Hi everyone,
I hope someone here will be able to help me because I have been through a not good at all moment lately and I can't figure out what went wrong or what I have done wrong I should say.
Here is a bit of background on this that I hope will be clear enough :
- Our network is made of a Palo Alto 3020 on which is connected a Powerconnect 6248 that is our main backbone switch.
- We are going live with Lync Polycom CX600 phones and have implemented 8 new Powerconnect 5548P switches on which phones and computers will be connected sharing the same port. Those 5548 are all connected on the 6248 via port 48.
- We have several Vlans (Voice 50 - Computers 80 - Servers & Network equipment 90 - Wireless 70 and some others that are non relevant in this post) and so far all is working ok except that the Polycom phones is getting an address on the vlan 80 instead of 50. Of course we want thos ephones ofn vlan 50 for QOS.
- The entries on the DHCP are all correct and following Lync guidelines. When I put the port on access 50 then I get an ip from the correct vlan.
- The only thing I came up with was LLDP that I have implemented in this new config. LLDP is not configured on the 6248. It has the default LLDP out of the box config. Maybe something wrong there ?
Yesterday night I loaded up in the first 5548 the below config and after +/- 5 mins the entire network went unresponsive. Nothing was working and my Paloalto went in alarm mode. Reloading the old config on the switch didn't help. Every single service was down/unresponsive. I had to reload all switches and the PA to get things back to normal.
This might be a stupid question but LLDP can be activated on any port and not only on a port where a phone and a pc are connected right ? If LLDP is activated on a port where a printer or any other device is connected this is not going to cause any issues right ? Sorry for my ignorance. I should document myself a bit more on this.
Any advice on the below 5548 would be really appreciated.
vlan database
vlan 50,80,90
exit
voice vlan oui-table add 0004f2 CX600
voice vlan id 50
lldp med network-policy 1 voice vlan 50 vlan-type tagged
iscsi target port 860 address 0.0.0.0
iscsi target port 3260 address 0.0.0.0
iscsi target port 9876 address 0.0.0.0
iscsi target port 20002 address 0.0.0.0
iscsi target port 20003 address 0.0.0.0
iscsi target port 25555 address 0.0.0.0
qos advanced
ip access-list extended voip
permit ip any 192.168.50.0 255.255.255.0
exit
ip access-list extended LAN
permit ip any any
exit
class-map voip
match access-group voip
exit
class-map LAN
match access-group LAN
exit
policy-map voice
class voip
set queue 6
exit
class LAN
trust cos-dscp
exit
exit
hostname SWB225
username admin password encrypted 4d01b8f77e2e8************c0a8484117ce3 privilege 15
ip ssh server
snmp-server community Dell_Network_Manager rw view DefaultSuper
!
interface vlan 90
ip address 192.168.90.225 255.255.255.0
!
interface gigabitethernet1/0/1
spanning-tree disable
service-policy input voice
lldp notifications enable
lldp optional-tlv port-desc sys-name sys-desc sys-cap 802.3-mac-phy
lldp med enable network-policy location poe-pse inventory
lldp med network-policy add 1
switchport mode trunk
switchport trunk native vlan 80
switchport trunk allowed vlan remove 1,50
voice vlan enable
voice vlan secure
!
***Same config on all other ports up to 47***
!
!
interface gigabitethernet1/0/48
service-policy input voice
switchport mode trunk
!
ip route 0.0.0.0 0.0.0.0 192.168.90.2