Solved

Trunk port configuration for Wireless VLANs

Posted on 2016-11-14
11
109 Views
Last Modified: 2016-11-15
Objective:      Trying to seperate SSID's into two VLANs.  Currently, two SSID's using VLAN 40, everything working fine.
Configuration:       Setup a port on our Catalyst 3750 as a trunk port for VLANs 40 & 45, added SSID and configured it for VLAN 45 on      Ubiquiti wireless controller.  (VLAN 40 is currently being used for the wireless system, AP's are plugged into Catalyst access ports set for VLAN 40).

Troubleshooting:  Would not communicate so, started tested with a laptop in which I can set VLAN tags.  Configured 40 and 45 on the laptop seperately with no luck.  Reconfigured Catalyst to an access port testing one VLAN at a time and only works when the laptop is configured with no vlans.  

Have only set trunk ports to connect between switches, never to handle multiple VLANs for endpoint devices,  Am I missing something?
Thank you.
0
Comment
Question by:Webcc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
  • 2
  • +1
11 Comments
 
LVL 29

Expert Comment

by:masnrock
ID: 41886479
The controller has to be on the same VLAN as the APs. However, within the controller you can configure the SSIDs to use tagged VLAN IDs.

When you configured the trunk port, did you configure 40 to be the untagged VLAN and 45 to be a tagged one? You might want to configure the ports going to the APs as General ports instead, with the PVID being 40 and untagged, and 45 being tagged

This way, when your laptop are connected to general ports configured as such, they will be on VLAN 40 (if you put in for VLAN 45 on the NIC of the laptop, it will end up there). Also, then you should be able to configure your SSIDs to use VLAN 45.
0
 

Author Comment

by:Webcc
ID: 41886507
Configured the trunk port as follows:
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 40,45
0
 
LVL 29

Expert Comment

by:masnrock
ID: 41886513
What about the ports going to the laptop and the APs? Those should be configured as general ports (trunk ports do not always play nicely with non-Cisco devices).
0
Don't Cry: How Liquid Web is Ensuring Security

WannaCry is just the start. Read how Liquid Web is protecting itself and its customers against new threats.

 

Author Comment

by:Webcc
ID: 41886514
Should have asked how do you configure a Catalyst for "general" ports instead, with the PVID being 40 and untagged, and 45 being tagged?
0
 
LVL 46

Accepted Solution

by:
Craig Beck earned 250 total points
ID: 41886521
You do NOT need to have the APs on the same VLAN as the controller.  It makes it easier, but it's not mandatory.

The 3750 doesn't do general ports.  It does access or trunk.  It's Cisco-speak.

In your case, the port config needs to be...

switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk native vlan 40
switchport trunk allowed vlan 40,45

Open in new window


The laptop doesn't need to to any VLAN tagging.  That will be handled at the AP.
0
 

Author Comment

by:Webcc
ID: 41886604
But if I want to test proper port configuration I should be able to set the laptop VLAN ID  to 40 or 45 right?
0
 
LVL 29

Assisted Solution

by:masnrock
masnrock earned 250 total points
ID: 41886656
I'm writing this under the assumption you're using a cable for the laptop...

If you want to test VLAN 40, you don't need to set a VLAN on the laptop. However, if you want to to test VLAN 45, then you do need to set it into the NIC.

As far as the APs go, you'll need to make sure that the SSIDs that will utilize VLAN 45 is correctly configured.
0
 

Author Closing Comment

by:Webcc
ID: 41886712
Thanks guys, working great!
0
 
LVL 46

Expert Comment

by:Craig Beck
ID: 41886781
You just need to put a switch port on whichever VLAN you want to test. NO VLAN tagging at the laptop is necessary.
0
 

Author Comment

by:Webcc
ID: 41887093
Just using the laptop to test port configuration before I connect the AP's and set the VLAN ID's on them to match.  Thanks
0
 

Expert Comment

by:John Chuma
ID: 41889001
I normally don't do this, but thank you to Craig for the solution. I have the same switch at home and have multiple VLANS for WiFi and this worked.
0

Featured Post

[Webinar] How Hackers Steal Your Credentials

Do You Know How Hackers Steal Your Credentials? Join us and Skyport Systems to learn how hackers steal your credentials and why Active Directory must be secure to stop them. Thursday, July 13, 2017 10:00 A.M. PDT

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
There’s a movement in Information Technology (IT), and while it’s hard to define, it is gaining momentum. Some call it “stream-lined IT;” others call it “thin-model IT.”
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Suggested Courses
Course of the Month9 days, 23 hours left to enroll

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question