- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
Issue: Unable to access management of switch due incorrect VLAN membership on the switch ports in Switch Policy
06/24/2021 
2 People found this article helpful
31,797 Views
Description
- The switch will show offline in WNM and will not be able to manage even if we are on the same VLAN or directly connected. This situation will occur when the management VLAN is changed on the switch policy in WNM from default VLAN to another VLAN ID
- The upstream device is on the VLAN ID (VLAN 103) to which the switch is connected. Below image shows the switch policy config page and the assignment of VLAN.
- Once the respective VLAN ID is added and click on OK, the access to the switch management will be lost. The device will be shown offline. The only way to get back the access to the switch is through console access.This issue happens as the uplink from the switch to the upstream device is not tagged with the management VLAN ID. So, the uplink must be tagged on the switch with the respective VLAN ID.
Cause
This issue happens as the uplink from the switch to the upstream device is not tagged with the management VLAN ID. So, the uplink must be tagged on the switch with the respective VLAN ID
Resolution
Get console access to the switch and run below commands. These commands will tag the uplink of the switch with management VLAN.
- Login to the switch and in config mode
- Create vlan 103
Config tVlan 103 - Added access port 0/1 and trunk port to vlan 103
Ports add gigabitethernet 0/1,0/26Exit - Move to trunk port to set PVID
Interface gigabithethernet 0/26switchport pvid 103Exit - Move to access port to set PVID
Interface gigabitethernet 0/1switchport pvid 103
- Here in the above example the management VLAN ID is 103 and the uplink from switch is port 26.
- After this the switch will be having the right management VLAN ID and switch will be able to communicate to the cloud. The switch will show online, and will have access to the management.
- The right way of changing the management VLAN on the switch through WNM is, first add the respective VLAN ID in the management VLAN in ‘Switch policy’.
- Then navigate to VLAN in the same policy and tag the uplink port with the management VLAN ID. Here port 26 is used as uplink port and management VLAN ID as 103.
Commands:
- Config t
- vlan VLAN ID
- ports add gigabitethernet 0/1,0/26
- exit
- int gigabitethernet 0/26
- switchport pvid 103
- exit
- int gigabitethernet 0/1
- switchport pvid 103
- exit
YES
NO