07-08-2008 06:41 AM
Does anyone out there ever configured VLAN tagging on the internal port of the SA-4000 running 6.1R2? Does the internal port support tagging so that I can connect it to a tagged switchport?
07-08-2008 06:58 AM
07-08-2008 07:21 AM
Do you have to have an IVS license to do VLAN tagging? I notice that on version 6.0/6.1 there is VLAN menu but not on version 5.5 and therefore it supports it under version 6.1.
07-08-2008 07:29 AM
07-31-2008 07:52 AM
Thank you for the info. Would you mind point me to any reference on how to do it? I just wanted to put any authenticated user with ip subnet 192.168.240.20.0/24 tagged with, for example, VLAN-ID=111, and subnet 192.168.250.0/24 with VLAN-ID=112.
Thank you and greatly appreciated.
07-31-2008 08:26 AM
Assignment to VLANs is done on a role basis. So, you need to do the following -
07-31-2008 10:41 AM
07-31-2008 11:47 AM
08-06-2008 08:18 AM
Thanks again for your patience. The internal port of SA4000 does not support tagging but it can send packet OUT with tagging information, is it right? If it is, how does the internal port process the returning packet(will have tagging info) IN to it ?
08-21-2008 10:36 AM
Does the IVE support 802.1q trunking? This is the only way I can see it supporting more than 2 vlans over a single interface.
I've got an SA4000 as well and I'm trying to move our NetConnect users off of the same broadcast domain as the IVE's internal port.
08-21-2008 10:47 AM
The SA does support VLAN trunking if you purchase the IVS license, which I think is pretty cheap if you need this functionality.
You connect the SA to a switchport configured for 802.1 trunking and specify a native VLAN (this will be for the untagged traffic from the SA.) You then configure a VLAN in the network settings on the SA, giving the SA an address in that VLAN and specifying the default gateway for traffic sent to that VLAN.
To send NC traffic to the VLAN, you configure the VLAN/Source IP tab on the General section of the role configuration. All traffic for that role will be sent to that VLAN. The NC address pool must either assign users to the same subnet the VLAN address of the SA is in, or the default gateway router(s) must route the subnets which the NC addresses are in to the VLAN address of the SA, typically using static routes.
Hope this is helpful.
08-21-2008 04:11 PM - edited 08-21-2008 04:12 PM
08-22-2008 01:13 PM
The port to the SA internal interface on my Cisco switch is configured as -
switchport trunk native vlan 2
switchport trunk allowed vlan 2,100
switchport mode trunk
This allows vlans 2 and 100, and marks untagged traffic as vlan 2. Of course, you could modify the "switchport trunk allowed vlan 2,100" statement to allow any vlans you wanted to carry.