Network Connection Between Two Buildings Not Working

We have two buildings next two each other. They're connected with fiber, which is converted to Ethernet, and plugged to building A Enterasys B5G124-48P2 POE switch, and to building B Netgear GS724TP POE switch. Building A has all the servers. Building B can't communicate with Building A.

Any suggestions to solve the issue?
stillsyraAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Bryant SchaperCommented:
What have you tried so far?  Is fiber bad, can you swing to another pair by chance.
0
stillsyraAuthor Commented:
I tried to test the Netgear switch in building B. Given it a static ip address, and given two laptops static ip addresses also, the laptops can ping the switch, and two laptops can talk to each other.

If switching the fiber to another pair, is there any configuration to do after switching?

Does anyone know if there's any configuration needs to be done on the Enterasys switch for Gbic ports?
0
Bryant SchaperCommented:
if you are just changing pairs nothing has to happen assuming, they are the same type of fiber.  multimode 50 micron for example to multimode 50 micron.  If you swung to single mode you would have a problem.

But from what you just said. you can get devices to talk across the fiber, but not the two switches.  Maybe hard code the speed and duplex so they dont have to negotiate that.  Was it working?
0
Challenges in Government Cyber Security

Has cyber security been a challenge in your government organization? Are you looking to improve your government's network security? Learn more about how to improve your government organization's security by viewing our on-demand webinar!

stillsyraAuthor Commented:
The two laptops and the Netgear switch are all in Building B. I can't ping them from building A.
0
Bryant SchaperCommented:
ok, so for the switch to switch, are you using external media converters?  Are they happy, in the ideal world you should be able to plug a laptop in a each end and give them statics on the same network and ping each other.  Then we are just testing the fiber, media converters and ethernet patch cables.

Then we can address the switches.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
stillsyraAuthor Commented:
Yes, the two fiber ends can talk to each other.

We have two vlans set up on the building a switch: vlan 1 for data 10.0.0.0, and vlan 2 for voip 10.10.0.0.

At this point, the netgear switch in building b has been set up with 2 vlans also. Data connection is working between building A and building B now. But the phones in building B are still not working. All the ports on the Netgear switch is configured to be on vlan1. When they are configured on vlan2, neither the phone or data was working.

Do you have any suggestions how to configure the netgear switch to make the voip working also?
0
Bryant SchaperCommented:
Are the uplink ports set for trunking.  Not sure how on the netgear, but you should be able trunk the port on the netgear and the Enterasys to carry all vlans.

If all ports on the netgear are access ports on vlan 1, then the switch will only carry vlan 1.  Trunking allows multiple vlans to come across the port
0
Netman66Commented:
Are your voip phones using the switch ports and the computer plugs into the phone? Or do the phones have their own port?

Have you enabled power on the phone ports?

Are you trunking vlan 1 & 2 over the link?

You cannot use dual-mode ports (data and voice vlans) over a media converter.  You CAN trunk the port though.
0
stillsyraAuthor Commented:
Both data and voip are working now, after change the ports to tagged for voip vlan.

But the connectivity is inconsistent. The POE switch has to be rebooted once in a while. We have a new POE switch which be on site soon.

How do I check the inconsistent connectivity issue?
0
Netman66Commented:
If you can post the configs for both switches, it would be easier to help.  Right now we are guessing.

VoIP ports get tagged, workstation and printer ports do not.
The trunk port (link between switches) gets tagged with all the vlans you want to travel across it.
The same vlans need to exist on all switches.
There also needs to be a layer 3 (IP) interface for each vlan on a device that will route between them or to an upstream connection.
0
stillsyraAuthor Commented:
Current configuration for the switches:

Building A: Enterasys B5G124-48P switch, trunk port (fiber connection to the switch) is on port 45. It has two vlans:
    vlan1 is for data 10.0.0.0, all ports are untagged.
    vlan2 is for voip 10.10.0.0, all ports are tagged.

Building B: Netgear GS724TP switch, trunk port (fiber connection to the switch) is on port 23. It has two vlans:
    vlan1 is for data 10.0.0.0
    vlan2 is for voip 10.10.0.0, all ports are tagged.

The two switched are connected by the fiber and fiber converters, nothing else. There are other POE switches in building A, and ISP router connects to one of the switches building A.

What layer 3 interface or upstream connection do I still need?
0
stillsyraAuthor Commented:
Another thing: while the connection in building B is down (neither data network connection nor phones working), I can still ping the Netgear switch at building A.
0
Netman66Commented:
By configs, I meant the actual config text files - I'm not sure how you'd get them from those switches.  I guess use Putty and telnet them and do a show running-config (or equivalent command for those switches) then copy the scrollback buffer to text file.

vlan 1 is normally the native vlan and you really should not use that as any untagged or unknown traffic gets dumped into vlan 1 by default if the switch doesn't know where to send it.

I'm still unsure what the issue is, but here is what I think should be setup based on the last post.

Switch A - vlan 10 (data), tagged Ethernet 0/45, untagged Ethernet for all ports used for computers/printers.
                  vlan 2 (phones), tagged Ethernet 0/45, tagged Ethernet for whatever ports phones are connected to.

Switch B - vlan 10 (data), tagged Ethernet 0/23, untagged Ethernet for all ports used for computers/printers.
                  vlan 2 (phones), tagged Ethernet 0/23, tagged Ethernet for whatever ports phones are connected to.

Now, as it stands, there is no layer 3 (IP interface) defined by me on either switch, but there need to be one at least to manage it.  We normally have a dedicated vlan for management and it only contains the layer 3 interface and no ports are defined in this vlan.  

You ALSO must have tagged Ethernet port to the router/firewall (upstream router) for all vlans you want to route.

The reason I ask for the actual config files is to see how everything is connected and spot any missing configuration and to determine if you have/can use dual-mode ports or not.

Do your phones connect to the switch and the computer plug into the phone?  Not sure you answered that.

Just had a look at some Enterasys configuration screens and now I know why I prefer command line!  LOL.  I assume the Netgear is similar.  I would go into VLAN>802.1 Q VLAN>Static table and go through each vlan - for vlan 1 I would put all ports to none - but make sure you first create a management vlan or have another IP interface to connect to.

How about a screen shot of each vlan from this section of the config screen, then I may be able to make sense of it.
0
stillsyraAuthor Commented:
Configuration for Enterasys switch in Building A:

#ip
set ip address 10.10.0.2 mask 255.255.255.0 gateway 10.10.0.1
!

#system
set switch member 1 4
!

#vlan
set vlan create 2
set vlan name 2 "voip"
clear vlan egress 1 ge.1.2
set vlan egress 2 ge.1.1;ge.1.3-48 tagged
set vlan egress 2 ge.1.2 untagged
set host vlan 2
!

#port
set port vlan ge.1.2 2
!

#snmp
set snmp access ro security-model v1 exact read All notify All nonvolatile
set snmp access ro security-model v2c exact read All notify All nonvolatile
set snmp access public security-model v1 exact read All write All notify All non
volatile
set snmp access public security-model v2c exact read All write All notify All no
nvolatile
set snmp access public security-model usm exact read All write All notify All no
nvolatile
set snmp community :3fb03022e4966512343b511c263dcf1240739359ec6cad7d8c6277007e7e
0657521e0641967b150156:
set snmp group ro user ro security-model v1
set snmp group public user public security-model v1
set snmp group ro user ro security-model v2c
set snmp group public user public security-model v2c
set snmp group public user public security-model usm
set snmp user public authentication md5 :bb0e170a30224c985aa647152e85626b: encry
ption des privacy :bb0e170a30224c985aa647152e85626b:
set snmp view viewname All subtree 1
!

#spantree
set spantree portadmin  ge.1.45 disable
!



 VLAN: 1                 NAME: DEFAULT VLAN
 VLAN Type: Default
 Egress Ports
ge.1.1, ge.1.3-4, ge.1.6-7, ge.1.10-15, ge.1.17-23, ge.1.25-26, ge.1.28-40, ge.1
.43, ge.1.45, ge.1.48
 Forbidden Egress Ports
None.
 Untagged ports
ge.1.1, ge.1.3-4, ge.1.6-7, ge.1.10-15, ge.1.17-23, ge.1.25-26, ge.1.28-40, ge.1
.43, ge.1.45, ge.1.48

 VLAN: 2                 NAME: voip
 VLAN Type: Permanent
 Egress Ports
ge.1.1-4, ge.1.6-7, ge.1.10-15, ge.1.17-23, ge.1.25-26, ge.1.28-40, ge.1.43, ge.
1.45, ge.1.48
 Forbidden Egress Ports
None.
 Untagged ports
ge.1.2
0
stillsyraAuthor Commented:
Configuration for Netgear switch in Building B is attached.
NetgearSwitchConfig.pdf
0
Netman66Commented:
Sorry I'm late.  Will look at this now.
0
Netman66Commented:
Ok...

On switch A:

Computer/Printer ports untagged vlan 1
Phone ports tagged vlan 2
Port 45 should be tagged in vlan 1&2.

On switch B:

Same as above except Port 23 should be tagged vlan 1&2.

LAG ports are normally a collection of 2 or more ports that are treated as a single link.  In you scenario, you do not need a LAG as you are only connecting a single port between switches.

Let me know.
0
stillsyraAuthor Commented:
Thank you very much! I'll try it tomorrow morning.
0
stillsyraAuthor Commented:
The issue has been solved finally. There were a lot of crc errors on the Enterasys switch port, which pointed to a faulty hardware. A fiber Ethernet cable has been changed and that fixed the problem.

Thanks for all your help!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Management

From novice to tech pro — start learning today.