How to configure VLAN? - Computers & Internet

Differences in configuration on switch interfaces connected to APs are as follows:

In tunnel forwarding mode, interfaces connected to APs transparently transmit only packets of the management VLAN. These interfaces must be added to the management VLAN in untagged mode. In direct forwarding mode, interfaces connected to APs must be trunk or hybrid interfaces. These interfaces must be added to the management VLAN in untagged mode and added to service VLANs in tagged mode. If a trunk interface is connected to an AP, the PVID of the interface must be set to the management VLAN ID.


Differences in configuration on intermediate switches are as follows:

In tunnel forwarding mode, intermediate switches transparently transmit only packets of the management VLAN. In direct forwarding mode, intermediate switches transparently transmit packets of both the management VLAN and service VLANs.
S5700 Switch Thunder link com

This article take S6700 as example
The cause is that the imported configuration file contains no version information. The system infers that the current V100R006 version is upgraded from a version earlier than V100R003. However, the default configuration is the same for the two versions. To adapt to the previous version, corresponding conversion is performed. The following is the processing mechanism for vlan 1:
For a version earlier than V100R003, the buildrun information is written on VLAN 1. If the port trunk allow-pass vlan 1 command is unavailable and eth-trunk is not configured for a port, the system infers that the port is not added to VLAN 1. Therefore, after the switch is upgraded to V100R006, add the undo port trunk allow-pass vlan 1 command to the port.

If you want to know more, an idea is to click this:
https://info.support.huawei.com/info-finder/encyclopedia/en/VLAN.html

Fault Symptom The outbound interface of the switch joins a VLAN in untagged mode. When the remark 802.1p command is configured on the outbound interface, the configuration is invalid.
Cause Analysis The configuration of the S5700(such as S5700-28P-LI-AC)is as follows:
#
traffic classifier test
if-match any
traffic behavior test
remark 8021p 2
traffic policy test
classifier test behavior test
#
interface GigabitEthernet1/0/1
port link-type access
port default vlan 10
traffic-policy test outbound
#
The outbound interface joins a VLAN in untagged mode, so VLAN tags are removed from packets sent by the interface.
Conclusion To apply traffic policy defining remark vlan to the outbound interface, ensure that the interface joins a VLAN in tagged mode.

Huawei S2300/3300/5300 series switch although no H3C switches am user-bind command, but through the DHCP Snooping function can also be realized IP+MAC+ port binding to prevent users set up a static IP address. For example, if the request port Ethernet0/0/1 in addition to the static IP address for the 1.1.1.2, MAC address for the 001c-2309-9aa7 corresponding to the user, all other static IP users can not access the internet. Configuration is as follows:
Configure the device DHCP Snooping
# enable the global DHCP Snooping function.
[Quidway] DHCP snooping enable
# configure user side interface of VLAN.
[Quidway] VLAN 100
[Quidway-vlan100] quit
[Quidway] interface Ethernet 0/0/1
[Quidway-Ethernet0/0/1] port default VLAN 100
[Quidway-Ethernet0/0/1] quit
# enable VLAN DHCP Snooping function.
[Quidway] VLAN 100
[Quidway-vlan100] DHCP snooping enable
# configuration interface for packet inspection at the user side
[Quidway] interface Ethernet 0/0/1
[Quidway-Ethernet0/0/1] DHCP snooping check ARP enable
[Quidway-Ethernet0/0/1] DHCP snooping check IP enable
[Quidway-Ethernet0/0/1] quit
# configuration static binding table entry
[Quidway] VLAN 100
[Quidway-vlan100] DHCP snooping bind-table static IP-address 1.1.1.2 mac-address 001c-2309-9aa7 interface Ethernet 0/0/1

Bruce,

Is the goal to use a different VLAN for each access point (AP)? If so then you will need to configure each NetGear port to use the same VLAN as the AP that is connected to it. You will then need either a switched virtual interface (SVI) for each VLAN on the NetGear or a trunk port (802.1q) from the NetGear to the Cisco. I'm not sure the NetGear will support SVIs but it will support trunks. An SVI basically creates a gateway for each VLAN's subnet. For example, let's say AP1 uses VLAN 10 and the subnet is 10.0.10.0/24 while AP2 uses VLAN 20 with a 10.0.20.0/24 subnet. The NetGear will need 2 SVIs, one for each VLAN/subnet. The first SVI for VLAN 10 can be configured with IP address 10.0.10.1/24 while the second SVI can be configured with 10.0.20.1/24 for VLAN 20. These IP addresses will be the gateway for each VLAN. Finally, the NetGear would need to act as a router and route each VLAN's subnet to the Cisco device. Once again I don't believe the FS726TP supports this.

The other solution would be to create a VLAN trunk port between the NetGear and the Cisco device but I believe the Cisco RV042 does not support trunking. If it does the trunk would be configured to carry all of the VLANs to the Cisco device which would then have SVIs created on it.

If neither of the above is possible you would need to use the same VLAN for each AP and each of the interfaces on the NetGear and Cisco devices which negates the need for the VLANs.

I hope this helps.

cisco has set up vtp to act as a conduit for vlan configuration between switches

no competent guys out there ???