AOS config to CISCO config

[thommo41]

I have Aruba 2930M switches here, all configured and working just fine. I have a couple of CISCO SG350 switches that have come along to spoil the party!

Basically, I need to run a couple of CISCO switches in situ with our HPE Aruba kit for now. It should be easy peasy, but why is it causing me so much headache! The reason is simple, and it's my complete lack of experience with CISCO switches in terms of config around VLANs specifically. I have never been a networking guy I should add, I just get by. But most networking people know one or the other mostly, but enough of either to get by. On that note, can anybody solve this 'simple' one please?

On the Aruba kit, the config is basically something like...

**NOTE** Trk1, Trk2 are 'uplinks'. 1/1-1/4 are CCTV cameras. 1/45-1/48 are Wifi APs.

vlan 1
name "Data"
no untagged 1/1-1/4,1/45-1/48
untagged Trk1-Trk2

vlan 50
name "WIFI Access Points"
untagged 1/45-1/48
tagged Trk1-Trk2

vlan 51
name "Staff WiFi"
tagged 1/45-1/48,Trk1-Trk2

vlan 52
name "Guest WiFi"
tagged 1/45-1/48,Trk1-Trk2

vlan 53
name "CCTV"
untagged 1/1-1/4
tagged Trk1-Trk2

All fine. Easy. On CISCO kit, I cannot get it to work at all. I have the following config on the CISCO kit, I am doing something really silly I'm sure...

**NOTE** GigabitEthernet1 is an 'uplink'. GigabitEthernet2 is a WiFi AP. I have not bothered with a CCTV camera yet!

vlan database
vlan 50-53
exit
!
interface vlan 1
ip address xxxxxx
!
interface vlan 50
name "Wifi Access Points"
!
interface vlan 51
name "Staff WiFi"
!
interface vlan 52
name "Guest WiFi"
!
interface vlan 53
name CCTV
!
interface GigabitEthernet1
spanning-tree portfast
switchport mode trunk
switchport general allowed vlan add 50-53 tagged
switchport general allowed vlan add 1 untagged
switchport access vlan 53
switchport trunk allowed vlan 1,50-53
!
interface GigabitEthernet2
switchport mode trunk
switchport general allowed vlan add 51-52 tagged
switchport general allowed vlan add 50 untagged
switchport general forbidden vlan add 1,53
switchport trunk allowed vlan 50-52
!

The AP does not get an IP address (VLAN 50), so there's no hope of even getting onto dishing out Staff or Guest wifi.

Thanks in advance anybody!

[srujan_kumar]

Hi @thommo41 

The main problem is likely the combination of switchport general commands and switchport mode trunk, particularly on Cisco SG350s, which have a unique hybrid CLI design in contrast to traditional Cisco IOS.
Test the following steps:
1. Plug AP into GigabitEthernet2.
2. Ensure DHCP server on VLAN 50 is reachable over the trunk uplink.
3. Use show vlan, show interface trunk, show mac address-table to debug.
4. If the AP still doesn’t get an IP, check the DHCP server logs or try setting a static IP temporarily.

Note :

•  Do not mix switchport mode trunk and switchport mode general.
•  Use trunk for uplinks and APs if imitating Aruba.
•  Set native VLAN for the untagged VLAN (1 on uplinks, 50 on AP ports).
•  Use allowed vlan to control tagging.
  
  
  Let me know if you still have a confusion, I will walk you through the sample config steps.
  
  

  Hope this helps.!

  Regards
  Srujan_kumar