+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 17
Hardware Thread, Workstation VLAN Tagging in Technical; Hi I have tried to use tagging on a workstation but it still doesn't work on any other vlans apart ...
  1. #1

    Join Date
    Dec 2008
    Location
    Lancashire
    Posts
    380
    Thank Post
    28
    Thanked 6 Times in 6 Posts
    Rep Power
    13

    Workstation VLAN Tagging

    Hi

    I have tried to use tagging on a workstation but it still doesn't work on any other vlans apart from the default one.

    Has anyone else had any problems with using vlan tagging on workstations?

    Switch had the other VLAN tagged and I've added the VLAN number into the driver properties in Windows 7. Tried a Realtek card and a intel desktop CT card with no luck.

  2. #2

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    5,869
    Thank Post
    574
    Thanked 998 Times in 770 Posts
    Blog Entries
    15
    Rep Power
    461
    Assume of course it's correctly set up at the switch end? (usually just untagged to default vlan)
    And out of interest, why would you be trying set up tagging on a station? Quite unusual.

  3. #3

    Join Date
    Dec 2008
    Location
    Lancashire
    Posts
    380
    Thank Post
    28
    Thanked 6 Times in 6 Posts
    Rep Power
    13
    default vlan is untagged and additional vlan is tagged

    the PCs were originally setup for use by the community, so they used a different filtering schema than the rest of the school (it was the old ADMIN vlan supplied by CLEO). We now wish to use them for school use as well.

    So I thought it would be an easy method of setting up dual boot (community and school) so that each instance of windows was setup differently and that the school instance used the default vlan whilst the community instance used the ADMIN / additional vlan.

    the switch itself is a HP Procurve 2626 and I have tried a HP Procurve 2610-48 with the same result - it will not accept being put on the additional vlan

    when I create a vlan in either the Intel or Realtek software, it creates an additional NIC. The original NIC properties is empty whereas the additional NIC has all the usual properties, and its in there I set the IP address needed.

    I have even tried setting the additional vlan as the default, but when I try and set the vlan to the school network it doesnt pick up DHCP.


    Any other ideas you can think of to achieve the required setup? we dont want the community to have access to our school network.

    Thanks

  4. #4

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    5,869
    Thank Post
    574
    Thanked 998 Times in 770 Posts
    Blog Entries
    15
    Rep Power
    461
    I could be mistaken (and hopefully some more knowledgeable guys would correct me if so) but I would imagine a switch wouldn't know how to handle that sort of setup. As far as the switch is concerned, there's only one PC with one NIC and therefore one MAC address. By default, and certainly the case on a 2626, the switch will not do dynamic vlans therefore it'll probably get mightily confused with that sort of going on - host tables and the likes. Although it's quite possible for most filtering systems to do so by subnet/vlan, it would be easier certainly to do filtering by user/AD group which shouldn't matter what windows is installed on the system.
    I certainly wouldn't trust tagging to a workstation unless you needed to, much less so when there's multiple OS's on the same box.

  5. #5

    Join Date
    Dec 2008
    Location
    Lancashire
    Posts
    380
    Thank Post
    28
    Thanked 6 Times in 6 Posts
    Rep Power
    13
    The filtering that I wanted to use was the filtering at the ISP, so separate from AD. I thought vlan tagging was simple to use and secure.

    I might have have to implement a separate proxy server for the account for the community. Something I didn't want to do

  6. #6

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    5,869
    Thank Post
    574
    Thanked 998 Times in 770 Posts
    Blog Entries
    15
    Rep Power
    461
    More than likely. May be worth speaking to someone at the ISP (is it via your local authority?) and see if they have any ideas. Usually there would be something locally which would handle AD integration or vlan traffic.

  7. #7

    Join Date
    Dec 2008
    Location
    Lancashire
    Posts
    380
    Thank Post
    28
    Thanked 6 Times in 6 Posts
    Rep Power
    13
    Sorry, I have just got back into work today....Lancs NGfL don't support AD integration, so it looks like another internal proxy

  8. #8

    Join Date
    Oct 2005
    Location
    East Midlands
    Posts
    737
    Thank Post
    17
    Thanked 105 Times in 65 Posts
    Rep Power
    36
    Its its one PC and one NIC then you need to make sure that the NIC is capable of support vlans, you'll need to tag all the vlans that you want to use on the switch and then at the PC end enable vlan tagging. Intel cards have pro set software that allows you to do this, not sure about others.

    Ash.

  9. #9

    Join Date
    Dec 2008
    Location
    Lancashire
    Posts
    380
    Thank Post
    28
    Thanked 6 Times in 6 Posts
    Rep Power
    13
    Thanks. Both the on-board NIC and I have also tried a Intel Gigabit CT Desktop Adapter with no success. The additional VLANs were tagged on the switch but it didn't seem to work

    Quote Originally Posted by spc-rocket View Post
    Its its one PC and one NIC then you need to make sure that the NIC is capable of support vlans, you'll need to tag all the vlans that you want to use on the switch and then at the PC end enable vlan tagging. Intel cards have pro set software that allows you to do this, not sure about others.

    Ash.

  10. #10

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,046
    Thank Post
    853
    Thanked 2,668 Times in 2,265 Posts
    Blog Entries
    9
    Rep Power
    767
    One thing you could try would be 802.11x to put the machine in a van then setting a different Mac address in the driver of the second boot partition so the switch assigns it to the nessisary van.

  11. #11

    Join Date
    Dec 2008
    Location
    Lancashire
    Posts
    380
    Thank Post
    28
    Thanked 6 Times in 6 Posts
    Rep Power
    13
    You mean when changing the VLAN on the NIC, give it another MAC Address? Never tried that, but how would I know the MAC Address I give it is unique?

  12. #12

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,046
    Thank Post
    853
    Thanked 2,668 Times in 2,265 Posts
    Blog Entries
    9
    Rep Power
    767
    Quote Originally Posted by darrenmcginnis View Post
    You mean when changing the VLAN on the NIC, give it another MAC Address? Never tried that, but how would I know the MAC Address I give it is unique?
    You would not change the van on the card, the switch would assign that port to a different undated vlan when it detected it, there are stacks of Mac addresses and they only need to be unique on your local unrouted network, your chances of hitting another one are remote but you can check against a list exported from your dhcp server to make sure.

  13. #13

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,046
    Thank Post
    853
    Thanked 2,668 Times in 2,265 Posts
    Blog Entries
    9
    Rep Power
    767
    Last edited by SYNACK; 2nd September 2013 at 10:19 AM.

  14. #14

    Join Date
    Dec 2008
    Location
    Lancashire
    Posts
    380
    Thank Post
    28
    Thanked 6 Times in 6 Posts
    Rep Power
    13
    I got lost after the first post lol, I think I will go down the additional proxy route lol

  15. #15

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,046
    Thank Post
    853
    Thanked 2,668 Times in 2,265 Posts
    Blog Entries
    9
    Rep Power
    767
    Here is a way better tutorial link on setting it up with procures and 2008 NPS Configuring Dynamic VLAN assignment on ProCurve switches | integrating IT

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. BYOD VLAN - Some help with VLAN tagging please
    By robknowles in forum Wired Networks
    Replies: 1
    Last Post: 8th September 2012, 09:03 AM
  2. Replies: 0
    Last Post: 14th July 2011, 09:33 AM
  3. Replies: 38
    Last Post: 28th March 2006, 09:47 PM
  4. Replies: 13
    Last Post: 14th January 2006, 04:32 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •