I have a network that is a /24, all on VLAN1. The /24 address space is 90% used up and sometimes we run into issues with running out of IPs.
We are working on segmenting this network now into 4 VLANS. VLAN 12 is the first step in this segmentation process, this will remove about 40 devices from VLAN1.
The network consists of three switches:
-SG200 "A" (access)
-SG300 (core, L2 only)
-SG200 "B" (access)
-Cyberoam firewall (router on a stick config, DHCP relay agents)
-M$ DHCP server
I have added VLAN 12 to all of the switches. I have created the sub-interface on the Cyberoam. I have created the DHCP relay agent on the cyberoam. I have created the new DHCP pool on the M$ server for this VLAN.
On SG200 "A", I have a test machine setup to try these changes on before rolling them out to all other workstations. SG200 "A" is trunked back to the core (SG300) switch with a LAG. The LAG has a PVID = 1, tagged = 12. The SG300 trunk to the firewall has the same settings, PVID = 1, tagged = 12.
On SG200 "A", on the port the test workstation is connected to I have PVID = 12, untagged = 12. With this configuration, I am unable to get the workstation to grab a new IP from VLAN12.
For testing purposes, I have changed the port the test machine is connected to from:
PVID = 12, untagged = 12
PVID = 1, untagged = 1, tagged = 12
Then I went onto the workstation and manually changed the VLAN ID in the NIC's properties to VLAN 12. When I did this, the workstation pulled a new IP from VLAN 12 and everything worked as I expected.
My goal is to get this setup to work, but I do not want to have to designate the VLAN 12 ID in the workstations NIC properties.
What am I missing? I have been "adjusting" settings and testing these adjustments for about 3 hours but have been unable to find a combination of settings that will allow this to work.