Solved

Trunk port configuration for Wireless VLANs

Posted on 2016-11-14
11
55 Views
Last Modified: 2016-11-15
Objective:      Trying to seperate SSID's into two VLANs.  Currently, two SSID's using VLAN 40, everything working fine.
Configuration:       Setup a port on our Catalyst 3750 as a trunk port for VLANs 40 & 45, added SSID and configured it for VLAN 45 on      Ubiquiti wireless controller.  (VLAN 40 is currently being used for the wireless system, AP's are plugged into Catalyst access ports set for VLAN 40).

Troubleshooting:  Would not communicate so, started tested with a laptop in which I can set VLAN tags.  Configured 40 and 45 on the laptop seperately with no luck.  Reconfigured Catalyst to an access port testing one VLAN at a time and only works when the laptop is configured with no vlans.  

Have only set trunk ports to connect between switches, never to handle multiple VLANs for endpoint devices,  Am I missing something?
Thank you.
0
Comment
Question by:Webcc
  • 5
  • 3
  • 2
  • +1
11 Comments
 
LVL 20

Expert Comment

by:masnrock
ID: 41886479
The controller has to be on the same VLAN as the APs. However, within the controller you can configure the SSIDs to use tagged VLAN IDs.

When you configured the trunk port, did you configure 40 to be the untagged VLAN and 45 to be a tagged one? You might want to configure the ports going to the APs as General ports instead, with the PVID being 40 and untagged, and 45 being tagged

This way, when your laptop are connected to general ports configured as such, they will be on VLAN 40 (if you put in for VLAN 45 on the NIC of the laptop, it will end up there). Also, then you should be able to configure your SSIDs to use VLAN 45.
0
 

Author Comment

by:Webcc
ID: 41886507
Configured the trunk port as follows:
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 40,45
0
 
LVL 20

Expert Comment

by:masnrock
ID: 41886513
What about the ports going to the laptop and the APs? Those should be configured as general ports (trunk ports do not always play nicely with non-Cisco devices).
0
 

Author Comment

by:Webcc
ID: 41886514
Should have asked how do you configure a Catalyst for "general" ports instead, with the PVID being 40 and untagged, and 45 being tagged?
0
 
LVL 45

Accepted Solution

by:
Craig Beck earned 250 total points
ID: 41886521
You do NOT need to have the APs on the same VLAN as the controller.  It makes it easier, but it's not mandatory.

The 3750 doesn't do general ports.  It does access or trunk.  It's Cisco-speak.

In your case, the port config needs to be...

switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk native vlan 40
switchport trunk allowed vlan 40,45

Open in new window


The laptop doesn't need to to any VLAN tagging.  That will be handled at the AP.
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 

Author Comment

by:Webcc
ID: 41886604
But if I want to test proper port configuration I should be able to set the laptop VLAN ID  to 40 or 45 right?
0
 
LVL 20

Assisted Solution

by:masnrock
masnrock earned 250 total points
ID: 41886656
I'm writing this under the assumption you're using a cable for the laptop...

If you want to test VLAN 40, you don't need to set a VLAN on the laptop. However, if you want to to test VLAN 45, then you do need to set it into the NIC.

As far as the APs go, you'll need to make sure that the SSIDs that will utilize VLAN 45 is correctly configured.
0
 

Author Closing Comment

by:Webcc
ID: 41886712
Thanks guys, working great!
0
 
LVL 45

Expert Comment

by:Craig Beck
ID: 41886781
You just need to put a switch port on whichever VLAN you want to test. NO VLAN tagging at the laptop is necessary.
0
 

Author Comment

by:Webcc
ID: 41887093
Just using the laptop to test port configuration before I connect the AP's and set the VLAN ID's on them to match.  Thanks
0
 

Expert Comment

by:John Chuma
ID: 41889001
I normally don't do this, but thank you to Craig for the solution. I have the same switch at home and have multiple VLANS for WiFi and this worked.
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Join & Write a Comment

#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
Let’s list some of the technologies that enable smooth teleworking. 
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now