This should be very simple but it isn't working for me.
I am trying to get 2 VLANs setup on a 1238 17.08.02.00
VLAN1 is data and VLAN 2 is for voice.
DHCP is provided to both VLANs by the switch.
Connected to a Watch Guard
Port 1 is VLAN 1 on both the switch and WG
Port 2 is VLAN 2 on Both the Switch and WG
The switch sees the Yeahlink phones via LLDP and I see they are in deed assigned to VLAN 2 (via MAC forwarding table).
I have assigned static settings to each phone and everything works fine.
When I set the phones for DHCP, they never get DHCP though, (Everything on VLAN1 does)
When I enable the VLAN2 interface and assign an IP address, The phones then grab DHCP, however the Adtran becomes unreachable, I lose internet connectivity on my LAN, and can't pull an IP address on Computer.
!
!
! ADTRAN, Inc. OS version 17.08.02.00
! Boot ROM version 17.03.02.SB
! Platform: NetVanta 1238 PoE, part number 1700599G1
!
!
clock timezone -8
ip default-gateway 192.168.100.249 (This is the interface 1 on the Watchguad)
!
no auto-config
!
event-history on
no logging forwarding
no logging email
!
service password-encryption
!
!
!
!
aaa authentication login default local
!
!
!
!
no dot11ap access-point-control
!
!
!
ip dhcp-server excluded-address 192.168.100.1 192.168.100.100
ip dhcp-server excluded-address 192.168.100.200 192.168.100.255
ip dhcp-server excluded-address 192.168.99.1 192.168.99.199
ip dhcp-server excluded-address 192.168.99.220 192.168.99.255
!
ip dhcp-server pool "Data VLAN"
network 192.168.100.0 255.255.255.0
dns-server 75.75.76.76 75.75.75.75 8.8.8.8
default-router 192.168.100.249 (This is the interface 1 on the Watchguad)
!
ip dhcp-server pool "Voice VLAN"
network 192.168.99.0 255.255.255.0
dns-server 75.75.75.75 8.8.8.8 75.75.76.76
default-router 192.168.99.100 (This is the interface 2 on the Watchguad)
!
spanning-tree edgeport bpduguard default
!
!
!
vlan 1
name "Default"
!
vlan 2
name "VOICE_VLAN"
!
interface switchport 0/X (typical of all ports except switchport 2 which as only VLAN 2 membership)
spanning-tree bpduguard enable
spanning-tree edgeport
no shutdown
switchport voice vlan 2
!
!
!
interface vlan 1
description DATA-VLAN
ip address 192.168.100.222 255.255.255.0
no shutdown
!
no ip tftp server
no ip tftp server overwrite
ip http server
ip http secure-server
no ip snmp agent
no ip ftp server
ip ftp server default-filesystem flash
no ip scp server
no ip sntp server
!
!
!
!
!
!
!
!
!
line con 0
login local-userlist
!
line telnet 0 4
login local-userlist
password encrypted xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
no shutdown
line ssh 0 4
login local-userlist
no shutdown
!
sntp server 192.168.99.10
!
!
!
!
end
I don't think this will work. The old version (G1) of the 1238 doesn't support routing or IPs on more than one VLAN interface. I don't think it can service a DHCP scope on a subnet for which it doesn't have an IP. Certainly a renewal couldn't take place because that requires a unicast to the DHCP server's IP, which it doesn't have for VLAN 2. Why don't you allow the Watchguard provide DHCP. A switch isn't a great device for that - limited DHCP features.