Help... I need a Procurve Pro!

[Ric_]

I'm having a couple of probs configuring my procurve VLANs and could do with talking to someone. If someone could PM me their phone number I would be grateful!

[ChrisH]

I hope your doing something horribly complicated (probably knowing you ) as I will be doing mine next week and was expecting a nice easy experience like my old 3 Coms.

[DMcCoy]

Configure it from telnet. Just login via its ip and then type 'menu'. The web interface from vlan configuration is rather limited and breaks when you use any slighly different combination of features that it is expecting.

I've only done layer 2 vlans on the primary switch, although I have played around with the dynamic vlans a little. I can't move to layer 3 yet as I want to get more of the switches replaced with procurves first. Plus trying to work out vlans, subnetting, routing and 802.1x at the same time made my head hurt :P

[ChrisH]

Just doing subnetting makes my head hurt :?

[Sylv3r]

This is something I was looking to do with my procurve switches. Do anybody have any instructions / user guides on getting started.

Cheers

[Ric_]

@DMcCoy: I think it might be something to do with the vast array of options. You get tagged, untagged, off and another option IIRC. I think it is right but I'm not confident.

It does indeed make your head hurt trying to figure this out... hence why I printed out A4 pics of the switches from Visio and heavily annotated which port needed to be in which VLAN.

@ChrisH: Surely 3 VLANs isn't that complicated

[ChrisH]

You only need tagged on your links really so traffic from all the VLANs can travel accross them. So basically if one port needs to be in more than one VLAN you do it with tagging.

[projector1]

what are the benefits of vlans

[CyberNerd]

what are the benefits of vlans

you can subnet the network but still use the existing switches (and cabling with tagged vlans) rather than build another physical network around your existing iinfrastructure. Subnetting reduces broadcast traffic, increases security and improves network performance.

[Geoff]

VLAN's allow you to seperate your physical network into several logical networks. Machines on each of these logical networks cannot see each other.

[thom]

I am also having trouble understanding the difference between tagged, untagged and off.

At the moment we have a switch that could have
a phone: VLAN 61(routed to a MITEL server)
an admin pc: VLAN 2 (goes to the admin DC)
or a classroom pc : VLAN 3 (goes to the curriculum DC).
It has a fibre uplink to our core switch.

Now, I thought, for instance, that if the device connected to port 1 was a classroom PC I need to set the curriculm vlan to tagged and the uplink to tagged for all vlans.
What else needs to be set up on port 1? Should the admin and phone vlan be set up as untagged or no? What's the difference or am I thinking about this in completely the wrong way?

[DMcCoy]

Untagged - this is port based, all traffic from the port is sent to this vlan if it is untagged (no vlan support is needed by the client with this setting)

Tagged - traffic tagged by the client will be sent to the relevant vlan if it has been set to tagged.

You can not mix tagged and untagged (I guess it might be possible but it would be complicated).

I assume that off means that that vlan is not accessable to that port.

If you are setting the ports as tagged are you also configuring the clients to use that vlan?

[DMcCoy]

I've only done a little testing with the propergation of vlans from the core switch so I'm not sure about the tagging for the uplink.

If you only need to see one vlan then you can leave it on untagged and turn vlan options off on the client, or you can tag it on the vlan they will use and put the client on the correct vlan (doesn't really make any difference with access to one vlan).

When I say you can't mix them, I mean you can't really mix tagged and untagged on a single port.

[thom]

So if I want a PC to be joined to the curriculum VLAN, I can set the port to untagged for VLAN 3 and leave admin and phone as no? Correct?
There is also a Default management VLAN (1) what should I use this for?

[DMcCoy]

So if I want a PC to be joined to the curriculum VLAN, I can set the port to untagged for VLAN 3 and leave admin and phone as no? Correct?
There is also a Default management VLAN (1) what should I use this for?

Yes you can leave the others as no, all untagged traffic will go to vlan 3 from that port.

I use my managment vlan for access to the switches, but you don't need to use it for anything.