VLAN mismatch on trunk, why?

This is using an old cisco catalyst switch 2960 24-port, 100-based. This switch is used to support 2 VLANs - one for data, and other for voice. Data using 101, and voice using 102. A second port - fastethernet0/2, was configured as trunk with the following config:

   interface FastEthernet0/2
   switchport access vlan 101
   switchport trunk allowed vlan 101,102
   switchport mode trunk
   switchport nonegotiate
   duplex full

I believed this is using dot1q.

Now, I have setup a new cisco switch - 2960, 48-port (POE), in gigabit. On this switch, port 2 - gig1/0/2 is also setup as trunk with config:

  interface GigabitEthernet1/0/2
 switchport access vlan 101
 switchport trunk allowed vlan 101,102
 switchport mode trunk
 switchport nonegotiate
 duplex full

The problem is, a trunk is not established. On the console, I saw an CDP error as follows:

 %CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on FastEthernet0/2 (1), with Switch03 GigabitEthernet1/0/2 (101).

Does this mean the native vlan is mismatched? how can i solved the problem?

thanks,
LVL 1
MichaelBalackAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Daniel BlackmoreInfrastructure EngineerCommented:
Hi,

First of all I would remove the 'switchport access vlan 101' from the interface config as it is not needed being a trunk port.

You can use the command 'show int trunk' on both switches to see the native vlans of each trunk port configured. I would have expected to see a command of 'switchport trunk native vlan xxx' somewhere though.

If they are the same, I am assuming you do not want VLAN 1 to be the native VLAN? If so run the command on both interfaces 'switchport trunk native vlan 99' or whatever VLAN you want as the native (Create the vlan first however)

Regards
0
mikebernhardtCommented:
In the older code, the access vlan also became the native vlan. In never code, it's a separate item. As already stated, remove "switchport access vlan101" from both configs as it's not needed, and that will probably also fix your native vlan mismatch. They use vlan1 by default, and that's fine. You should not use Vlan1 for any data.

Not sure why you're using switchport nonegotiate? I would see if you can add the command "switchport trunk encapsulation dot1q" If it doesn't like it, then the ports only support dot1q anyway. If it does, this will prevent them trying to set up something else.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
MichaelBalackAuthor Commented:
Thank both, i will arranged to be onsite to make the suggested changes.

Will update you guys...
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

MichaelBalackAuthor Commented:
Precisely, after "no switchport access vlan 101",  and then "switchport trunk native vlan 101";  It still doesn't work until I type "no duplex full" on one switch, the trunk was eventually established. After that, I put in the "duplex full", the trunk is still established and everything work fine. Thanks both.
0
mikebernhardtCommented:
I highly recommend that you not use the native vlan for your data vlan. Change the native vlan to vlan 1 (or use vlan 1 for your data if you want to use 101 for the native vlan).

The reason is that the native vlan is untagged and therefore less secure.
0
MichaelBalackAuthor Commented:
Thanks Mikebenhardt.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Switches / Hubs

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.