Need help adding a VLAN to Cisco Catalyst 3850

Hello - we need help adding a VLAN to our network.  In short, we have to wait 2 weeks for Cisco to help us, due to a support lapse.  So we're seeing if we can get this done without them, with the help of a guru.  We currently have 6 VLAN's (1 - 6) that have been created by either Cisco or VMWare, over the years.  we need another one now - 7.  We are using Catalyst 3850's.  

thanks for your help
Damian_GardnerAsked:
Who is Participating?
 
Hello ThereSystem AdministratorCommented:
First, create a VLAN:
switch#configure terminal
switch(config)#vlan 7
switch(config-vlan)#name NewVlanName

Second, assign a VLAN to a port:
switch(config)#interface FastEthernet0/22 (just example)
switch(config)#switchport mode access
switch(config)#switchport access vlan 7

You might also need to configure InterVLAN Routing.
switch(config)#ip routing
See more here.
1
 
Andy BartkiewiczNetwork AnalystCommented:
config t
vlan 7
name "vlan name"
exit
interface vlan 7
ip address "Vlan Gateway IP and mask"
exit
exit
wr
0
 
Andy BartkiewiczNetwork AnalystCommented:
Also, if you use a DHCP server that is on a different vlan you would need the following command on the vlan interface
ip helper "dhcp server ip"
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
Ricardo Jose Jr. PalmaNetwork and Security ConsultantCommented:
Hi,

Don't forget to apply it to the interface you want the vlan to operate.

sample:

interface GigabitEthernet0/10
       switchport access vlan <vlan number>
       switchport mode access
       no cdp enable
       spanning-tree portfast
0
 
Damian_GardnerAuthor Commented:
ok great - thanks for everyone's input.  When you say assign the vlan to a port - do you mean as part of setting the vlan up on the switch? or simply for whatever device will be using the vlan after it's set up?  thanks again
0
 
Ricardo Jose Jr. PalmaNetwork and Security ConsultantCommented:
Hi,

Yes, as part of the vlan setting on the switch.
For the devices, if your statically assigning the ip address, you need to configure the subnet for the vlan 7.
0
 
Damian_GardnerAuthor Commented:
ok got it.  the VLAN setup seems pretty straight-forward.  My goal for this VLAN is to segregate XP clients on the network from the rest of the network.  Will it be possible to only allow certain types of network access thru to our main VLAN, and limit everythiung else (thinking viruses and hackers, etc)?  In other words - can a "small hole" be opened up to our main VLAN from this new VLAN, that only allows an XP machine on this new VLAN to access our network storage server, for example - or access a printer on the network - but nothing else?  

Thanks guys
0
 
Andy BartkiewiczNetwork AnalystCommented:
Yes, use an access-list, but if you are not familiar with networking you should let Cisco help you with this.
0
 
Damian_GardnerAuthor Commented:
ok - yeah I figured I would let Cisco help on this.  just wanted to know in general.  So I could connect the two VLANs, but then limit the communication thru an access-list.  ok great.  thank you
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.