access to VLAN through Layer 3 switch 2

[mjoetech]

Hi,

I built a VLAN on a layer 3 switch port that matches the IP subnet scheme of the Avaya PBX (CM 5.2). From the Layer three switch i can ping all my devices on the PBX. However, I cannot setup my ASA to access the PBX's CLAN, or procr port. Is there something that needs to be done in the PBX??

I noticed in the CLAN board (ch ip-interface 01a03) there is an option for VLAN. Do I set this to a specific number? Is there anything else needed?

Thanks so much!

Joe

 

[LoopbackJack]

Can you get to the web interface of your processor? You might need to allow ssh in the server access via the miantenence web interface.
In ASA, also make sure you have SAT setup in the change ip-services page.

Rock on, be strong... SG
APDS UC, APDS CC, ACE IP Telephony

 

[mjoetech]

I do have access to the maint web. I'll check that and add SAT. I'll post you back asap. THX!!

 

[mjoetech]

OK Thanks, The ssh was enabled in the access server screen. In fact, everything was enabled except FTP.

I built the SAT in "ch ip-service" I made it as shown. I'm not sure if this is correct, but I still cannot ping any PBX devices from outside the VLAN. Any other suggestions, or should I change something below?

IP SERVICES
Service Enabled Local Local Remote Remote
Type Node Port Node Port
SAT y CLAN_01A03 5999 any 0

 

[Mitch672]

The AVAYA equipment is probably only responding to VLAN 1, can you set your LAN switch to include VLAN 1 in the VLAN you built? Otherwise you will get into trouble if you start changing the AVAYA equipment to work on a specific VLAN, I have seen it before...


Mitch

AVAYA Certified Expert

 

[mjoetech]

Mitch,

My VLAN 1 is 192.168.80.180. I have a lot of users working off VLAN 1, which consists of all the switch ports except the one port assigned to the Avaya (VLAN 2). My VLAN 2 gateway is 192.168.169.25. This VLAN 2 is the gateway to the avaya which has all devices with a 192.168.169.xxx. Can you see an easy way out for me?

 

[Mitch672]

not really.

it really depends on EXACTLY what each piece of equipment is.

media gateways such as the G430 and G450 can be put on different VLANS (Caution: you will lose access to it, if you can't support the VLAN you change it to)

CLANs and MEDPROs can be put on differnet VLANs on CM 5, earlier versions don't support it.

some servers support different VLANs, not all.

basically, you need to support VLAN 1, as its universal.

you could also change your PCs and users to a different VLAN as well, and leave the phone equipment of VLAN 1, which is what I would suggest, as changing the VLAN on ALL affected AVAYA equipment may not be possible.



Mitch

AVAYA Certified Expert

 

[mjoetech]

Thanks Mitch,

I can seee where the Medpro has that option. My question is; If i set the Medpro and CLAN's "VLAN Option" to "2", how does the PBX know what VLAN 2 is, or how does it know to route to the Layer 3 switch's gateway?

 

[Mitch672]

open the "maint web page", "configure server", on the S8XXX server, if you can change the VLAN, it will be on the "ip-interface" page... caution: if you change it, and the LAn doesn't support that VLAN, you will lose access to it, and need to connect to the "services LAN" port @192.11.13.6 to reconfigure it.

AVAYA Equipment know NOTHING until you configure it.



Mitch

AVAYA Certified Expert

 

[mjoetech]

OK thanks, I am remote and dialed into the modem. I'll have to wait until I get on-site. Thanks again!!

 

[mjoetech]

Mitch or ??

I am in the system now via the web IP. I dont see where there is an "ip interface page" as stated above. I did find a page to option the interfaces and the only thing there was three LAN connections with their respective IP addresses. There is an option to check for VLAN. I did check this for the VLAN option in LAN 3, which is the same subnet as my VLAN port.

The web page has three title lines: Installation, Admin, & Uograde. I poked around looking for IP interface but could not find it. Any ideas where else I can option the VLAN?

Thanks!

Joe

 

[Tolson]

Lets ask the simple question first. You do have a router connected to both VLANs to allow the traffic to move back and forth right?

 

[mjoetech]

Yes, I can ping the Vlan port address from the routers. Thanks.
Joe

 

[mjoetech]

I was working with this agai this morning and from my ASA I can ping the VLAN gateway which is on the same subnet as the PBX. However, I cannot ping the Corp LAN IP address. Is there something I need to program in the Avaya to see the subnet of the Corporate LAN?

Thanks!!!!!,

Joe