Voice VLAN on Catalyst 3560
Hello. I am trying to set up data and voice vlan's on the following.
WS-C3560-48PS-S running Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(35)SE5
The gateway will be an ASA. I really don't want to have the ASA handle the routing, I'd like to use the 3560 since it's Layer 3. How can I route between the VLANs?
I have data vlan 6 on 10.2.1.222/24 and I have set up vlan 499 for voice on 10.5.1.254/24. Phones will plug into a switch port, and workstations into the phones, so the phones will get a dynamic IP on 10.5.1.0 and workstations on 10.2.1.0. Then internet traffic for both will go out the ASA. Seems simple from a routing standpoint but I haven't done it on a Layer 3 switch before.
Thank you for any assistance.
WS-C3560-48PS-S running Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(35)SE5
The gateway will be an ASA. I really don't want to have the ASA handle the routing, I'd like to use the 3560 since it's Layer 3. How can I route between the VLANs?
I have data vlan 6 on 10.2.1.222/24 and I have set up vlan 499 for voice on 10.5.1.254/24. Phones will plug into a switch port, and workstations into the phones, so the phones will get a dynamic IP on 10.5.1.0 and workstations on 10.2.1.0. Then internet traffic for both will go out the ASA. Seems simple from a routing standpoint but I haven't done it on a Layer 3 switch before.
Thank you for any assistance.
Do more with
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Few thing to begin with (to do routing on L3 switch):
- enable routing on switch
# ip routing
- create SVIs and assign ip addresses
# interface vlan x
# ip address x.x.x.x x x.x.x.x
- set interface VLAN IP address (x.x.x.x) on hosts as default gateway
- configure DHCP (on router or on some host (Windows server, Linux server, ASA)) if you don't use switch as DHCP server you will need to configure # ip helper-address c.c.c.c under SVI to point to DHCP server (c.c.c.c is IP address of DHCP server)
- convert one port to routed port to connect with ASA and assign IP address to port
(or create VLAN to connect to ASA - in that case you don't need this part)
# interface fa0/0
# no switchport
# ip address z.z.z.z z.z.z.z
- create default route to point to ASA
ip route 0.0.0.0 0.0.0.0 z.z.z.y (z.z.z.y - is ASA's ip address)
Than you need to educate ASA about networks on L3 switch you can do either:
- since connection is L3 link you need to set some static routes on ASA to point to router as next hop to reach those networks
- configure some routing protocol on ASA and L3 switch so ASA learn networks on switch dynamically
If I did not forget something, that should be it.
Except part where you configure ASA.
:)
- enable routing on switch
# ip routing
- create SVIs and assign ip addresses
# interface vlan x
# ip address x.x.x.x x x.x.x.x
- set interface VLAN IP address (x.x.x.x) on hosts as default gateway
- configure DHCP (on router or on some host (Windows server, Linux server, ASA)) if you don't use switch as DHCP server you will need to configure # ip helper-address c.c.c.c under SVI to point to DHCP server (c.c.c.c is IP address of DHCP server)
- convert one port to routed port to connect with ASA and assign IP address to port
(or create VLAN to connect to ASA - in that case you don't need this part)
# interface fa0/0
# no switchport
# ip address z.z.z.z z.z.z.z
- create default route to point to ASA
ip route 0.0.0.0 0.0.0.0 z.z.z.y (z.z.z.y - is ASA's ip address)
Than you need to educate ASA about networks on L3 switch you can do either:
- since connection is L3 link you need to set some static routes on ASA to point to router as next hop to reach those networks
- configure some routing protocol on ASA and L3 switch so ASA learn networks on switch dynamically
If I did not forget something, that should be it.
Except part where you configure ASA.
:)
Premium Content
You need an Expert Office subscription to comment.Start Free Trial