topic Re: Problem tag vlan between ap7522 and switch summit x450e-48p in ExtremeSwitching (EXOS/Switch Engine)

Problem tag vlan between ap7522 and switch summit x450e-48p

Thomas — Tue, 21 May 2019 21:55:59 GMT

hello,
In the goal to connect ap7522 to switch X450e . i have creat 1 Vlan "config" (tag 5) with ports 3 (untag) ,17(tagged) and 19(tagged) on the switch.
To setup ap7522. i've tag native vlan 5 and allowed this one . but this configuration don't run . But if i creat the same configuration on Vlan 1 "Default" this one running.

code:

Configuration for vlan 1 on switch (this configuration run)

* X450e-48p.34 # sh vlan "Default"
VLAN Interface with name Default created by user
    Admin State:         Enabled     Tagging:   802.1Q Tag 1
    Description:         None
    Virtual router:      VR-Default
    IPv4 Forwarding:     Disabled
    IPv4 MC Forwarding:  Disabled
    IPv6 Forwarding:     Disabled
    IPv6 MC Forwarding:  Disabled
    IPv6:                None
    STPD:                s0(Disabled,Auto-bind)
    Protocol:            Match all unfiltered protocols
    Loopback:            Disabled
    NetLogin:            Disabled
    OpenFlow:            Disabled
    QosProfile:          None configured
    Egress Rate Limit Designated Port: None configured
    Flood Rate Limit QosProfile:       None configured
    Ports:   2.           (Number of active ports=3)
       Untag:      *3,  
       Tag:       *17,    *19
        Flags:    (*) Active, (!) Disabled, (g) Load Sharing port
                  (b) Port blocked on the vlan, (m) Mac-Based port
                  (a) Egress traffic allowed for NetLogin
                  (u) Egress traffic unallowed for NetLogin
                  (t) Translate VLAN tag for Private-VLAN
                  (s) Private-VLAN System Port, (L) Loopback port
                  (e) Private-VLAN End Point Port
                  (x) VMAN Tag Translated port
                  (G) Multi-switch LAG Group port
                  (H) Dynamically added by MVRP
                  (U) Dynamically added uplink port
                  (V) Dynamically added by VM Tracking



Configuration for vlan 1 on ap (this configuration run)

 interface vlan1
  description "Virtual Interface for LAN by Wizard"
  ip address 169.254.221.40/16
  ip address zeroconf secondary
  ip dhcp client request options all
 interface ge1
  switchport mode trunk
  switchport trunk allowed vlan 1,5
  switchport trunk native vlan 5
  switchport trunk native tagged
 interface pppoe1
 interface radio1
  wlan wlan1 bss 1 primary
 interface radio2
  wlan wlan1 bss 1 primary








Configuration for vlan 5 on ap (this configuration don't run)

* X450e-48p.35 # sh vlan "config"
VLAN Interface with name config created by user
    Admin State:         Enabled     Tagging:   802.1Q Tag 5
    Description:         None
    Virtual router:      VR-Default
    IPv4 Forwarding:     Disabled
    IPv4 MC Forwarding:  Disabled
    IPv6 Forwarding:     Disabled
    IPv6 MC Forwarding:  Disabled
    IPv6:                None
    STPD:                s0(Disabled,Auto-bind)
    Protocol:            Match all unfiltered protocols
    Loopback:            Disabled
    NetLogin:            Disabled
    OpenFlow:            Disabled
    QosProfile:          None configured
    Egress Rate Limit Designated Port: None configured
    Flood Rate Limit QosProfile:       None configured
    Ports:   4.           (Number of active ports=3)
       Untag:      *3,      
       Tag:       *17,    *19
        Flags:    (*) Active, (!) Disabled, (g) Load Sharing port
                  (b) Port blocked on the vlan, (m) Mac-Based port
                  (a) Egress traffic allowed for NetLogin
                  (u) Egress traffic unallowed for NetLogin
                  (t) Translate VLAN tag for Private-VLAN
                  (s) Private-VLAN System Port, (L) Loopback port
                  (e) Private-VLAN End Point Port
                  (x) VMAN Tag Translated port
                  (G) Multi-switch LAG Group port
                  (H) Dynamically added by MVRP
                  (U) Dynamically added uplink port
                  (V) Dynamically added by VM Tracking

Configuration for vlan 5 on ap (this configuration don't run)

 interface vlan5
  description "config"
  ip address 169.254.221.40/16
  ip address zeroconf secondary
  ip dhcp client request options all
 interface ge1
  switchport mode trunk
  switchport trunk allowed vlan 1,5
  switchport trunk native vlan 5
  switchport trunk native tagged
 interface pppoe1
 interface radio1
  wlan wlan1 bss 1 primary
 interface vlan5
  description config interface radio2
  wlan wlan1 bss 1 primary


INFORMATION AP

AP7522 version 5.9.2.0-032R
Copyright (c) 2004-2018 Extreme Networks, Inc. All rights reserved.
Booted from primary

ap7522-A8DD28 uptime is 0 days, 07 hours 06 minutes
CPU is ARMv7, No. of CPUs 2
Base ethernet MAC address is B8-50-01-A8-XX-XX
System serial number is XXXXXXXXXXXXXX
Model number is AP-7522-67030-WR




INFORMATION SWITCH

SysName:          X450e-48p
SysLocation:
SysContact:       support@extremenetworks.com, +1 888 257 3000
System MAC:       00:04:96:36:XX:XX
System Type:      X450e-48p

SysHealth check:  Enabled (Normal)
Recovery Mode:    All
System Watchdog:  Enabled

Current Time:     Tue May 21 13:28:11 2019
Timezone:         [Auto DST Disabled] GMT Offset: 0 minutes, name is UTC.
Boot Time:        Tue May 14 08:35:09 2019
Boot Count:       64
Next Reboot:      None scheduled
System UpTime:    7 days 4 hours 53 minutes 2 seconds

Current State:    OPERATIONAL
Image Selected:   primary
Image Booted:     primary
Primary ver:      15.3.1.4
                  patch1-19
Secondary ver:    12.6.5.2

Thank you in advance for your answer. Thomas

Re: Problem tag vlan between ap7522 and switch summit x450e-48p

Tomasz — Wed, 22 May 2019 01:44:19 GMT

Hi Thomas,

If it's not an issue, please comment on those:

What do you mean by configuration that doesn't run? Do you try to reach the AP GUI or get it adopted by a controller?
Sorry for asking but to make sure: did you commit your AP config after changing the interfaces' settings?
Do you see your AP's MAC address in both scenarios on EXOS device (show fdb port [...])?

Kind regards,
Tomasz

P.S. The topic should be moved to EXOS category rather than EOS.

Re: Problem tag vlan between ap7522 and switch summit x450e-48p

BrandonC — Wed, 22 May 2019 03:14:22 GMT

In addition to what Tomasz asked, which port on the switch are you connecting to?

Re: Problem tag vlan between ap7522 and switch summit x450e-48p

Thomas — Wed, 22 May 2019 15:29:21 GMT

Yes, i commit my AP config after changing the interfaces' settings.

ports 3 connected to computer (untagged)
port 17 connected to AP (tagged) (Virtual controller)
port 19 connected to AP (tagged) (slave)

vlan 5 configuration ( i try to reach the AP.But it's doesn't work )

code:

* X450e-48p.2 # sh fdb ports 3,17,19
Mac                     Vlan       Age  Flags         Port / Virtual Port List
------------------------------------------------------------------------------
00:0e:c6:d1:XX:XX     config(0005) 0034 d m           3

Flags : d - Dynamic, s - Static, p - Permanent, n - NetLogin, m - MAC, i - IP,
        x - IPX, l - lockdown MAC, L - lockdown-timeout MAC, M- Mirror, B - Egress Blackhole,
        b - Ingress Blackhole, v - MAC-Based VLAN, P - Private VLAN, T - VLAN translation,
        D - drop packet, h - Hardware Aging, o - IEEE 802.1ah Backbone MAC,
        S - Software Controlled Deletion, r - MSRP

Total: 1 Static: 0  Perm: 0  Dyn: 1  Dropped: 0  Locked: 0  Locked with Timeout: 0
FDB Aging time: 300

Vlan 1 configuration (i reache the AP . But the AP on ports 19 it's not adopted by VC)

code:

* X450e-48p.14 # sh fdb ports 3,17,19
Mac                     Vlan       Age  Flags         Port / Virtual Port List
------------------------------------------------------------------------------
00:0e:c6:d1:XX:XX   Default(0001) 0008 d m           3
b8:50:01:a8:ZZ:ZZ    Default(0001) 0010 d m           17

Flags : d - Dynamic, s - Static, p - Permanent, n - NetLogin, m - MAC, i - IP,
        x - IPX, l - lockdown MAC, L - lockdown-timeout MAC, M- Mirror, B - Egss Blackhole,
        b - Ingress Blackhole, v - MAC-Based VLAN, P - Private VLAN, T - VLAN anslation,
        D - drop packet, h - Hardware Aging, o - IEEE 802.1ah Backbone MAC,
        S - Software Controlled Deletion, r - MSRP

Total: 2 Static: 0  Perm: 0  Dyn: 2  Dropped: 0  Locked: 0  Locked with Timeou 0
FDB Aging time: 300

Re: Problem tag vlan between ap7522 and switch summit x450e-48p

Thomas — Tue, 28 May 2019 14:22:58 GMT

code:

hi, i've progress on different part on my project .But i'm stuck on problem vlan tag between ap7522 and switch summit x450e-48p

Re: Problem tag vlan between ap7522 and switch summit x450e-48p

Tomasz — Tue, 28 May 2019 15:57:03 GMT

Hi,

First I'd like to walk with you through the VLAN 1 approach. As you can see only AP on port 17 is seen by the switch in the VLAN, and AP on port 19 isn't. You would have to review port-19-AP's interface config to make it be seen in VLAN Default on EXOS.
BTW, if you don't mind having untagged ports with APs connected to them, you don't have to change VLAN settings on an AP, it can go to whatever VLAN you wish but having ports untagged in that VLAN on EXOS. Otherwise, let's work it out. For VLAN 1 design, make sure your AP connected to port 19 has 'switchport trunk native tagged' so you should be able to see it when doing 'show fdb' on EXOS.

Kind regards,
Tomasz

Re: Problem tag vlan between ap7522 and switch summit x450e-48p

Thomas — Wed, 29 May 2019 15:03:29 GMT

hi,
i've check configuration on AP. this one is connected to ports 19 has 'switchport trunk native tagged' But result is the same.

code:

* X450e-48p.4 # sh fdb ports 3,17,19

Mac                    Vlan      Age Flags        Port / Virtual Port List

------------------------------------------------------------------------------

00:0e:c6:d1:XX:XX   Default(0001) 0143 d m          3

b8:50:01:a8:ZZ:ZZ   Default(0001) 0136 d m          17




Flags : d - Dynamic, s - Static, p - Permanent, n - NetLogin, m - MAC, i - IP,

       x - IPX, l - lockdown MAC, L - lockdown-timeout MAC, M- Mirror, B - Egress Blackhole,

       b - Ingress Blackhole, v - MAC-Based VLAN, P - Private VLAN, T - VLAN translation,

       D - drop packet, h - Hardware Aging, o - IEEE 802.1ah Backbone MAC,

       S - Software Controlled Deletion, r - MSRP




Total: 9 Static: 0 Perm: 0 Dyn: 9 Dropped: 0 Locked: 0 Locked with Timeout: 0

FDB Aging time: 300