I have been trying for the past couple of days to implement Layer 2 switching with three CRS125-24G-1S-RM switches, coupled to a “router-on-a-stick” solution. Yes, I know, there are other possibilities to do VLAN routing, but just humor me…
As per the image (http://postimg.org/image/74os5b8nb/), I need to connect three switches together that will carry all VLAN traffic between them. On Switch 3, I have the link to the router that also has to carry all traffic for the VLANS as the router will do VLAN routing as well as DHCP for the VLAN 103 (Workstation VLAN).
Connected to each of the switches are workstations, connected to IP Phones and the IP Phones are connected to the switch ports. The IP Phones can be configured for a specific VLAN ID, in this case 104 with the IP subnet of 10.0.2.0/24. The workstations will be setup on IP subnet 10.0.1.0/24 VLAN ID 103 and I would like to have a management VLAN of 100 and in the 10.0.1.0/24 IP subnet.
I am trying to find the best possible implementation to achieve the objective and would appreciate it if anyone would make some suggestions with regards to creating the “trunk ports” between all the switches that will carry all of the VLAN traffic between them as well as implementing the Tagged vs. Untagged “access” ports on the switches that will tag the traffic coming from the workstations as VLAN-ID 103.
as you already said, I would setup tagged trunk ports (ports 23 and 24 on yoour image) between the switches and one additional trunk port for connecting your router on a stick thing.
In your desired setup you must ensure that your workstations can tag the ethernet frames and that the switches on your phones will be able to pass tagged ethernet frames. The access ports for the phones are just tagged ports for VID 103 and VID 104.
Ok, so far I have connected the three switches together, and workstations can ping each other. My router is connected to port 17 on one of the switches. The workstation & phone VLANs are setup under ether1 interface on the router and from the router I can ping workstations connected to an “access” port on the switch.
However, from the router, I cannot ping a workstation connected to an access port where I have the phone connected to the ethernet port and the workstation connected to the phone.
From the router, I can ping the IP Address of the phone running on the same “access” port.
I assume it has to do with the vlan tags coming from the router into the switch getting lost somewhere…
It seems like traffic on ether10 (this is the access port that carries both workstation and VoIP traffic) is not tagging the customer-vid traffic 0 as new-customer-vid 103. Below my config so far. Perhaps I'm just missing something...