VLAN problems

lanman73
Posts: 10
Member Since:
2007-05-03

I am having a strange problem configuring VLAN's with aastra 480i's. I have 2 VLAN's configured in the switches VLAN 5 for phones and normal VLAN 1 for PC's. The problem that i am having is in order for the PC's to see VLAN 1 I have to set the phone port to VLAN 5 and the passthrough port to VLAN 5. Normally i would think you would set VLAN 5 for the phones and VLAN 1 for the PC's. Setting the passthrough to VLAN 1 gives me no connectivity but setting the passthrough to VLAN 5 gives me access to VLAN 1 go figure. I do get the desired results doing this but it doesn't seem correct to me. Any ideas?



mwatson
Posts: 1
Member Since:
2008-05-11
Thats odd, I haven;t had any

Thats odd, I haven;t had any VLAN problems with 9133i's 480i's or 57i's

in my config...

my workstations & phones are on different VLANs like yours, in my case I;m using VLAN 210 as the native port VLAN (untagged VLAN), and I am using VLAN 4000 (tagged) for the phones. Since VLAN 210 is untagged you could say its equivalent to your VLAN 1, we set this from the switch so workstations don;t have to know they are on VLAN 210.

My aastra.cfg simply contains:

tagging enabled: 1
VLAN id: 4000

I don;t even set the VLAN id of the pc uplink port. My switches are configured to give access on any switchport to any MAC address that begins with 00085d (Aastra MAC OUI Prefix) and a couple other OUI-prefixes that we have on our VOIP vlan.



skykingoh
Posts: 1012
Member Since:
2007-12-17
I think Watson pegged it for

I think Watson pegged it for you. If you plug the PC into the switch port it would see the untagged packets on the native VLAN (in your case 1). I am not sure what "pass through" mode is. I don't have an Aastra phone in front of me. You simply tell the phone what VLAN the voice is on and it looks at the tag header and sorts out the frames.

If you are doing this for QoS make sure you have a priority set for the voice VLAN. Not sure what switch you are using or I could make specific recommendations if I am familiar with it.

Scott



lanman73
Posts: 10
Member Since:
2007-05-03
Bug?

Even when I set the PC port to VLAN 1. As soon as I restart the phone, the PC port has been set back to VLAN 5 on the phone. What I don't understand is why the phone gets the correct IP from the DHCP server on VLAN 5 and the PC gets an IP address from the DHCP server in VLAN 1 even though the VLAN id is set to VLAN 5 on the PC port of the phone. Is this a bug in the aastra firmware? I have a bunch of 480i's and 2 57iCT's that all act the same way.



skykingoh
Posts: 1012
Member Since:
2007-12-17
What VLAN on your switch is

What VLAN on your switch is set to the default VLAN?

Think of the phone as having an additional layer two interface so it is really a three port switch.

Port 1 hooks up to your switch, frames on the Voice VLAN should be tagged with 802.1q tags and the phone will pickup send out DHCP requests tagged with the voice VLAN tag.

The PC's is hooked up to the second port of the switch. Frames on this port are forwarded to the port connected to your switch. These frames are not tagged so whatever DHCP server is sitting in the default LAN will "hear" the DHCP requests from the PC attached to the second port.

Does this make sense?

Please don't take this question wrong, do you know how 802.1q VLAN's work in general (not specific to the Aastra)?

Scott



lanman73
Posts: 10
Member Since:
2007-05-03
I'm struggling to understand.

I have to be honest VLAN's are very new to me. If the PC port cannot use 802.1q tags why does aastra get you the option to set a VLAN id on the PC port? That is the part I don't understand. I really appriciate everyone who is helping me understand this stuff.



skykingoh
Posts: 1012
Member Since:
2007-12-17
Ok excuse my humor but it is

Ok excuse my humor but it is Sunday, I kinda figure a guy calling himself the "lanman" would know more about VLAN's than I do.

With all that being said, I can see some custom applications that could utilize the ability to respond to tags on the second port however this is not the norm.

What kind of switch do you have?

The default LAN should be your data LAN

The voice LAN should be your voice LAN (on a Cisco switch you can configure this and the phone will automatically pick up the parameters.)

This will result in the following behavior:

  1. A PC plugged into a switch port will work with no special configuration
  2. A phone plugged into a switch port configured properly will attach to the voice VLAN

With the phones picking up DHCP it sounds like you are almost 100%

Are we getting closer?

Scott



lanman73
Posts: 10
Member Since:
2007-05-03
It all works.

Don't get me wrong everything works as I want. I am just trying to figure out the aastra's behavior. Why are you able to configure a VLAN id and priority for the PC port if it has no effect, and why does the PC port just revert to the same VLAN id that I configure for the phone vlan id when i set the PC port to VLAN 1?



skykingoh
Posts: 1012
Member Since:
2007-12-17
The PC VLAN port should not

The PC VLAN port should not be set to anything for a typical configuration:

  1. What type of switch are you using?
  2. What traffic is on VLAN ID 1?
  3. What traffic is on VLAN ID 2?
  4. What VLAN is the default VLAN?

I can explain clearly with this data.

Scott



lanman73
Posts: 10
Member Since:
2007-05-03
I have 3 Dell PowerConnect

I have 3 Dell PowerConnect 3448P 48 port POE switches. The default VLAN is 1, there is no VLAN 2, and VLAN 5 has the trixbox server, the phones, and a separate internet connection. The Dell switches have all ports set to truck mode.



skykingoh
Posts: 1012
Member Since:
2007-12-17
There is your problem
Quote:
The Dell switches have all ports set to truck mode.

No trunk mode needed

The ports for the phones should be configured:

switchport mode access
switchport voice vlan 5

This will automatically set VLAN voice priority.

The port for the trixbox should be configured:

switchport mode access
switchport access vlan 1

There should be no need for a data VLAN tag on the phone except for special applications.

Scott



lanman73
Posts: 10
Member Since:
2007-05-03
I thought trunk mode was

I thought trunk mode was needed for a port to support more than 1 VLAN. If I use access mode and set the port to VLAN 5 will all untagged packets go to VLAN 1? Also how would I force my second internet connection to VLAN 5?



skykingoh
Posts: 1012
Member Since:
2007-12-17
Second Internet

Second Internet connection?

Just set the port the router is attached to VLAN 5 with the command

switchport access vlan 5

Here is an example of how the phone looks to your switch:

Keep in mind for the most part your Dell switch IOS is identical to Cisco switch IOS, that is why the Cisco reference in the image.

That is all that it takes to configure VLAN's, 1 command. The voice VLAN command takes care of the tagging and priority in 1 line of code.

How do you intend to route across the VLAN's so that the PC's in VLAN 1 can manage the trixbox?

Scott



lanman73
Posts: 10
Member Since:
2007-05-03
Trixbox pro

I run trixbox pro, so I just use cp.trixbox.com for admin. The second internet connection is used for remote phones and the vpn between the trixbox and fonality. VLAN 1 has all the corporate traffic.



skykingoh
Posts: 1012
Member Since:
2007-12-17
Great so did the voice vlan

Great so did the voice vlan do the trick for you?



lanman73
Posts: 10
Member Since:
2007-05-03
Thanks

I will have to try tomorrow. I will ssh into the switches and try it out. I didn't know that command existed in the dell switches. Is that the exact command I use "switchport voice vlan 5"? Thanks for all the help.



skykingoh
Posts: 1012
Member Since:
2007-12-17
Yeah that is the command.

Yeah that is the command. Do you know how to use IOS.

You might have to telnet in, then you use the command "enable" to access full command mode.

One in command mode get a list of your ports by using the command "show int"

You then place that command on each interface.

Update interfaces in configuration mode.

So it would go like this

telnet switch
enable: Password
show int
config t
int f0/2 <-- Example port you want to change
switchport voice vlan 5
exit
write memory <<- save to flash.

You will have to look at the config with the "show run command"

Place the keyword no in front of any config line you may need to remove.

Scott



Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.