add 20 tagged
exit
!
interface ethernet 1/g18
sflow 1 sampling 1024
sflow 1 polling 30
switchport mode general
switchport general allowed vlan add 20 tagged
exit

interface ethernet 1/g23
storm-control broadcast
storm-control multicast
sflow 1 sampling 1024
sflow 1 polling 30
spanning-tree portfast
mtu 9216
switchport mode general
switchport general allowed vlan add 20 tagged
exit
!                    
interface ethernet 1/g24
sflow 1 sampling 1024
sflow 1 polling 30
gvrp enable
switchport mode general
exit
!
interface ethernet 1/xg4
spanning-tree disable
switchport mode general
switchport general allowed vlan add 20 tagged
exit
0
Comment
Question by:k_hoffhines
  • 4
  • 4
10 Comments
 
LVL 36

Expert Comment

by:ArneLovius
Comment Utility
if VLAN 20 is only tagged on ports, then your DHCP server will need to also have the VLAN20 as a tagged port on the NIC...
0
 

Author Comment

by:k_hoffhines
Comment Utility
Correct, I wasn't seeing the requests at all across the switch and that was my goal at the time of my posting.   I found that xg4 and g24 on the Dell switch are tied together, and so I needed to make my vlan tagging on g24, not the xg4 port.
0
 

Author Comment

by:k_hoffhines
Comment Utility
I've requested that this question be closed as follows:

Accepted answer: 0 points for k_hoffhines's comment #a38801470

for the following reason:

The one answer posted by someone else was relevant, but did not answer the question I had asked. I found the solution myself.
0
 
LVL 36

Expert Comment

by:ArneLovius
Comment Utility
The two ports are not "tied together".
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 36

Expert Comment

by:ArneLovius
Comment Utility
As there is no complete answer, I would not choose 2)

The OP's problem has apparently been solved, but the answer provided is not enough for anyone else to follow so I would not choose 3)

Therefore 1) Deletion would be my choice

I note that the 2nd paragraph says "Further, if you recommend #3 or #4, ", but there are only three options...
0
 

Author Comment

by:k_hoffhines
Comment Utility
I can clarify my answer, but I do not know specifically without talking to Dell that this is absolutely correct.

The 2 devices connected together (Ceragon IP10 and Dell PowerConnect 6224) are both 1000Mb, not 10G. Since port xg4 is a 10G, I am assuming that port g24, which is gigabit, becomes a "proxy" for xg4. I had to make my vlan configuration changes on g24, not on xg4, to resolve the problem I was having. After configuring port g24 in general mode and allowing my vlan 20 tag, I then began seeing the requests from the SkyPilot radio at the switch, which was my original question. I did leave the vlan configuration on xg4 also, so this may be a case in which you have to configure both ports to make it work. Again, without speaking to Dell support, I am unable to answer that with specifics.

The question asked is here in this paragraph:

 "To monitor this, I am watching for DHCP requests coming from a SkyPilot radio out in the field that is my test equipment. I see the DHCP requests coming back to the headend at the Ceragon but can not see the same requests at the switch using port mirroring of xg4 to g13, or when I set g13 as general and tagged as part of the same 20 vlan."

The suggestion of the server isn't relevant to what I was looking for at the switch, although I do realize that to get to the server I was going to need to have the server on the vlan.  I did appreciate that comment but did not answer my question.

The other answer posted after I closed the question:

 "by: ArneLoviusPosted on 2013-01-21 at 13:41:49ID: 38802329

The two ports are not "tied together"."

Does not provide any answer to the question asked, nor does it provide additional information to educate me further as to how the ports work together in this situation.
0
 
LVL 36

Accepted Solution

by:
ArneLovius earned 500 total points
Comment Utility
I did not claim that it answered your question, I claimed that you had not answered your question, and as the question was not answered, it should not be closed as answered.

If I can rewrite your description...

You have a 6224 switch.
Connected to the switch on port xg4 using a fibre SFP you have a Ceragon IP10
Both ends are configured with a native VLAN (1) and an 802.1q VLAN (20)
Connected to the switch on port 23 using copper, you have another link to the Ceragon IP10
You are expecting to see DHCP traffic coming from the Ceragon IP10 on port xg4 VLAN 20 on the 6224
To look for the DHCP traffic, you have configured monitor port on G13 with the source as xg4
You have an EMS server connected to the 6224
You have not seen any traffic

And now what I can infer from this.

I presume that you set the monitor command such as
monitor session 1 mode
monitor session 1 source interface 1/xg4
monitor session 1 destination interface 1/g13
I presume that you are using Wireshark  (or any similar packet sniifer that works in promiscuous mode) to monitor the port

I had presumed that your DHCP server was connected to VLAN 1 as you had not described configuring the DHCP server NIC onto VLAN 20 and the ports shown in the config fragment only  have VLAN 20 tagged.

Until the DHCP server is accessible (on the same VLAN as the DHCP request source), you will not see the DHCP request as the initial ARP request for the DHCP server address will fail.

I had presumed that as you were using xg4 that you were using a 10G link.

As you have now said that the link is only at 1G rather than 10G, I presume that you have put  1G SFP into a SFP+ module.

The four front panel SFP modules are "dual personality" with copper ports 21-24, either the copper port or the SFP is live.

The 10G ports xg1 to xg4 are not dual personality.

As to why adding the VLAN to port 24 "fixes" your problem, I have not got a clue. I would strongly suggest that you spoke to Dell support as it might well be indicative of a larger issue.

I had not suggested anything about using an "ip helper".

And after spending (wasting?) over an hour writing the above, I still think the question should be deleted.
0
 

Author Comment

by:k_hoffhines
Comment Utility
Thank you ArneLovius, that is actually a great answer to the situation that I posted, and an even better description than I had written.

No, you didn't not say anything about IP helper in the switch.
Yes, I was using wireshark with the filter bootp.option.typ == 53 . I can see the requests coming from the radio across the network and could see them at the switch on the Ceragon IP10. I could not see them at the 6224 until I configured vlan 20 on port g24.

Yes, we used 1G SFPs.

I will be in contact with Dell support to better understand why the changes were required on port g24 to make this work as it could be a larger issue.

Again, thanks for the great reply. I was frustrated by the first reply from you about the two ports.

ArneLovius, ID: 38808221, can have the points for providing a clear description and relevant information.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

The Cisco RV042 router is a popular small network interfacing device that is often used as an internet gateway. Network administrators need to get at the management interface to make settings, change passwords, etc. This access is generally done usi…
Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now