Unsolved
This post is more than 5 years old
10 Posts
0
63233
March 13th, 2013 08:00
PowerConnect 3524 VLAN Configuration for GUESTS (noob question)
Hello,
I apologize in advance for asking a question that has probably been asked a thousand times.
I have a PowerConnect 3524 that is mostly in default/factory mode. I want to add a VLAN that will be for "guests" only, who will have internet access only.
I've created a VLAN called "internet" (ID=1000) and I've added port 1 (fa0/1) (internet port) as "T". I've also added port (23) as "U", which has my test PC. All other ports are listed under VLAN 1 as "U".
The Port configuration 1 (internet) is:
- Port VLAN mode: Trunk
- Reserve vlan for internal use: none
The Port configuration for 23 (my test PC) is:
- Port VLAN mode: General
- Dynamic: unchecked
- PVID: 1000 (my "internet" vlan)
- Frame type: admit tag only
- Ingress filtering: enable
- Reserve vlan for internal use: none
The PC connected to port 23 ("internet" vlan) is unable to get an IP address, which should be provided by the firewall/router on port 1, which is ALSO a member of the "internet" vlan.
I've read the instructions several times over and I'm just not seeing the expected behavior. Any help/suggestions would be surely appreciated.
Nathan P
10 Posts
0
March 14th, 2013 07:00
Thank you Daniel for your answer. Unfortunately, I'm not any further ahead. After following your instructions (without error) I plugged in my test PC to port 23 and was able to ping the internet (good), but also ping my network server (bad).
I would prefer to use the web-based console if possible.
To answer your first question, I want to segregate the traffic on the LAN. The "guest" VLAN should be separate from the office VLAN, and the guests should be able to ping and interact with each other while having internet access.
I still have the same configuration as in my previous message. It's frustrating because it feels like I'm doing everything right via the web-interface, but the test results do not match expectations.
Thank you for your assistance, it's really appreciated.
Nathan P
10 Posts
0
March 14th, 2013 08:00
Hello Daniel,
I removed some of port settings that were unnecessary; otherwise here's a copy/paste. You will see ports e1 (internet), e23/24 which are intended to be segregated from the office.
interface range ethernet e(13-18)
shutdown
exit
interface ethernet e1
description "firewall-router (direct)"
exit
interface ethernet e23
description "lab wired guest (22)"
exit
interface ethernet e24
description "WIFI (direct)"
exit
interface ethernet e1
switchport mode trunk
exit
interface range ethernet e(23-24)
switchport mode general
exit
vlan database
vlan 1000
exit
interface ethernet e23
switchport general allowed vlan add 1000 untagged
exit
interface ethernet e1
switchport trunk allowed vlan add 1000
exit
interface vlan 1000
name "Internet Only"
exit
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
interface ethernet e23
dot1x port-control auto
exit
interface vlan 1
ip address 192.168.1.200 255.255.255.0
exit
ip default-gateway 192.168.1.1
username admin password 02f283a52227a605bc7dd71f3842fed1 level 15 encrypted
snmp-server community Dell_Network_Manager rw view DefaultSuper
Default settings:
Service tag:
SW version
Fast Ethernet Ports
==========================
no shutdown
speed 100
duplex full
negotiation
flow-control off
mdix auto
no back-pressure
Gigabit Ethernet Ports
=============================
no shutdown
speed 1000
duplex full
negotiation
flow-control off
mdix auto
no back-pressure
interface vlan 1
interface port-channel 1 - 15
spanning-tree
spanning-tree mode STP
qos basic
qos trust cos
Once again, thank you for your assistance.
Nathan P
10 Posts
0
March 14th, 2013 13:00
Hello Daniel,
Thank you for your ongoing assistance, I truly appreciate it.
Unfortunately my testing was not positive. I did copy your screenshot (going to Switch > Ports > Port Coniguration) and when I tested my TestPC (still on port 23) it couldn't ping the internet.
I checked my firmware version and it is out of date (2.0.0.29) so I am downloading 2.0.0.51. I'm also downloading the PDF so that I can refer to it also. I will apply the firmware to the switch tomorrow morning before office hours. Let's hope for a better outcome! :)