Thank you for the detailed write up. I think I am doing something wrong (clearly!).
It is 24port unifi port 6 (all vlans) to unifi 8port 8 (all vlans), I am using port 48 of the 6450 as the 'feed'.
If I plug port 8 from the 8 port into a PC, I can change all Vlan's on the Unifi & the PC follows suit.
If i set that same unifi port 8 to the testvlan group (Vlan 75, 85, 95, and the 'native' vlan is 105) - the same PC when plugged into Unifi port 8, can access all vlans by switching the vlan tag in windows.
When I take port 8 and plug it into port 48 on the ICX 6450 - I have it as port 48 being tagged to vlans 75, 85, 95, and 105. I do not have port 48 as dual mode or untagged - i am expecting that as nothing is untagged, it will not default to any vlan or get an IP?
Next:
Port 47 untagged as vlan 75
Port 46 untagged as vlan 85
Port 45 untagged as vlan 95
Port 44 untagged as vlan 105
If i plug the PC into ports 44-47 I am not getting any IP when I would expect each port to be on a different Vlan with an IP.
Since port 8 from the unifi works fine, I think I am making a mistake somewhere. I think I am close but not quite there. I do NOT have the management vlan on the ICX6450 as would like to deny internet access to the switch (I guess it could be done via firewall).
The ciscos dont have the Manangement vlans - just the vlans it needs.
Thanks,
Rich
@richtj99
Your VLAN + tagged proposals are correct.
Yes, setting a port as untagged strictly limits all traffic through that port on that specific VLAN. Tagged packets are ignored since that port can be considered "unaware" of any VLAN IDs from a client device point of view.
If you want tagged AND untagged traffic (e.g. a tagged VoIP VLAN but default to a VLAN for PCs), you will tag all of the VLANs desired and then go to the interface and set
dual-mode <VLAN ID>
Here's an example using all three options:
Code:
vlan 10 name voip
tagged eth 1/1/1 to 1/1/48 eth 1/2/2
untagged eth 1/2/1
vlan 20 name pcs
tagged eth 1/1/1 to 1/1/24 eth 1/2/2
vlan 30 name whatever
tagged eth 1/1/25 to 1/1/48 eth 1/2/2
interface 1/1/1 to 1/1/24
dual-mode 20
voice-vlan 10
interface 1/1/25 to 1/1/48
dual-mode 30
voice-vlan 10
interface 1/2/1
port-name PBX
interface 1/2/2
port-name Link-to-switch2
Don't forget a management VLAN. Use the management VLAN (whatever ID on whatever ports you choose/need) to manage your network devices. For example, my switches use VLAN ID 5 as management. Only network switches, the Unifi Controller, Unifi APs and wireless bridges are on that VLAN on my network - the absolute necessary devices to operate my LAN. I have one port on each switch left as untagged on that VLAN as a simple "management" port (seperate from the factory "Management" port on these switches which I have configured differently).
Example:
Code:
vlan 5 name Management
tagged eth 1/2/1 to 1/2/4
untagged eth 1/1/48
router-interface ve 5
interface ve 5
port-name Management
ip address 10.0.5.1/24
interface eth 1/1/48
port-name Management