Tag Info

New answers tagged

0

I'm suspicious that the switchport isn't up - what does "show interface fa0/1 switchport" say? With the exception of DTP (dynamic trunking protocol), trunking is unidrectional, which is to say one side of the trunk doesn't necessarily need to agree with the other side. Not that you'll get proper traffic flows if trunks are mismatched, but a non-trunking ...


0

Ok well after a lot of frustration I reset the Draytek to factory settings and configured the VLAN section again, this time I only used LAN1 for subnets. Everything worked perfectly... I will be adding subnets soon to test as remote dial-in users will have to be isolated too but happy I got it working. Not sure what caused the strange behavious as I then ...


0

Either the other side of that link is not configured for trunking, does not support trunking, or you are not matching your encapsulation methods. Is the other side a Cisco switch, or something else?


1

A port must have a VLAN assignment. If you need it to be completely disconnected, set it to a nonexistent VLAN and shut down the port. interface fa0/1 switchport access vlan 901 no switchport access vlan 1 shutdown (I'm not sure if the "no" is required. Don't have a switch at my fingers with an open port to test). That said, shutdown should be sufficient ...


2

After some trial and error, I came to the solution below and it works as designed. Thanks to all that helped. ip access-list extended "100" 10 permit ip 192.168.100.0 0.0.0.63 10.220.1.10 0.0.0.0 20 deny ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 Vlan 300 ip access-group 100 in something strange I noticed I can ping source ...


0

You enable RIP and after do ACL. Like illustrated there a bit for the ACL, http://vmfocus.com/2012/10/14/how-to-configure-access-lists-route-between-vlans-on-hp-v1910-24g/ Would look like that in the config.. (but I'am not the best in HP switch..) ip access-list extended "220" 10 permit ip 192.168.100.0 255.255.255.192 10.220.1.10 255.255.255.255 ...


0

If you are trying to access a single system on a subnet that has more than one system on it... I would put a static route on the end systems that specified to reach the 10.220.1.10 system you need to go through the HP router. Then I would use an access list on the router to ensure it is only routing traffic you intend. You can't use routing to (easily) do ...


1

Do you trust your workstations to not submit data with a fake QoS header just to get more speed? You can not avoid that but on a VLAN you can prioritize the VLAN. Also, on windows doing QoS on the workstations can be tricky ;) That said, I would say in most cases you do not even need QOS; 30 is a small number of phones and workstations.


1

You have to accompany your plain network config with the corresponding switch configuration. Also, do not use VLAN 0, as this is a special VLAN. Try something along the lines of this: config 'interface' 'lan' option 'ifname' 'eth1.1' option 'proto' 'static' option 'ipaddr' '192.168.1.1' option 'netmask' '255.255.255.0' option ...


2

I didn't have luck with "ip link set dev bond0.10 name ext0". If the interface is up, it gets a BUSY error. If the interface is down, it gets a NOT FOUND error. What I did have luck with is this: in my base interface definition for bond0, post-up ip link add name ext0 link bond0 type vlan id 10 pre-down ip link delete dev ext0 type vlan and auto ext0 ...


1

To remove the vlan tag you need to set the vswitch as follows, explicitly setting vid= to empty ldm set-vswitch vid= net-dev=net0 linkprop=phys-state inter-vnet-link=on 192.168.115.0_24 This will leave all the other vswitch settings as before, removing just the VID value root@my-server:/# ldm ls -l -o network rdom-115-45 NAME rdom-115-45 ...


0

The Unifi Wireless Supports VLANS BUT what I have found is it must also use a port on the Draytek that is UNtagged. So, UNtagged and Tagged on the Same port. The ONLY port that this seems to work for this is PORT1 on the Draytek. No idea why and frankly I have no more time left to investigate it. Hope this helps someone else.


1

you seem to read the information in the routing table wrong. Destination GateWay Genmask ... Iface 192.168.4.0 0.0.0.0 255.255.252.0 bond0.11 192.168.8.0 0.0.0.0 255.255.252.0 bond0.12 The above actually means that network 192.168.4.0/255.55.252.0 is locally connected on bond0.11, thus can be reached without a gateway. A gateway ...


0

Management traffic in a Unifi APis always untagged according to the documentation. http://wiki.ubnt.com/UniFi_FAQ#How_does_vlan_traffic_get_tagged.3F traffic initiated from AP is untagged (sent through br0) http://wiki.ubnt.com/UniFi_and_switch_VLAN_configuration In this example, we will trunk 4 different switches (Netgear, HP, Cisco, D-Link) ...


0

I have Managed to get the VLANS working on the Draytek as pictured above, however the Unifi Wireless Access Point is not obtaining an IP Address and I not dishing them out via DHCP. Flashing intermittently Green. I certainly works on the MAC with the VLAN TAG


1

T1-T32 refers to not a switch port, but a Trunk Group which can consist of various combinations of ports that are interconnecting to other switches on the network.


3

802.1Q tag is inserted into MAC header, and kernel won't decode it if your interface isn't VLAN tagged. So, even if you could mangle outgoing packets, incoming traffic with VLAN tag would stay ignored. What you need to do is create a VLAN tagged interface, just as you did, and add an IP to it within the same rage the switch IP you're trying to access is in. ...


4

iptables and ebtables can't set VLAN tags on packets. That's what VLAN sub-interfaces are for. There's an article on the Ubunut wiki that discusses VLANs that you should probably review. In summary, though, you want to: Make sure the 802.1q module is loaded with a modprobe 80211q. Create the VLAN sub-interface with vconfig add eth0 444. Add an IP ...


0

You can bring up your tuntap device together with the vlan interface and bridge afterwards: # The physical network port allow-hotplug eth0 auto eth0 iface eth0 inet manual # The interface used for the bridge auto vlan1 iface vlan1 inet manual vlan_raw_device eth0 pre-up ip tuntap add dev tap0 mode tap user openvpn-system-user ...



Top 50 recent answers are included