Users Cannot Communicate After VLAN Mapping Is Configured ?

This section describes the troubleshooting flowchart and provides a step-by-step troubleshooting procedure to use when users cannot communicate after VLAN mapping is configured.

Common Causes

As shown in Figure 1, users in VLAN 6 need to communicate with users in VLAN 5 over

an ISP network. The carrier assigns VLAN 10 as the stack VLAN (S-VLAN). Single-tag VLAN mapping is configured on GE0/0/1 of SwitchC and SwitchD to map customer VLANs (CVLANs) 5 and 6 to S-VLAN 10.

After VLAN mapping is configured on the interfaces, users in different VLANs cannot

communicate with each other. This fault is commonly caused by one of the following:

1 The translated VLAN (specified by map-vlan) has not been created.

2 The interfaces configured with VLAN mapping are not added to the translated VLAN.

3 The translated VLAN ID configured on SwitchC and SwitchD is different from the SVLAN ID assigned by the carrier.

4 The interfaces configured with VLAN mapping are faulty.

Troubleshooting Procedure

NOTE

Saving the results of each troubleshooting step is recommended. If troubleshooting fails to correct the fault, you will have a record of your actions to provide Huawei technical support personnel.

Procedure

Step 1 Check that the translated VLAN (specified by map-vlan) has been created.

Run the display vlan command on SwitchC and SwitchD to check whether the translated VLAN has been created.

l If the translated VLAN has not been created, run the vlan command to create it.

l If the translated VLAN has been created, go to step 2.

Step 2 Check that the interfaces configured with VLAN mapping have been added to the translated VLAN in tagged mode.

Run the display this command on the interfaces configured with VLAN mapping to check

whether the interfaces have been added to the translated VLAN in tagged mode.

NOTE

1 VLAN mapping can only be configured on a trunk or hybrid interface, and the interface must be added to the translated VLAN in tagged mode.

2 If a range of original VLANs is specified by vlan-id1 to vlan-id2 on an interface, the interface must be added to all the original VLANs in tagged mode, and the translated VLAN cannot have a VLANIF interface.

3 Limiting MAC address learning on an interface may affect N:1 VLAN mapping on the interface.

4 If the interfaces configured with VLAN mapping have not been added to the translated

VLAN in tagged mode, run the port trunk allow-pass vlan or port hybrid tagged vlan

command in the interface views to add the interfaces to the translated VLAN in tagged

mode.

5 If the interfaces have been added to the translated VLAN in tagged mode, go to step 3.

Step 3 Check that the translated VLAN ID configured on SwitchC and SwitchD is the same as the SVLAN ID assigned by the carrier.

Run the display this command on the interfaces configured with VLAN mapping to check

whether the translated VLAN ID is the same as the S-VLAN ID assigned by the carrier.

If the translated VLAN ID on an interface is different from the S-VLAN ID assigned by

the carrier, run the undo port vlan-mapping vlan command on the interface to delete the

VLAN mapping configuration, and then run the port vlan-mapping vlan command to set

the translated VLAN ID to the S-VLAN ID.

If the translated VLAN ID is the same as the S-VLAN ID assigned by the carrier, go to

step 4.

Step 4 Check that the user-side interfaces are in the C-VLANs.

Run the display vlan vlan-id command on SwitchA and SwitchB to check whether the userside interfaces are in the C-VLANs.

1 If the user-side interfaces are not in the C-VLANs, run the port trunk allow-pass vlan,

port hybrid tagged vlan, or port default vlan command to add the interfaces to the CVLANs.

2 If the user-side interfaces are in the C-VLANs, go to step 5.

Step 5 Collect the following information and contact Huawei technical support personnel.

1 Results of the preceding troubleshooting procedure

2 Configuration files, log files, and alarm files of the Switches

----End

If you want to know the more detailed Huawei switch you can visit the page: 

http://www.huanetwork.com/blog

How to Recover the BootROM Password on Huawei Switch

Huawei S2750&S5700&S6700 Series Ethernet Switches Troubleshooting: How to Recover the BootROM Password? Below will give you the answer:

The BootROM is the basis for device security and maintenance, which provides the functions such as configuration recovery and system software upgrade. You must keep the BootROM password secure. If the BootROM password is lost, you can run the reset boot password command to restore the default password and reset a password.

To reset the BootROM password through the BootROM menu, you must connect to the console port and log in to the device through the console port.

1. In any view, restore the default BootROM password Admin@huawei.com.

<HUAWEI> reset boot password

The password used to enter the boot menu by clicking Ctrl+B will be restored

To the default password, continue? [Y/N] y

Info: Succeeded in setting password of boot to "Admin@huawei.com".

NOTE

The reset boot password command is only supported by versions later than V200ROO1 (including V200ROO1). The default password for versions earlier than V200R001 is huawei9300.

2. The default password is not secure and must be changed.

You can change the BootROM password using either of the following methods:

1 Run the bootrom password change command in the system view to change the

BootROM password.

<HUAWEI> system-view

[HUAWEI] bootrom password change

Old Password: //Enter the old password (default:

Admin@huawei.com).

New Password(6 to 79 chars): //Enter a new password.

Confirm Password(6 to 79 chars): //Enter the new password again.

2 Enter 6 in the BootROM menu to change the BootROM password.

Run the reboot command to restart the device. When the message "Press Ctrl+B to

enter Boot Menu..." is displayed, press Ctrl+B and enter the default password to enter

the BootROM main menu.

BOOTROM MENU

1. Boot with default mode

2. Enter serial submenu

3. Enter startup submenu

4. Enter ethernet submenu

5. Enter filesystem submenu

6. Modify BOOTROM password

7. Clear password for console user

8. Reboot

Enter your choice(1-8):6 //Enter 6 to change the BootROM password.

Modify Bootrom password

Old password: //Enter the old BootRom password

(default: Admin@huawei.com).

New password: //Enter a new BootRom password.

Verify: //Enter the new BootRom password

again.

Save password to Flash...OK!

Save backup password to Flash...OK!

I use the switches S5700-28C-SI and S1700-28FR-2T2P-AC most time of this configuration, and works well.

Green energy-saving Ethernet switch Huawei S1700 US$272

The S1700 series enterprise switches are next-generation energy-saving Ethernet access switches. The S1700 uses high-performance hardware, which offers a wide array of features to help customers build secure, reliable, high-performance networks. The S1700 is easy to install and maintain, and is ideal for small and medium size enterprises, Internet cafes, hotels, and schools.

Huawei S1700-28FR-2T2P-AC equipment management function rich, support SNMP, WEB network management (HTTPS), DHCP-client, user password protection, such as a button to restore, in equipment maintenance, the equipment support RMON (Remote NetworkMonitoring), Syslog (log), Ping detection of /Traceroute, VCT (Virtual Cable Test) and Link Layer Discovery protocol LLDP (Link Layer Discovery Protocol).

Huawei S1700-28FR-2T2P (AC) Fast Ethernet transmission rate of 10/100Mbps, 28 port,backplane bandwidth is 12.8Gbps, packet forwarding rate: 9.6Mpps, 24 10/100Mbps adaptive Ethernet port, 2 GE port, 2 GE ports, two layer switching can realize the full wire speed.

S1700-28FR-2T2P-AC Overview

• AC Power

• Non-POE Switch

• SNMP-based Switch

Layer 2 Ethernet Switch

Port: 24 FE ports, 2 GE Electrical, 2 GE SFP

• Fan-free design

• One-key operation

• Energy Efficient Ethernet

Security features: Hardware ACL

Packet filtering based on MAC addresses

MAC address authentication

Port-based 802.1x authentication

RADIUS authentication

Port isolation

Storm suppression

Attack defense, which prevents broadcast traffic, ARP attacks, ICMP attacks, TCP attacks,worm viruses, and DoS attacks

DHCP snooping

VLAN: 4 K VLANs

Access port

Trunk port

Hybrid port

Management VLAN

Voice VLAN

S1700-28FR-2T2P-AC price: only US$272.00 on huanetwork.com, competitive price andoriginal product. Huanetwork.com wholesale Huawei Quidway S1700 series switch S1700-28FR, S1728GWR-4P-AC, S1700-28FR-2T2P, S1700-28FR-2T2P-AC, 98010460, S1700-28FR-2T2P-AC,original new Huawei S1700-28FR-2T2P-AC at competitive price. In most cases, we candeliver in 2 business days. Simply add Huawei S1700-28FR-2T2P-AC to your shopping cartfor the best price S1700-28FR-2T2P-AC. Good discount of Huawei S1700 switch, bestHuawei S1700-28FR-2T2P-AC price, save your money

About Huanetwork.com

Huanetwork.com is a world leading Huawei networking products distributor, we wholesaleoriginal new Huawei networking equipments, including Huawei switches, Huawei routers,Huaweisymantec security products, Huawei IAD, Huawei SFP and other Huawei networkingproducts

Contact information:

Telephone: +852-30501940 (Hong Kong)

Fax: +852-30501941

Email: sales@huanetwork.com (Sales Inquiries)

Address: 3/F, China Fen Hin Bld., 5 Cheung Yue St., Cheung Sha Wan, KLN., Hong Kong

Website: http://www.huanetwork.com