I have inherited this mixed network and need some guidance. I am trying to configure a group of SGE2010P switches connected to a core Juniper switch to support multiple SonicPOINT access points. In order for the SonicWALL firewall to control the SonicPOINT's, it needs to communicate directly with the SonicPOINTS on a series of VLAN's. The first VLAN must be an untagged VLAN that is different than the default VLAN 1. Additional VLAN's are used to support specific wireless networks.
VLAN 100 = Configuration VLAN
VLAN 2 = Secure Wireless SSID VLAN
VLAN 3 = Pulbic Wireless SSID VLAN
Port 1 on the Cisco SGE2010P switch is connected to a SonicPOINT access point
Desired Configuration of Port 1:
Untagged on VLAN 100
Tagged on VLAN 2 & VLAN 3
VLAN 1 can not be associated with this port at all.
Port 24 on the SGE2010P is a fiber connection to the core Juniper switch. Both ends of the fiber are configured as follows:
Untagged on VLAN 1
Tagged on VLAN 2, 3 & 100
The Cisco will not allow me to replace the untagged VLAN 1 (the Default VLAN) for Port 1 with VLAN 100. It will allow me to add the additional untagged VLAN 100 to the untagged VLAN 1 on Port 1. This means that two VLAN's will be untagged on the same port. I don't usually work with Cisco switches. However, I have a lot of experience with ProCurve's and other enterprise level swithces. This is the first time I have seen a switch that allows two untagged VLAN's on the same port.
The SonicWALL wireless controller can not see the SonicPOINT connected to the Cisco switch when using VLAN 100. How can I remove VLAN 1 from the configuration of Port 1 on the Cisco so only the untagged VLAN 100 remains?
Hi Paul, this is an old switch and has some caveats... best I'd recommend is one of two things. Either call the SBSC support (if you have configuration warranty) or if you like we can set up a team viewer session some time and jack around with this.
These switches are largely unfriendly and at this point in time my capacity for memory of all the... "how to do and not to do" has diminished to the point that I'd need a switch to remind me.
-Tom Please mark answered for helpful posts
Please mark answered for helpful posts
Thanks for the reply. I did eventually figure this out. The key was to go into the VLAN section and then configure the ports that would be directly connected to my access points. The critical modification was to change the PVID from 1 to 100 (100 is the VLAN ID I am using for the configuration of the SonicPoints). This basically made the port untagged in ONLY vlan 100. VLAN 1 is no longer associated with the port at all. The rest of my tagging was correct with the initial configuration.
This is definetly not a friendly GUI. Even saving the settings is cumbersome.
Article ID:4006 Configure Secure Shell (SSH) Server Authentication
Settings on a Switch Objective Secure Shell (SSH) is a protocol that
provides a secure remote connection to specific network devices. This
connection provides functionality that is similar...
Article ID:4982 Access an SMB Switch CLI using SSH or Telnet Objective
The Cisco Small Business Managed Switches can be remotely accessed and
configured through the Command Line Interface (CLI). Accessing the CLI
allows commands to be entered in a termina...
Article ID:5735 Convert Configuration Files using the Configuration
Migration Tool on Cisco Small Business Switches Introduction The Cisco
Configuration Migration Tool allows you to convert configuration files
from previous generation of Cisco Small Busin...