Cisco SG500's and VLAN's

[sdonnelly2]

OK so here's what I am trying to accomplish with 3 Cisco SG500-52 switches. I have created 4 VLAN's on one SG500 that I'm calling my core switch and it's set to routing mode. My VLAN's are as follows 400 (Infrastructure ESXI hosts, firewall, etc), 401 (VoIP), 402 (Users), and 403 (Wireless). I have interfaces configured and everything is routing without issue for me across my subnets and remote access communities across 3 offices.

Where I am unsure is on the SG500 I have set as a L2 switch and my ESXi host are connected (I do have 10 ports on an isolated VLAN for iSCSI traffic) is do I need to create VLAN 400 and mark those as untagged ports? Then should I use 1-2 ports and set them as trunked ports and tag them to 400 to my core switch?

If so on the core switch do I create trunk ports and tag them for the VLAN's on this switch that would access the L2 switch? Is that also the case for the other SG500 that I have that are all devices for VLAN 402?

Am I overcomplicating this?

Thanks in advance for any help.

[V K Moorthy]

Hi,

You need to configure the trunk as below:

SG500(L3-core) -Port1(400U,401T,402T,430T)<-------------------------Trunk--------------->SG500(L2) -Port1(400U,401T,402T,430T)

[sdonnelly2]

Thank you very much! I will do that and report back later!

[sdonnelly2]

Just thought of one thing and that on one L2 switch it's all VLAN 402 and the other is VLAN 400 so in that case I just need to trunk those respective VLAN's correct?

[Ismael Arroyo · Accepted solution]

Hi Sdonnelly2,

For vlan 402 and 400 on the uplink to your sg500(L2) would be 400U and 402T.

Other interfaces for VoIP phones on vlan 401 would be configured to 401T. This is if your phones are expecting tagged traffic, if not they would be configured to 401U.

For Vlan 402 on other interfaces would always be 402U. PC will only communicate with untagged traffic

For Vlan 403 wireless the uplink access point would need to be configured (400U,401T,402T,403T)

This might be more information than expected, but i hope i have answered any other questions you had.