Issue: Unable to access management of switch due incorrect VLAN membership on the switch ports in Switch Policy

06/24/2021 16 People found this article helpful 473,549 Views

Description

The switch will show offline in WNM and will not be able to manage even if we are on the same VLAN or directly connected. This situation will occur when the management VLAN is changed on the switch policy in WNM from default VLAN to another VLAN ID
The upstream device is on the VLAN ID (VLAN 103) to which the switch is connected. Below image shows the switch policy config page and the assignment of VLAN.
Once the respective VLAN ID is added and click on OK, the access to the switch management will be lost. The device will be shown offline. The only way to get back the access to the switch is through console access.This issue happens as the uplink from the switch to the upstream device is not tagged with the management VLAN ID. So, the uplink must be tagged on the switch with the respective VLAN ID.

Cause

This issue happens as the uplink from the switch to the upstream device is not tagged with the management VLAN ID. So, the uplink must be tagged on the switch with the respective VLAN ID

Resolution

Get console access to the switch and run below commands. These commands will tag the uplink of the switch with management VLAN.

Login to the switch and in config mode

Create vlan 103

Config t
Vlan 103
Added access port 0/1 and trunk port to vlan 103

Ports add gigabitethernet 0/1,0/26
Exit
Move to trunk port to set PVID

Interface gigabithethernet 0/26
switchport pvid 103
Exit
Move to access port to set PVID

Interface gigabitethernet 0/1
switchport pvid 103

Here in the above example the management VLAN ID is 103 and the uplink from switch is port 26.
After this the switch will be having the right management VLAN ID and switch will be able to communicate to the cloud. The switch will show online, and will have access to the management.
The right way of changing the management VLAN on the switch through WNM is, first add the respective VLAN ID in the management VLAN in ‘Switch policy’.
Then navigate to VLAN in the same policy and tag the uplink port with the management VLAN ID. Here port 26 is used as uplink port and management VLAN ID as 103.