Comware

 View Only
last person joined: 10 hours ago 

Expand all | Collapse all

5700 switch vlans on sub interfaces, how to deal with native vlan1?

This thread has been viewed 5 times
  • 1.  5700 switch vlans on sub interfaces, how to deal with native vlan1?

    Posted 11 days ago
      |   view attached

    Here is what I am trying to accomplish.

    I have a Cisco ASR 1001-x router with a 10g interface that I want to connect to a single switch (HP5700) and this a separate switch (not part of any IRF) will be connected to a native vlan1 on a HP switching fabric (5700's 8 switches) for databases (inside for ASA), now I want to create a sub interface on that same 10g interface to another set of switches that are also on a separate switch fabric (4 switches app/web servers "dmz" on ASA). Currently "inside" network and "DMZ" can only talk to each only thru ASA. Since both sets of switches (inside and dmz stacks) are vlan1, how would I do this? The other side of ASR goes to AWS Direct connect environment and we need to move data between Data Center (inside and dmz systems) to AWS environment. See attached Drawing.

    Since this independent 5700 switch will be plugged into both the "inside" network stack of switches, and the "dmz" network stack of switches, can this work at all?


    interface Ten-GigabitEthernet1/0/18
    description inside - 2 - AWS-DC (databases)
    port link-type hybrid ??? ß do I make this interface hybrid?
    port hybrid vlan 1 untagged <--- native "inside" environment
    speed 10000
    duplex full

    interface Ten-GigabitEthernet1/0/16
    description DMZ-UAT - 2 - AWS-DC (DMZ app/web)
    port link-type hybrid
    port hybrid vlan 35 tagged <--- (UAT) environment
    port hybrid vlan 1 untagged <--- native "dmz" environment
    speed 10000
    duplex full



  • 2.  RE: 5700 switch vlans on sub interfaces, how to deal with native vlan1?

    Posted 7 days ago

    Would it not be easier to forget VLAN 1, create VLAN 2 & use it instead?



    ------------------------------
    spgsitsupport
    ------------------------------