I have wireless access points that have a single ethernet interface.
On this interface it has a management IP address (untagged), and can create multiple SSIDs each of which can be bridged on to its own VLAN.
As i understand, this is a form of hybrid port with untagged native VLAN and tagged frames.
I have setup the Cisco Catalyst switch with the below for my 4 APs (VLAN 15 connects to the untagged management interface of the APs, VLAN 30 is private and VLAN 300 is guest):
interface range GigabitEthernet1/0/1-4 switchport trunk native vlan 15 switchport trunk allowed vlan 30,15,300 switchport mode trunk spanning-tree portfast spanning-tree bpduguard enable !
The APs can send tagged frames OK and these seem to be forwarded correctly.
However I have found to be able to communicate on the management interface I must include the management VLAN in the allowed vlan list, any reason behind this?
The reason i ask i saw other configs in forums is they did not include the native VLAN in the list of allowed VLANs, i saw in a couple of places and wanted to check if a typo.
Thanks in advance.