VLAN on Alcatel 6850 Omniswitch

I'm having trouble assigning multiple VLANs to the same port. I've left the commands used to create my two VLANs.

For VLAN 10:
vlan 10 name "VLAN 10"
ip interface vlan-10 address 10.0.0.1/24 vlan 10
vlan 10 port default 1/29-30

For VLAN 20:
vlan 20 name "VLAN 20"
ip interface vlan-20 address 20.0.0.1/24 vlan 20
vlan 20 port default 1/31-32

My router (Livebox Pro) is connected to port 1 of the switch.

So what I've done is tagged port 1 in order to use both VLANs:

vlan 10 802.1q 1/1
vlan 20 802.1q 1/1

When I use the command show 802.1q 1/1, it shows that the port is indeed marked with both VLANs:
Acceptable Frame Type : Any Frame Type
Force Tag Internal : NA
Tagged VLANS Internal Description
-------------+------------------------------------------+
10 TAG PORT 1/1 VLAN 10
20 TAG PORT 1/1 VLAN 20

And yet it's not working. There might be something to configure on the router?

hi

remove the ip from vlan 1

no ip interface vlan-1

to have two vlans on the same port:

vlan port mobile slot/port

if vlan 2 contains the phones
vlan 2 mac "mac-address"

to assign multiple ports in a vlan

ports 13 to 15 for vlan 2
if the switch has the id in front 1

vlan 2 port default 1/13-15

it is possible to have multiple vlans on one port. To do this, mobility must be used.

in general: the pc is in the default vlan (assigned via the command vlan X port default slot/port)
the phone goes into another vlan triggered by its mac-address (assigned via the command vlan y mac "mac-address")

and set the port to mobility: vlan port mobile slot/port

Hello,
it is mandatory to "tag" the packets that come out of your Alcatel to go to the Livebox.

To do this, you need to configure the port that connects your Alcatel to the box in "trunk" mode
this is done by entering vlan 1 802.1q. Let's assume that port 24 of your Alcatel is connected to the box, enter

vlan 802.1q 1/24 frame type tagged

the syntax for vlan 1 will be:
vlan 1 802.1q 1/24
for vlan 30:
vlan 30 802.1q 1/24 and so on for all other vlans

On the other side, that is, on the box, also create a "trunk" on the port that receives the cable coming from the Alcatel.. it should work.
See you!

What is the purpose of this config?

Normally, what you should do is:

vlan 200 for the PCs
Vlan 201 for the router

vlan 200 default port 1/29-32
vlan 201 default port 1/1

connect the router to port 1/1
the PCs to ports 1/29-32

set the default gateway on the PCs to the IP you configured on the switch for vlan 200
add on the switch a route:

ip static-route 0.0.0.0/0 gateway "livebox router IP"

on the livebox router, set up a route:

network vlan 200 gateway "vlan 201 IP of the 6850"

finally, do basic routing.

This way, this config is clean.

I think I managed to do it without having to make any changes to the router, but it's important to use the 802.1q protocol:

vlan 10 name “VLAN 10”
ip interface vlan-10 address 10.0.0.1/24 vlan 10
vlan 10 port default 1/29-30
vlan 10 802.1q 1/1

vlan 20 name “VLAN 20”
ip interface vlan-20 address 20.0.0.1/24 vlan 20
vlan 20 port default 1/31-32
vlan 20 802.1q 1/1

vlan 1 802.1q 1/29
vlan 1 802.1q 1/30
vlan 1 802.1q 1/31
vlan 1 802.1q 1/32

ok so it's not routers, it's OmniSwitches
so you enter configuration mode with Telnet....and you create your VLANs according to the function and the addressing based on the number of your limits...
I'll give you an example ...
you enter privileged mode
Switch#vlan database
Switch(vlan)#vlan [vlan number] name [function name]
Ex:
Switch(vlan)#vlan 10 name Purchases
after that you assign by interface in each VLAN...

I also have a little problem with my Omniswitch 6850 for creating a VLAN.

In Hyperterminal, I create a vlan "VLAN 200" following the switch documentation:

------------
vlan 200 name "VLAN 200"
ip interface vlan-200 address 20.0.0.1 vlan 200
vlan 200 default port 1/29-31
------------

I don't get any errors when typing these three commands, but when I try to access the internet with a PC on VLAN 200, it doesn't work.

Here are the parameters of my vlan when I use the command show vlan 200:

------------
show vlan 200
Name: VLAN 200,
Administrative State: enabled,
Operational State: enabled,
1x1 Spanning Tree State: enabled,
Flat Spanning Tree State: enabled,
Authentication: disabled,
IP Router Port: on,
IPX Router Port: none,
Mobile Tag: off
------------

Can anyone help me?

Hello

there is an error in the port assignment to the VLAN

vlan 200 default port 1/1

in the ip interface command you need to specify the mask if it’s not the default mask for class A

ip interface vlan-200 address 20.0.0.1/24 vlan 200

Where is your internet router; in VLAN 200?

Which default gateway does your PC use, that of the switch or the internet router?

Thank you, I just realized that I needed to put the router in VLAN 200 (at the time, I wasn't thinking about it but now it seems logical). I added port 1 (the one for the router) to VLAN 200 and now it's working ;)

Thank you

I just need to find a way to assign multiple VLANs to a port.

Well, in the end, I succeeded. I just had to tag all the ports belonging to a VLAN (ports 29, 30, 31, and 32).

The goal of my configuration is to create a VLAN ("VLAN 10") for a first group of users, a VLAN ("VLAN 20") for a second group of users, and a VLAN ("VLAN 1", the default one) for the router.

With my previous configuration, I realized that it wasn't working since a PC from VLAN 10 could ping a PC from VLAN 20.

...
...

Okay, I've followed your instructions, but since I'm using the administrator interface for the Livebox, I can't type the command "network vlan 200 gateway ip vlan 201 of the 6850".
So I go to the "configure" tab > "networks and services" > "Livebox" > "security" > "routing" and then I create a new route (for my VLAN 10 whose network address is 10.0.0.0) like this:

- Name: LAN Bridge
- Destination: 10.0.0.0
- Gateway: 192.168.1.1
- Network mask: 255.255.255.0
- Metric: 0
- Status: Applied

I tried to connect to a website but it doesn't work.

the livebox is in vlan 1 then.

did you create for vlan 1 an ip interface 192.168.1.1/24

you need to put a static route in the 6850 (default gateway to the livebox router)

to prevent VLAN 20 and 10 from communicating, we can implement an ACL

we will see this later.

especially remove 802.1Q from port 1/1

vlan 10 no 802.1q 1/1
vlan 20 no 802.1q 1/1

vlan 1 port default 1/1

I followed your method:

--------------------------
vlan 10 name “VLAN 10”
ip interface vlan-10 address 10.0.0.1/24 vlan 10
vlan 10 port default 1/29-30

vlan 20 name “VLAN 20”
ip interface vlan-20 address 20.0.0.1/24 vlan 20
vlan 20 port default 1/31-32

ip interface vlan-1 address 192.168.1.1/24 vlan 1

ip static-route 0.0.0.0/0 gateway 192.168.1.1
---------------------------

Then in the Livebox admin panel, I create a route for my VLAN 10:

---------------------------
- Name: LAN Bridge
- Destination: 10.0.0.0
- Gateway: 192.168.1.1
- Subnet Mask: 255.255.255.0
- Metric: 0
- State: Applied
---------------------------

But in the end, it doesn't work.

There is an error: ip static-route 0.0.0.0/0 gateway 192.168.1.1

it should be: no ip static-route 0.0.0.0/0 gateway 192.168.1.1

on the 6850: ip static-route 0.0.0.0/0 gateway "livebox IP"

It doesn't work, it tells me:

ERROR: Invalid entry: "livebox""

replace livebox with the IP of the livebox!!!

I don't understand... my Livebox IP is 192.168.1.1, so I need to do

ip static-route 0.0.0.0/0 gateway 192.168.1.1

Why are you telling me it's wrong then? In any case, it's not working!

Hi

everything is fine.

You need to remove the 802.1q.

I just noticed that the IP of the livebox and that of the switch for VLAN 1 are the same.

You can change the IP on the switch from 192.168.1.1 to 192.168.1.2
and change in the livebox the gateway for the network 10.0.0.0 from 192.168.1.1 to 192.168.1.2

Run a show ip route on the 6850 if it still has its static route.

See you later