Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Extreme Summit 250E-48p Voice VLAN Config

Posted on 2014-07-25
2
Medium Priority
?
79 Views
Last Modified: 2016-02-01
Hi all,

Hoping someone can help, I am no expert with Extreme.

We have an Extreme Summit 250E switch with multiple VLAN's setup. These VLAN's all work as expected only they can all talk to one another meaning anyone with some networking knowledge could easily bypass the security.

I believe this behavior is due to the Voice VLAN (ID 100) being tagged on all ports meaning the devices on the individual VLAN's can also access and communicate across VLAN 100. My problem here is that the phone system provides the DHCP addressing for the networks so therefore all devices need to communicate with this network.

Am i right in thinking I only need to tag the port that the phone system is connected to into each VLAN and that having VLAN 100 tagged for all ports is the cause of the issue?

Sorry if that is a bit vague, pickled head at the moment.
0
Comment
Question by:Hallidays
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 39

Accepted Solution

by:
Aaron Tomosky earned 2000 total points
ID: 40220874
I'm also no extreme expert but I know a few things about layer 2 and 3 switching.

I'll assume you have a subnet for each vlan, if not let me know. At l2 a vlan/subnet can go all over the subnet. To leave the subnet/vlan you need a gateway/layer3/router. If the gateway of your workstation knows about the servers vlan, it will allow workstations to talk to the servers.

There are only 3 scenerios:
1. There is no known route, can't talk
2. There is a known route, all can talk
3. There is a known route but you have setup an acl (access control list) that blocks the traffic.

So it's probably not that vlan100 is on all ports, it's probably that your gateway has all the vlans setup and doesn't have any acl stopping traffic. Try a tracert and see what hops are involved and you will see for sure.
0
 
LVL 1

Author Comment

by:Hallidays
ID: 40255275
Sorry for not replying, i didn't know anything had been written. Thanks for the advice, i will take a look.
0

Featured Post

Enroll in September's Course of the Month

This month’s featured course covers 16 hours of training in installation, management, and deployment of VMware vSphere virtualization environments. It's free for Premium Members, Team Accounts, and Qualified Experts!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The worst thing when starting a new job is when the previous Network Administrator left behind no documentation. How do you get into the devices? If you've been in this situation or just accidently mistyped your password, this article will hopefully…
Arrow Electronics was searching for a KVM  (Keyboard/Video/Mouse) switch that could display on one single monitor the current status of all units being tested on the rack.
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Have you created a query with information for a calendar? ... and then, abra-cadabra, the calendar is done?! I am going to show you how to make that happen. Visualize your data!  ... really see it To use the code to create a calendar from a q…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question