link 877 to 2950 switch = confussed 1

[creeping666]

Equipment I have:

1) ADSL 877, advanced ip security, 4 switch ports.
2) 2950 switch with cisco standard lan image.

Aim:
1) link the 877 and 2950 together
2) Create about 8 vlans on the 2950 which cannot see each
other, but can browse the internet.

Problem:
1) I'm a bit stupid.
2) The 877 only has swicth ports in the back.
3) The 877 can only create 2 - vlans.

Any ideas?

Thanks.

 

[ADB100]

A few things...

1. You need the Advanced IP Services to create more than one VLAN/SVI on the 877.
2. Even with Advanced IP Services on the 877 you can only create a maximum of four VLANs/SVIs
3. If you upgraded to Advanced IP Services then you could have up to four separate VLANs on the 2950 that were trunked to the 877 and handled at Layer-3 here.

!2950
!
vlan 10
vlan 20
vlan 30
vlan 40
!
interface range FastEthernet0/1 - 5
 switchport mode access
 switchport access vlan 10
!
interface range FastEthernet0/1 - 5
 switchport mode access
 switchport access vlan 10
!
interface range FastEthernet0/6 - 10
 switchport mode access
 switchport access vlan 20
!
interface range FastEthernet0/11 - 15
 switchport mode access
 switchport access vlan 30
!
interface range FastEthernet0/16 - 20
 switchport mode access
 switchport access vlan 40
!
interface FastEthernet0/24
 description Trunk to 877
 switchport trunk allowed vlan 10,20,30,40
 switchport mode trunk
 switchport nonegotiate
!

!877
!
vlan 10
vlan 20
vlan 30
vlan 40
!
interface FastEthernet0
 description Trunk to 2950
 switchport trunk allowed vlan 1,10,20,30,40,1002-1005
 switchport mode trunk
!
interface Vlan10
 ip address 10.10.10.1 255.255.255.240
 ip nat inside
!
interface Vlan20
 ip address 10.10.20.1 255.255.255.240
 ip nat inside
!
interface Vlan30
 ip address 10.10.30.1 255.255.255.240
 ip nat inside
!
interface Vlan40
 ip address 10.10.40.1 255.255.255.240
 ip nat inside
!

Obviously there is more to the config but that's the basics.

HTH

Andy

 

[creeping666]

Cool, nice clear answer.

Thanks.

 

[burtsbees]

That's actually a good question---I wonder if you can actually create vlans in the 2950 and use an SVI in the 877 to route between them...

Burt

 

[ADB100]

That's actually a good question---I wonder if you can actually create vlans in the 2950 and use an SVI in the 877 to route between them...

Of course you can....

Andy

 

[burtsbees]

I mean like more than 4 vlans---vlans that are different than the ones in the 877---can you create subinterfaces on the SVI? Would you even have to? If not, how would the vlans be tagged?

Burt

 

[ADB100]

I mean like more than 4 vlans---vlans that are different than the ones in the 877---

No it won't work. You are limited to four VLANs/SVIs on the 877 (with Advanced IP Services). You can trunk this to a Layer-2 switch (as I detailed on the earlier post) and do the inter-vlan routing via the four SVIs on the 877.
The four switchports on the 877 are purely layer-2 so you can't attach IP addresses to them, you can only attach the IP addresses to the SVI coresponding to the Layer-2 VLAN. You can't create VLAN sub-interfaces it doesn't let you:

cisco-877(config)#int vlan 10.1
                       ^
% Invalid input detected at '^' marker.

Andy

 

[burtsbees]

Okee dokee. Thanks.
Never saw anyone even want to do this, but good to know.

Burt