Extreme Summit 250E-48p Voice VLAN Config

Hi all,

Hoping someone can help, I am no expert with Extreme.

We have an Extreme Summit 250E switch with multiple VLAN's setup. These VLAN's all work as expected only they can all talk to one another meaning anyone with some networking knowledge could easily bypass the security.

I believe this behavior is due to the Voice VLAN (ID 100) being tagged on all ports meaning the devices on the individual VLAN's can also access and communicate across VLAN 100. My problem here is that the phone system provides the DHCP addressing for the networks so therefore all devices need to communicate with this network.

Am i right in thinking I only need to tag the port that the phone system is connected to into each VLAN and that having VLAN 100 tagged for all ports is the cause of the issue?

Sorry if that is a bit vague, pickled head at the moment.
LVL 1
HallidaysAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Aaron TomoskySD-WAN SimplifiedCommented:
I'm also no extreme expert but I know a few things about layer 2 and 3 switching.

I'll assume you have a subnet for each vlan, if not let me know. At l2 a vlan/subnet can go all over the subnet. To leave the subnet/vlan you need a gateway/layer3/router. If the gateway of your workstation knows about the servers vlan, it will allow workstations to talk to the servers.

There are only 3 scenerios:
1. There is no known route, can't talk
2. There is a known route, all can talk
3. There is a known route but you have setup an acl (access control list) that blocks the traffic.

So it's probably not that vlan100 is on all ports, it's probably that your gateway has all the vlans setup and doesn't have any acl stopping traffic. Try a tracert and see what hops are involved and you will see for sure.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
HallidaysAuthor Commented:
Sorry for not replying, i didn't know anything had been written. Thanks for the advice, i will take a look.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Switches / Hubs

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.