Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[CamthraX]

Hi All,

I am relatively new to VLANs and have been having problems getting a new link up and running.

My provider has installed a cisco router with 2 VLANs on port Fe1.
They are:
VLAN 550 (Data) - 10.0.0.1/30
VLAN 551 (Voice) - 10.0.1.1/30

Up until now i had just set up WAN port 1 on the DSR to 10.0.0.1/30 and enabled the VLAN tag at 550 and it could run the data fine. I now need to get the voice working as well.

Currently my network setup is as follows:

DSR-1000N:
VLAN 1 (Management) - 192.168.1.1/24
VLAN 10 (Data) - 192.168.10.1/24
VLAN 20 (Voice) - 192.168.20.1/24

Port 1 - Trunk (1,10,20)
Port 2 - Trunk (1,10,20)
Port 3 - Access (1) (I use this as my management port to control access to my infrastructure)

I have 2 switches, A DGS-1210-28 and DGS-1210-28P, connected to ports 1 and 2 on the DSR-1000N respectively. The ports connected to the DSR-1000N are set to tagged for VLANs 1,10 and 20 with the remaining ports set to untagged for their respective VLAN.

I have confirmed that everything up until this point is working, i.e if i connect to a port on either switch that is assigned to VLAN 10 i get a DHCP address on the 192.168.10.0/24 range and if i connect to a port that is assigned to VLAN 20 i get a DHCP address on the 192.168.20.0/24 range.

so now the bit i need help with.

How do i route traffic between the following ranges:

192.168.10.0/24 and 10.0.0.1/30
192.168.20.0/24 and 10.0.1.1/30

as i said before i am relatively new to VLANs and could list what i have tried thus far but i would just confuse matters.
Any help would be much appreciated

Thanks,

[PacketTracer]

Hi,

what kind of Internet access do you have? At least for me it looks quite uncommon to use a router port (provided by your ISP SAI ?) as an Internet uplink, that is coming preconfigured with two subinterfaces for voice and data.

My understanding of your scenario is, that you want to use the WAN port 1 of your DSR-1000N to connect to Fe1, which means that you have to configure two subinterfaces using VLANs 550 and 551 and the following IP addresses:

<EDIT real public addresses obfuscated by surrogates 10.0.0.0/30 and 10.0.1.0/30>
WAN port 1 (Subinterface 1, VLAN 550): 10.0.0.1/30 -------------------- 10.0.0.2/30 Fe1 port (Subinterface 1, VLAN 550)
WAN port 1 (Subinterface 2, VLAN 551): 10.0.1.1/30 -------------------- 10.0.1.2/30 Fe1 port (Subinterface 2, VLAN 551)
</EDIT>

<EDIT clarified, see above>
If so, I don't understand, what the ranges

VLAN 550 (Data) - 10.0.0.1/30
VLAN 551 (Voice) - 10.0.1.1/30

are good for. Can you clarify this?
</EDIT>

If my understanding is correct, I'm not sure if you can configure the WAN port 1 of your DSR-1000N in the way as described above - at least from the device's manual I can't see how I should do this. Can you explain in more detail how you configured your WAN port 1 to use VLAN 550?

PT

[CamthraX]

The internet is coming in over a dedicated link to their cisco router.

I only connected it to the WAN port as that is the only way i could get it to route data between my
198.168.10.0/24 and their 10.0.0.0/30 ranges without having to set up a static route.
On the DSR-1000N it has the option of adding a VLAN tag onto your static ip WAN settings. so i set this to 550 and it works fine.

From the way i understand it the WAN port works on a layer 2 level so it strips off the VLAN tag of the packets it passes. This means that i cant use the WAN port and need to use a LAN port that is trunked to VLAN 550 and 551.
I then need to attach this port to their cisco and set up a static route to transfer packets between the respective VLANS.

Im just not sure as to how to use static routes.

In particular,

Do i need to set up both a route to and from each VLAN
i.e VLAN10 to VLAN550 as well as VLAN550 to VLAN10

It gives me the option of selecting the interface for the static route, the four options i presume i would make use of are listed as follows:
LAN10 > VLAN
LAN20 > VLAN
LAN550 > VLAN
LAN551 > VLAN

What does the "Private" selection do?

What is the "Metric" value for?

From the way i understand everything i should have a setup something like this,

Route Name : test1
Active : enabled
Private : disabled
Destination IP : 10.0.0.0
IP Subnet Mask : 255.255.255.252
Interface : LAN10 > VLAN
Gateway IP : 192.168.10.1
Metric : 2

Route Name : test2
Active : enabled
Private : disabled
Destination IP : 192.168.10.0
IP Subnet Mask : 255.255.255.0
Interface : LAN550 > VLAN
Gateway IP : 10.0.0.1
Metric : 2

[PacketTracer]

Hi again,

From the way i understand it the WAN port works on a layer 2 level so it strips off the VLAN tag of the packets it passes. This means that i cant use the WAN port and need to use a LAN port that is trunked to VLAN 550 and 551.

This is also my understanding and I'd draw the same conclusion. In addition besides routing between VLANs 10 and 550 (and VLANs 20 and 551 respectively) you also have to do NAT.

If you had another (VRF-lite capable) Cisco device instead of your DSR-1000N you would configure 3 VLAN-trunk-ports (2x 10/20, connecting to your DGS-1210-switches, and 1x 550/551, connecting to Fe1 of your ISP router), create two VRFs VRF1 and VRF2, and configure L3-SVIs for VLANs 10 and 550 on VRF1 and for VLANs 20 and 551 on VRF2 respectively. In addition you would have to configure NAT (or in Cisco terminology: PAT) for the private addresses in VLANs 10 and 20 to the public addresses 10.0.0.1 and 10.0.1.1 in VLANs 550 and 551 respectively. This would simulate 2 simple NAT routers in one physical device, one for data (VRF1) and one for voice (VRF2).

Back to your DSR-1000N, in principle you would have to do the same. But while you can configure the 3 VLAN-trunk-ports (2x 10/20 and 1x 550/551), I have strong doubts, that you can establish something with your DSR-1000N that resembles the idea of VRFs.

Hence, another simple solution to your problem would be to use a VLAN capable switch and configure a VLAN-trunk-port for VLANs 550/551 and two access ports for VLANs 550 and 551. Then connect port Fe1 of your Cisco router to the switch's VLAN-trunk-port and the WAN interfaces of two simple NAT routers to the access ports for VLANs 550 and 551 respectively. You can then build your LAN-site voice and data VLANs 10 and 20 with switches connected to  LAN ports of the NAT-Routers.

PT