Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

SG-300 and Small workgroup switch

Posted on 2013-12-04
14
Medium Priority
?
284 Views
Last Modified: 2013-12-11
Hope this is a simple question but it's driving me nuts.

I have a Cisco SG-300 switch which feeds several offices. In our training room because of lack of quantity of switch ports in that office we use a small workgroup switch (cisco 5 port) to connect 3 workstations. With a workstation connected directly to the SG-300 all is working fine. But when I connect these workstations through the workgroup switch things get weird.

All workstations use DHCP which is located on one of our servers on a different vlan. All other servers (resources) are generally on another vlan.

When the workstation is plugged into the WG switch it will receive the DHCP address ok but cannot connect to any resources on the network (printers, servers, internet, etc).
When that same workstation is plugged directly into the SG-300 everything works correctly.

This problem just started and it was working fine a few days ago.
The only change to the SG-300 was to add redundency through a LAG.
I have other workstations that plug directly into the SG-300 and they are working properly.

Thanks.
Richard
0
Comment
Question by:RichardPWolf
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 8
  • 6
14 Comments
 
LVL 10

Expert Comment

by:djcanter
ID: 39696607
Do you have any port security enabled? smart port roles ?
0
 

Author Comment

by:RichardPWolf
ID: 39698257
None that I can find. The only thing that has changed recently is I LAGed two ports to our core switch.
0
 
LVL 10

Expert Comment

by:djcanter
ID: 39701151
Do you have any other problems with the LAG? Is it connected to another SG switch ?

Cant think of any reason that should affect the workgroup switch. Is the native vlan of the switch ports for the LAG the same on all 4 ports ? Is native VLAN of LAG the same on both switches as the original ports ?

The workgroup switch is not vlan aware, the SG  may be sending tagged traffic which the WG switch will process as native vlan traffic. Return traffic will not reach its destination in this case.
0
Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

 

Author Comment

by:RichardPWolf
ID: 39701822
No observed problems with the LAG. I've got 4 SG-300s LAGed into a 3750G. All show as being up and I don't see any errors on any of the switches.

Your last comment might be the key. On the SG-300 on all ports "except" the LAG is vlan 9 only. On the LAG is vlan 1 and vlan 9. vlan 1 being the native. vlan 9 is tagged.

Should I set the port that the WG switch is on to untagged?
0
 

Author Comment

by:RichardPWolf
ID: 39701843
I spoke a little bit soon. Here's my SG-300 port configuration. The port that the WG switch is on is 7.
SG300-port-setup.docx
0
 
LVL 10

Expert Comment

by:djcanter
ID: 39701845
if the wg switch needs to be in vlan 9, try setting the sg port to access mode vlan 9 untagged
0
 
LVL 10

Expert Comment

by:djcanter
ID: 39701872
Interesting, all ports are access mode vlan 9 untagged. Are the ports configured the same as before the LAG was created? Or,was the single port that was the link to the core configured with as  trunk mode vlan 1 untagged, vlan 9 tagged?
0
 

Author Comment

by:RichardPWolf
ID: 39701928
Not a hundred percent sure on the trunk ports as to which vlan was tagged or untagged. All other ports are access.
0
 

Author Comment

by:RichardPWolf
ID: 39701991
Could it be that because the ports are "untagged" for vlan 9 and the LAG is "tagged" be causing the issue?
0
 
LVL 10

Expert Comment

by:djcanter
ID: 39702056
It shouldnt matter. Once the ports are joined to a channel-group, the channel-group should define the vlans.

try connecting a workstation to the wg switch. Look in the sg-300 address table and confirm the mac of the workstation is listed in the correct vlan. Check the core switch for the same thing.

At the core, is the lag configured the same, trunk mode, vlan 1 untagged, vlan 9 tagged?
0
 

Author Comment

by:RichardPWolf
ID: 39706834
I'll check the address more accurately. Right now I only see one MAC address on that port but I believe it's the WG switch mac. On the core switch (3750G) I don't see anywhere that it's defines tagged or untagged. Here is the config for the 3750->SG300 on the 3750.

port-channel load-balance src-dst-ip


interface GigabitEthernet1/0/1
 description Vlan 7 Primary
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 1,7
 switchport mode trunk
 channel-group 7 mode desirable non-silent

[edit]- Just checked and I can't get to the workstation (ping) from the 3750. Not sure where the ping is on the SG-300.
0
 

Author Comment

by:RichardPWolf
ID: 39708500
I got it working but I don't understand why. In going through everything from start to finish I found that my LAGs were not up in a bundle. I had connectivity with all workstations on that vlan but not through the WG switch which is what caused me to create this question. Well after a minor change to the core switch which allowed the LAGs to bundle up the WG switch started working. Below is a basic depiction of how the network is setup.


Core-Switch ------> SG-300--------->WG-switch-------->Workstations(3)

I'd appreciate some insight as to why this simple change allowed everything to work.

Thanks.
0
 
LVL 10

Accepted Solution

by:
djcanter earned 2000 total points
ID: 39711817
Without looking at packet captures and arp tables in the switch, I cant definitively answer that question.

Glad to hear you found the issue.
0
 

Author Closing Comment

by:RichardPWolf
ID: 39711996
Thanks. I appreciate your help.
0

Featured Post

New benefit for Premium Members - Upgrade now!

Ready to get started with anonymous questions today? It's easy! Learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I eventually solved a perplexing problem setting up telnet for a new switch.  I installed a new Cisco WS-03560X-24P switch connected to an existing Cisco 4506 running a WS-X4013-10GE Sup II-Plus. After configuring vlans and trunking,  I could no…
Arrow Electronics was searching for a KVM  (Keyboard/Video/Mouse) switch that could display on one single monitor the current status of all units being tested on the rack.
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
How to fix incompatible JVM issue while installing Eclipse While installing Eclipse in windows, got one error like above and unable to proceed with the installation. This video describes how to successfully install Eclipse. How to solve incompa…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question