VLANs - Zyxel --- Cisco

mar0001

XMG1915 — G8- - - - - - - - - - -g0/4— Cisco 3560CX

I am more of a Cisco guy and still learning the Zyxel way of doing stuff. So please bear it in mind ;-)

On Cisco:

G0/4

switchport mode trunk

On Zyxel:

vlan 1
normal ""
fixed 1-18
forbidden ""
untagged 1-7,11-18
ip address 10.10.10.247 255.255.255.0
ip address default-gateway 10.10.10.254
exit
vlan 10
normal 1-7,11-14,16-18
fixed 8-10,15
forbidden ""
untagged 15

Cannot ping through, a device connected to port 15 cannot see anything in VLAN 10 on the Cisco switch.

Am I missing sth? the configuration above makes port g8 on Zyxel a trunk for VLAN10 with the native vlan of 1, correct?

Zyxel_Melen

Hi @mar0001

Please check the PVID of port 15. I think your current setting is 1, not 10. You need to change to VLAN 10, so the device will be in VLAN 10.

For more details, please check this FAQ:

https://community.zyxel.com/en/discussion/19489/tutorial-of-switch-vlan-configuration-v4-80

mar0001

That does not answer my question. I cannot ping the Zyxel switch from Cisco, either. Also, I tried changing the native vlan to 1 on the trunk - it did not help.

The configuration above should allow me to do that.

Also, when I connected port 15 to a Cisco access port in VLAN 10 - I was able to access the Zyxel switch through the Cisco device which indicates that port 15 was correctly configured.

Am I missing sth here? :)

PeterUK

Can you share screenshot of the Cisco and Zyxel settings and IP of its Management IP Address and on what VLAN

Also is the Zyxel Management IP Address on VLAN 1? if Cisco is VLAN 10 you can't ping from Zyxel to Cisco

Zyxel_Melen

Hi @mar0001,

From the post, I thought you were trying to ping the Cisco switch or other devices on VLAN 10 from the device on Zyxel port 15. Since you didn't mention the PVID info of port 15, please remember to change it.

That does not answer my question. I cannot ping the Zyxel switch from Cisco, either. Also, I tried changing the native vlan to 1 on the trunk - it did not help. The configuration above should allow me to do that.

Which VLAN is your Cisco switch's management interface? Since the Zyxel switch's management interface is VLAN 1, please ensure their IP addresses are in the same VLAN and IP subnet. Or you need to set the default gateway to route the traffic.

Also, when I connected port 15 to a Cisco access port in VLAN 10 - I was able to access the Zyxel switch through the Cisco device which indicates that port 15 was correctly configured.

This is more likely because your device has a default gateway. So, the gateway can help route the traffic from VLAN 10 to VLAN 1.

Just like I mentioned in my first comment, the PVID of port 15 needs to be edited to VLAN 10. Then this device can be in VLAN 10, not default VLAN 1.

mar0001

Sorry for the delay. I had to isolate that and try it out in a lab. Playing in a live environment is not a good idea. PLEASE REVIEW MY NEW TOPOLOGY BELOW BEFORE REPLYING

z2.jpg

z3.jpg

z4.jpg

z1.jpg

here is my topology.

I made vlan 1 my native vlan to make it easier.

Zyxel —G8 - - - - - - - - - - - G0/4——Cisco

^^^ This is a trunk.

Also, there is a PC connected to port G15 on Zyxel which is (or should be in VLAN10).

Issue: There is NO connectivity between vlan 10 on Zyxel and vlan 10 on Cisco.

Troubleshooting:

Zyxel - screenshots attached.

Cisco:

BKPCX#show int trunk

Port Mode Encapsulation Status Native vlan
Gi0/4 on 802.1q trunking 1

Port Vlans allowed on trunk
Gi0/4 1-4094

Port Vlans allowed and active in management domain
Gi0/4 1-2,5,10,19,55,71,80,95,700,721

BKPCX#show lldp neighbors
Capability codes:
(R) Router, (B) Bridge, (T) Telephone, (C) DOCSIS Cable Device
(W) WLAN Access Point, (P) Repeater, (S) Station, (O) Other

Device ID Local Intf Hold-time Capability Port ID
XMG1915 Gi0/4 120 B 8

PeterUK

so Zyxel PC on port 15 is untag for VLAN10 going out port 8 tag to Cisco so what Cisco doing for VLAN10? where it going? you might need to make a VLAN 10 on Cisco?

mar0001

https://community.zyxel.com/en/discussion/comment/76420#Comment_76420

Yes, there are devices in VLAN 10 on Cisco and they cannot see the device connected to Port 15 on Zyxel. There is also a DHCP server for VLAN10 on Cisco and the device connected to port 15 fails to reach it.