LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 02-24-2015, 12:01 PM   #1
szboardstretcher
Senior Member
 
Registered: Aug 2006
Location: Detroit, MI
Distribution: GNU/Linux systemd
Posts: 4,278

Rep: Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694
General VLAN configuration


I have a Cisco 2960XR,. and I've configured a vlan on it.

I also have a Fortigate 100D firewall.

So, switch ports 1-12 are configured as Vlan 5.

Vlan 5 is configured with an ip address of 10.0.10.1.

A computer is plugged into switch port 12, and the firewall interface for Vlan 5 is plugged into port 1. I have configured the firewall interface as 10.0.10.2 and assigned it to Vlan 5.

In my mind, a computer would use the 'gateway' of the vlan = 10.0.10.1. And I further figure that somehow this vlan has to forward traffic to the firewall 10.0.10.2. So is that correct, and how do I do that in a cisco 2960XR?

If anyone has the time to take me step by step through a simple VLAN configuration I would appreciate it,. or answer the above question if I am close to getting it correct.
 
Old 02-24-2015, 01:59 PM   #2
Ser Olmy
Senior Member
 
Registered: Jan 2012
Distribution: Slackware
Posts: 3,347

Rep: Reputation: Disabled
I'm not familiar with the Fortigate 100D, but if you've configured a VLAN interface on that box and assigned it the number 5, the firewall should send and expect to receive 802.1q tagged frames with that specific VLAN number.

If you then connect the physical interface of the Fortigate to a switch port in access VLAN 5, the Forticate will send 802.1q tagged frames labeled "5" to a port which is a member of VLAN 5 and expects untagged frames. That won't work.

Try configuring the switch port as a VLAN trunk with a native VLAN other than 5:
Code:
Switch(config)#interface GigabitEthernet 0/1
Switch(config-if)#switchport mode trunk
Switch(config-if)#switchport trunk native vlan 1
This is assuming that the port in question is "GigabitEthernet 0/1", of course.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
vlan configuration with zeroshell delpasio Linux - Networking 0 11-08-2011 10:52 AM
VLAN configuration pfust Linux - Networking 2 08-26-2010 08:34 AM
VLAN configuration Satya Vani Linux - Software 1 03-18-2008 04:21 AM
vlan configuration Satya Vani Linux - Networking 0 03-17-2008 06:55 AM
VLAN configuration - native VLAN and setting PVID kumarwaiting Linux - Networking 0 07-24-2006 02:51 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 01:38 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration