Odd Problem with switch dropping connection

[phreak]

Hi there,

Got a bit of an odd one. I have a network with several Vlans setup within it. Now the problem is that 2 of my switchs (HP procurve 2524) keep dropping pings and will not allow me to connect to the web interface of said switchs.
These particular switchs in question are not doing any of the Vlans. I have a HP 2510 doing that in the main cabinet. All these switchs are doing is providing connection between patch panels and the main switch. So as such they themselves have a IP address on my seperate management Vlan.

Now, if I plug myself in the switch directly I can connect to it fine, I can ping and whatnot, Even if I put myself on the Management Vlan then again, can connect with no issues. But if I switch to the main pc Vlan then it times out. Now from said Vlan I can get to another switch in the same ip range and Vlan as one of those switchs in question.
I have tried copying the config into a fresh like for like replacement but still the same problem. The drops seem to be random as well. You might get a whole page of ping replies but then it just starts dropping off, could be one or 2, could be a whole page of drops.
I have checked the firewall routing to make sure there is nothing blocking it there, but having looked at the logs after the fact I can see it passing the traffic through successfully even when I get time outs, so to my mind it is not the firewall.

I have checked the running configuration of said 2 switchs against the other switchs that are working properly and they seem almost identical apart from the IP obviously.

Any suggestions?

Oh and another oddity is that I can ping the servers that connect through the switch without any ping drops.

[themightymrp]

I had something similar a while back and I'm trying to remember what I did. Can you check whether the default gateway and route settings are set up correctly for the switch. I think mine had something to do with that

[sonofsanta]

Try clearing the ARP cache on the remote switch, it's occasionally cropped up here where certain computers can't ping certain switches, even though they seem to be working. I'd tlel you the command if I used ProCurve switches myself, but we're Comware here... should be easy enough to find out, anyway!

[phreak]

Thanks guys.

I have checked the default gateway is correct and the route tables look exactly like the other working switchs.

On the ARP note, I have cleared the ARP table but still the same problem.

[themightymrp]

Any chance you could post a dump of one of those 2 switches configs?

[phreak]

Sure. I will do that this morning

[phreak]

Here is the config dump


Startup configuration:

; J4813A Configuration Editor; Created on release #F.05.72

hostname "HP 2524 [172.16.4.88]"
snmp-server contact "itsupport@xyz.co.uk"
snmp-server location "[Server room]"
time daylight-time-rule Western-Europe
cdp run
mirror-port 24
ip default-gateway 172.16.4.3
sntp server 172.16.8.1
timesync sntp
sntp unicast
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
untagged 1-6,8-26
no ip address
no untagged 7
exit
vlan 40
name "TAG-40"
untagged 7
ip address 172.16.4.88 255.255.255.128
exit
no aaa port-access authenticator active
password manager
password operator

[phreak]

That TAG-40 is the link to the Management VLAN switch. .4.3 is the gateway that all the switch's use. And all the latest firmwares have been applied.

Let me know if you need anything else or can suggest anything.

Thanks

[themightymrp]

Am I correct in that when you are connected to any port other than 7 you cannot ping the switch?

[phreak]

You are correct sir

[themightymrp]

Looking at the config, you have the IP address for the switch set on the TAG-40 VLAN but under the DEFAULT_VLAN you have no ip address. Could you assign the switch another IP from the range and have it on that VLAN?

[phreak]

Yes, I suppose I could do that. Except all the working switch's configured the same, ie: no set ip under default Vlan.

But I will try it anyway and let you know.

[themightymrp]

Yeah I know it's not ideal, you should only need the one IP address. I'm just looking through the config on some of our HP's to see how they are set.....

[themightymrp]

I might be on to something - could I ask you to dump a config of a working switch so I can compare? My setup is slightly different in that I use the 'DEFAULT_VLAN' as the management VLAN and then the rest of the sockets are set as untagged on that areas VLAN i.e. VLAN5

[phreak]

I have tried assigning it an IP on that range on the Default Vlan through the menu interface. However, every time I try that I get an Inconsistent Value. It will only allow me to assign it an IP on a different range by the looks of it. And when I set it on the range that the servers themselves use on said Vlan I can ping it when plugged directly into the switch, however, cannot ping that new IP from anywhere else.