Solved

VLAN config, Dell 6224, not passing tagged packets xg4

Posted on 2013-01-18
10
921 Views
Last Modified: 2016-11-23
Working for a WISP, trying to configure a Dell PowerConnect 6224 to pass both tagged and untagged packets. Was running as only untagged and service runs correctly. Some new equipment we are using requires a management vlan along with a customer data vlan. I have configured port xg4 (fiber port) as general with both the default untagged (1) and also with vlan tag 20. I have done the same to the additional ports that are required for our services to work. Port g23 is a backup line ran to our Ceragon radio equipment. The test piece of equipment only requires the management vlan, and must request DHCP from the EMS server. This is why I have not configured the customer vlan yet. I would like to see the requests coming back all the way to the server before enabling, as this requires me to move all of the customers to the new DHCP system. 1 step at a time, right?

To monitor this, I am watching for DHCP requests coming from a SkyPilot radio out in the field that is my test equipment. I see the DHCP requests coming back to the headend at the Ceragon but can not see the same requests at the switch using port mirroring of xg4 to g13, or when I set g13 as general and tagged as part of the same 20 vlan.

Below is a piece of the config file.

Thanks!

interface ethernet 1/g13
sflow 1 sampling 1024              
sflow 1 polling 30
switchport mode general
switchport general allowed vlan add 20 tagged
exit
!
interface ethernet 1/g14
sflow 1 sampling 1024
sflow 1 polling 30
switchport mode general
switchport general allowed vlan add 20 tagged
exit
!
interface ethernet 1/g17
sflow 1 sampling 1024
sflow 1 polling 30
switchport mode general
switchport general allowed vlan add 20 tagged
exit
!
interface ethernet 1/g18
sflow 1 sampling 1024
sflow 1 polling 30
switchport mode general
switchport general allowed vlan add 20 tagged
exit

interface ethernet 1/g23
storm-control broadcast
storm-control multicast
sflow 1 sampling 1024
sflow 1 polling 30
spanning-tree portfast
mtu 9216
switchport mode general
switchport general allowed vlan add 20 tagged
exit
!                    
interface ethernet 1/g24
sflow 1 sampling 1024
sflow 1 polling 30
gvrp enable
switchport mode general
exit
!
interface ethernet 1/xg4
spanning-tree disable
switchport mode general
switchport general allowed vlan add 20 tagged
exit
0
Comment
Question by:k_hoffhines
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
10 Comments
 
LVL 37

Expert Comment

by:ArneLovius
ID: 38796344
if VLAN 20 is only tagged on ports, then your DHCP server will need to also have the VLAN20 as a tagged port on the NIC...
0
 

Author Comment

by:k_hoffhines
ID: 38801470
Correct, I wasn't seeing the requests at all across the switch and that was my goal at the time of my posting.   I found that xg4 and g24 on the Dell switch are tied together, and so I needed to make my vlan tagging on g24, not the xg4 port.
0
 

Author Comment

by:k_hoffhines
ID: 38802328
I've requested that this question be closed as follows:

Accepted answer: 0 points for k_hoffhines's comment #a38801470

for the following reason:

The one answer posted by someone else was relevant, but did not answer the question I had asked. I found the solution myself.
0
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

 
LVL 37

Expert Comment

by:ArneLovius
ID: 38802329
The two ports are not "tied together".
0
 
LVL 37

Expert Comment

by:ArneLovius
ID: 38807709
As there is no complete answer, I would not choose 2)

The OP's problem has apparently been solved, but the answer provided is not enough for anyone else to follow so I would not choose 3)

Therefore 1) Deletion would be my choice

I note that the 2nd paragraph says "Further, if you recommend #3 or #4, ", but there are only three options...
0
 

Author Comment

by:k_hoffhines
ID: 38807940
I can clarify my answer, but I do not know specifically without talking to Dell that this is absolutely correct.

The 2 devices connected together (Ceragon IP10 and Dell PowerConnect 6224) are both 1000Mb, not 10G. Since port xg4 is a 10G, I am assuming that port g24, which is gigabit, becomes a "proxy" for xg4. I had to make my vlan configuration changes on g24, not on xg4, to resolve the problem I was having. After configuring port g24 in general mode and allowing my vlan 20 tag, I then began seeing the requests from the SkyPilot radio at the switch, which was my original question. I did leave the vlan configuration on xg4 also, so this may be a case in which you have to configure both ports to make it work. Again, without speaking to Dell support, I am unable to answer that with specifics.

The question asked is here in this paragraph:

 "To monitor this, I am watching for DHCP requests coming from a SkyPilot radio out in the field that is my test equipment. I see the DHCP requests coming back to the headend at the Ceragon but can not see the same requests at the switch using port mirroring of xg4 to g13, or when I set g13 as general and tagged as part of the same 20 vlan."

The suggestion of the server isn't relevant to what I was looking for at the switch, although I do realize that to get to the server I was going to need to have the server on the vlan.  I did appreciate that comment but did not answer my question.

The other answer posted after I closed the question:

 "by: ArneLoviusPosted on 2013-01-21 at 13:41:49ID: 38802329

The two ports are not "tied together"."

Does not provide any answer to the question asked, nor does it provide additional information to educate me further as to how the ports work together in this situation.
0
 
LVL 37

Accepted Solution

by:
ArneLovius earned 500 total points
ID: 38808221
I did not claim that it answered your question, I claimed that you had not answered your question, and as the question was not answered, it should not be closed as answered.

If I can rewrite your description...

You have a 6224 switch.
Connected to the switch on port xg4 using a fibre SFP you have a Ceragon IP10
Both ends are configured with a native VLAN (1) and an 802.1q VLAN (20)
Connected to the switch on port 23 using copper, you have another link to the Ceragon IP10
You are expecting to see DHCP traffic coming from the Ceragon IP10 on port xg4 VLAN 20 on the 6224
To look for the DHCP traffic, you have configured monitor port on G13 with the source as xg4
You have an EMS server connected to the 6224
You have not seen any traffic

And now what I can infer from this.

I presume that you set the monitor command such as
monitor session 1 mode
monitor session 1 source interface 1/xg4
monitor session 1 destination interface 1/g13
I presume that you are using Wireshark  (or any similar packet sniifer that works in promiscuous mode) to monitor the port

I had presumed that your DHCP server was connected to VLAN 1 as you had not described configuring the DHCP server NIC onto VLAN 20 and the ports shown in the config fragment only  have VLAN 20 tagged.

Until the DHCP server is accessible (on the same VLAN as the DHCP request source), you will not see the DHCP request as the initial ARP request for the DHCP server address will fail.

I had presumed that as you were using xg4 that you were using a 10G link.

As you have now said that the link is only at 1G rather than 10G, I presume that you have put  1G SFP into a SFP+ module.

The four front panel SFP modules are "dual personality" with copper ports 21-24, either the copper port or the SFP is live.

The 10G ports xg1 to xg4 are not dual personality.

As to why adding the VLAN to port 24 "fixes" your problem, I have not got a clue. I would strongly suggest that you spoke to Dell support as it might well be indicative of a larger issue.

I had not suggested anything about using an "ip helper".

And after spending (wasting?) over an hour writing the above, I still think the question should be deleted.
0
 

Author Comment

by:k_hoffhines
ID: 38817471
Thank you ArneLovius, that is actually a great answer to the situation that I posted, and an even better description than I had written.

No, you didn't not say anything about IP helper in the switch.
Yes, I was using wireshark with the filter bootp.option.typ == 53 . I can see the requests coming from the radio across the network and could see them at the switch on the Ceragon IP10. I could not see them at the 6224 until I configured vlan 20 on port g24.

Yes, we used 1G SFPs.

I will be in contact with Dell support to better understand why the changes were required on port g24 to make this work as it could be a larger issue.

Again, thanks for the great reply. I was frustrated by the first reply from you about the two ports.

ArneLovius, ID: 38808221, can have the points for providing a clear description and relevant information.
0

Featured Post

Optimum High-Definition Video Viewing and Control

The ATEN VM0404HA 4x4 4K HDMI Matrix Switch supports 4K resolutions of UHD (3840 x 2160) and DCI (4096 x 2160) with refresh rates of 30 Hz (4:4:4) and 60 Hz (4:2:0). It is ideal for applications where the routing of 4K digital signals is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I see many questions here on Experts Exchange regarding switch port configurations and trunks. This article is meant for beginners in the subject to help to get basic knowledge about Virtual Local Area Network (VLAN (http://en.wikipedia.org/wiki/Vir…
This tutorial will go through the steps required to write a script that will back up the configuration settings of a HP-ProCurve switch. You will need to get the following things to follow this tutorial: Telnet Scripting Tool e.g. TST10.exe …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses
Course of the Month3 days, 21 hours left to enroll

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question