I have a router (ubiquity USG) and a Brocade FCX648 Layer 3 switch. (I have a second one in a stack, but that's unrelated). The end goal is to be able to connect the switch to my router, provide IPs to other ports on the VLAN, and be able to manage the switch, all from one physical port.
I've connected the router to the switch via eth 1/1/2 and set up VLAN 2 spanning all ports as untagged except 1/1/2 which is dual-mode. Then VLAN 3 for just 1/1/2, which is tagged. This, to my understanding, lets it work as tagged and untagged.
When this port is untagged only, it gets assigned an IP address, and from that IP, I can access SSH, the web portal, etc. However, when tagged (which I need, so the other ports can get IPs from the router), it is no longer assigned an IP, and when trying to manually assign one the interface says you cannot assign an IP to a tagged port.
I feel like I'm probably going about this the wrong way, so I wanted to ask for advice on how to do this, or if such a thing on one cable is even possible.
! ver 08.0.30sT7f3 ! stack unit 1 module 1 fcx-48-4x-port-management-module module 2 fcx-sfp-plus-4-port-10g-module priority 128 stack-port 1/2/1 1/2/2 stack unit 2 module 1 fcx-48-4x-port-management-module module 2 fcx-sfp-plus-4-port-10g-module stack-port 2/2/1 2/2/2 stack enable stack mac 748e.f89a.af80 ! ! ! ! vlan 1 name DEFAULT-VLAN by port ! vlan 2 name KTN by port tagged ethe 1/1/2 untagged ethe 1/1/3 to 1/1/48 ethe 2/1/1 to 2/1/48 ! vlan 3 name KTN-Tagged by port tagged ethe 1/1/2 ! vlan 4 by port ! ! ! ! ! aaa authentication web-server default local aaa authentication login default local boot sys fl sec enable super-user-password ..... enable port-config-password ..... enable read-only-password ..... ip dhcp-server server-identifier 192.168.1.1 ip dns domain-list localdomain ip dns server-address 192.168.1.1 ip forward-protocol udp bootpc ip forward-protocol udp bootps ip forward-protocol udp 1 ip router-id 192.168.1.1 ! username netadmin password ..... bootp-relay-max-hops 10 ! ! web-management https ssh access-group 10 hitless-failover enable ! ! ! ! ! ! ! interface ethernet 1/1/1 ip address 192.168.1.129 255.255.255.0 dynamic ip bootp-gateway 192.168.1.1 ! interface ethernet 1/1/2 dual-mode 2 ip helper-address 1 192.168.1.1 unicast ! ! ! access-list 10 permit host 192.168.1.128 access-list 10 permit 192.168.1.0 0.0.0.255 ! ! ! ! ! ! ! ! local-userdb userdb1 username name password pass ! end
If more info is needed, I'll be happy to provide it.