Data & Voice VLAN on same port

[mumer1166]

Dear Guys
I am using OS6860 in our environment. I want to use 2 vlans (Data Vlan 10 & Voice Vlan 20) on single access port just as we do in cisco.
Please guide me how can i achieve this goal.Please give step by step commands of this and also tell if & how to implement QoS for this case.

[frank]

vlan 10 enable name "vlan 10"
vlan 20 enable name "vlan 20"
vlan 10 ip 192.168.10.0 255.255.255.0
vlan 20 ip 192.168.20.0 255.255.255.0
vlan 10 port default 1/1

use the help and documentation. it is all explained. if you know Cisco, it will be easy.

[TrX]

vlan 10 name "vlan 10"
vlan 20 name "vlan 20"

vlan 10 members port x/x/x untagged
vlan 20 members port x/x/x tagged

[surajkants]

I have same Issue, CASE, Data device not connected directly with port. Voice device connected directly, data device connected with voice device.


Switch--->ip_Phone_Voice_vlan10------->PC_Data_Vlan20 (Both need untagged traffic, in cisco using qos it done but in AOS release 8.x it's not working with tagged/untagged)

[surajkants]

vlan 40 name "User"
vlan 50 name "User_Voice" //Create two vlan 40 for user data and 50 for user voice

vlan 50 port default 1/5-20 // assign port 5 to 20 into default vlan 50 for user voice

vlan port mobile 1/5-20 //Enable mobile tag for port 5 to 20

vlan 40 ip 192.168.10.0 255.255.255.0 //Rule if frame received with subnet 192.168.10.0, vlan 40 assigned or work as secondary vlan

vlan 40 802.1q 1/24 //Making one port as trunk for uplink tag vlan 40
vlan 50 802.1q 1/24 //Making one port as trunk for uplink tag vlan 40
vlan 802.1q 1/24 frame type tagged //Rule for trunk port because 802.1q port not follow mobile port rule

ip interface vlan-50 address 192.168.50.1 255.255.255.0 vlan 50 //Assign Ip address on vlan

ip static-route 0.0.0.0/0 gateway 192.168.50.254 //Default Route

aaa authentication default local //enable http, telnet and ftp

lanpower start 1 //enable poe port

[surajkants]

Please follow below config steps to configure ip phones with pc connectivity.

Voice vlan ---- 20
PC vlan ------- 10




unp profile "DATA"
unp profile "VOICE"
unp profile "DATA" map vlan 10
unp profile "VOICE" map vlan 20
unp port-template datadefault direction both default-profile "DATA" classification trust-tag ap-mode admin-state enable
unp port 4/1/19-22 port-type bridge
unp port 4/1/19-22 port-template datadefault
unp classification-rule "VOICE"
unp classification-rule "VOICE" Profile1 "VOICE"
unp classification-rule "VOICE" mac-oui 00:80:9f(this should be actual mac of phone)

[KV_Swami]

I am trying to use UNP for a port that will have a Crestron NVX352 Encoder/Decoder connected to it. The same LAN port on the device supports the Dante (Audio) Connection and the NVX (Video) Connection. There are separate MAC Addresses for each function. When i deploy the following then i am only getting the Dante Interface on the NVX Device to get an IP and pick up a UNP Profile. For the AV-Video Interface it says No SPB Resource. When i remove the UNP port settings and set it as a SAP Port it picks up the AV-Video Network.

Switch - OS6860E-P48 (8.6.289.R01)

------
unp profile "unp-AV-Dante-BLDF-F" mac-mobility
unp profile "unp-AV-Dante-BLDF-F" map service-type spb tag-value 168 isid 100168 bvlan 4000 multicast-mode tandem vlan-xlation

unp profile "unp-AV-Video-BLDF-F" mac-mobility
unp profile "unp-AV-Video-BLDF-F" map service-type spb tag-value 170 isid 100170 bvlan 4001 multicast-mode tandem vlan-xlation

unp port-template unp-wired-default direction both default-profile "unp-AV-Video-BLDF-F" classification trust-tag ap-mode admin-state enable
unp port-template unp-wired-default mac-authentication
unp port-template unp-wired-default mac-authentication pass-alternate "unp-AV-Dante-BLDF-F"

unp port 1/1/19-24 port-type access
unp port 1/1/19-24 port-template unp-wired-default

unp classification ip-address 10.21.168.0 mask 255.255.254.0 profile1 "unp-AV-Dante-BLDF-F"
unp classification ip-address 10.21.170.0 mask 255.255.254.0 profile1 "unp-AV-Video-BLDF-F"
unp classification mac-oui 00:1d:c1 profile1 "unp-AV-Dante-BLDF-F"
unp classification mac-oui 00:10:7F profile1 "unp-AV-Video-BLDF-F"
------

Is there a way to use UNP and provide (2) Services on one port?

[KV_Swami]

Modifying the message as it actually did not work for me.

[silvio]

In my knowledge it should be possible. What is the reason for getting successfull the profile "unp-AV-Dante-BLDF-F"? Mac-classification, Mac-authentication or pass-alternate mac-auth? And where do you see the message: No SPB Resource?
please look into the following:
show unp user
show unp user status
show unp user xx:xx:xx:xx:xx:xx (for both your mac at the access port)
show unp user details (is the most interesting to find the reason)

if you do not use an radius-server for the mac-authentitcation then you should delete this point in the template.
no unp port-template unp-wired-default mac-authentication

regards
Silvio

[KV_Swami]

Thank you Silvio. Will test this and revert back.