Voice VLAN on Catalyst 3560

jconklin-ansinc-net used Ask the Experts™
Hello. I am trying to set up data and voice vlan's on the following.

WS-C3560-48PS-S running Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(35)SE5

The gateway will be an ASA. I really don't want to have the ASA handle the routing, I'd like to use the 3560 since it's Layer 3. How can I route between the VLANs?

I have data vlan 6 on and I have set up vlan 499 for voice on Phones will plug into a switch port, and workstations into the phones, so the phones will get a dynamic IP on and workstations on Then internet traffic for both will go out the ASA. Seems simple from a routing standpoint but I haven't done it on a Layer 3 switch before.

Thank you for any assistance.
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Distinguished Expert 2018
Few thing to begin with (to do routing on L3 switch):
- enable routing on switch
# ip routing
- create SVIs and assign ip addresses
# interface vlan x
# ip address x.x.x.x x x.x.x.x
- set interface VLAN IP address (x.x.x.x) on hosts as default gateway
- configure DHCP (on router or on some host (Windows server, Linux server, ASA)) if you don't use switch as DHCP server you will need to configure # ip helper-address c.c.c.c  under SVI to point to DHCP server (c.c.c.c is IP address of DHCP server)
- convert one port to routed port to connect with ASA and assign IP address to port
 (or create VLAN to connect to ASA - in that case you don't need this part)
# interface fa0/0
# no switchport
# ip address z.z.z.z z.z.z.z

- create default route to point to ASA
ip route z.z.z.y  (z.z.z.y - is ASA's ip address)

Than you need to educate ASA about networks on L3 switch you can do either:
- since connection is L3 link you need to set some static routes on ASA to point to router as next hop to reach those networks
- configure some routing protocol on ASA and L3 switch so ASA learn networks on switch dynamically

If I did not forget something, that should be it.
Except part where you configure ASA.


Good primer info. Thanks.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial