+ Post New Thread
Results 1 to 7 of 7
Wired Networks Thread, ProCurve 2910 basic VLANs in Technical; Hi fellows, Iím trying to setup some VLANs on our school network to divide the massive broadcast domain that we ...
  1. #1
    maestromasada's Avatar
    Join Date
    Apr 2009
    Posts
    166
    Thank Post
    93
    Thanked 14 Times in 13 Posts
    Rep Power
    12

    ProCurve 2910 basic VLANs

    Hi fellows,

    Iím trying to setup some VLANs on our school network to divide the massive broadcast domain that we have and got to the point where donít know exactly what to do to make it work. This is my first attempt to VLANs so feeling like walking on a black forest! Sure you can help me out with this.

    Have a HP 2910 and have setup 2 x VLANs with this running configuration:


    ; J9145A Configuration Editor; Created on release #W.14.38

    hostname "ProCurve 2910al-24G Switch"
    module 1 type J9145A
    ip default-gateway 10.8.160.1
    ip routing
    vlan 1
    name "DEFAULT_VLAN"
    untagged 9-24
    ip address 10.8.163.50 255.255.248.0
    no untagged 1-8
    exit
    vlan 100
    name "VLAN100"
    untagged 1-4
    ip address 10.10.100.1 255.255.255.0
    tagged 10
    exit
    vlan 200
    name "VLAN200"
    untagged 5-8
    ip address 10.10.200.1 255.255.255.0
    tagged 10
    exit
    snmp-server community "public" unrestricted
    password manager


    The LGfL router is 10.8.160.1 and all I want to achieve is for vlans 100 and 200 to access the internet and the servers on the default vlan, but donít want the devices on vlans 100 or 200 to be able to communicate to each other.

    At present devices on vlan100 and vlan200 cannot talk to each other, which is good, but they cannot talk to LGfL router either!
    I would have thought the ip routing command will enable this?

    Any help will be great

  2. #2

    twin--turbo's Avatar
    Join Date
    Jun 2012
    Location
    Carlisle
    Posts
    2,334
    Thank Post
    1
    Thanked 381 Times in 340 Posts
    Rep Power
    150
    The LGFL Router will have no knoledge of the routing required to reach the new vlans.

    Rob

  3. #3

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180
    For a start, you should stop using the default VLAN now that new VLANs are added.... things will break.

    You will need to set up routing tables and ACLs then between each VLAN/IP.

  4. #4
    maestromasada's Avatar
    Join Date
    Apr 2009
    Posts
    166
    Thank Post
    93
    Thanked 14 Times in 13 Posts
    Rep Power
    12
    Thank you for your great advice.

    Have contacted LGfL and they are willing to re-configure their firewall and join it to our L3 switch so that only the L3 switch takes care of the routing between the VLANs. Problem is I don't know exactly how to define the routing tables on the switch. Have been trying to do it whole morning but no joy!

    Doing an experiment, I wanted to vlan 100 and 200 to be able to talk to a server on vlan 1, but just cant' do. Please have a look at the attached image to verify my config.

    VLANs.jpg

    I have a pc on vlan 100 with an ip of 10.8.161.2/24
    I have a pic on vlan 200 with an ip of 10.8.162.2/23
    I have a server on vlan 1 with an ip of 10.8.164.80/22

    In theory, the server should be accessible by both vlans but is not. Vlans 100 and 200 cannot talk to each other which is good,
    the pc on vlan 100 is 10.8.161.2
    the pc on vlan 200 is 10.8.162.2



    See new config in the switch see if you can identify what could be the problem. As you can see the ip routing is enable!


    Running configuration:

    ; J9145A Configuration Editor; Created on release #W.14.38

    hostname "ProCurve 2910al-24G Switch"
    module 1 type J9145A
    ip routing
    vlan 1
    name "DEFAULT_VLAN"
    untagged 11-24
    ip address 10.8.160.2 255.255.248.0
    tagged 5-6
    no untagged 1-4,7-10
    exit
    vlan 100
    name "VLAN100"
    untagged 1-4
    ip address 10.8.161.1 255.255.255.0
    tagged 5-6
    exit
    vlan 200
    name "VLAN200"
    untagged 7-10
    ip address 10.8.162.1 255.255.254.0
    tagged 5-6
    exit
    snmp-server community "public" unrestricted
    password manager




    IP Routing : Enabled


    Default TTL : 64
    Arp Age : 20
    Domain Suffix :
    DNS server :

    VLAN | IP Config IP Address Subnet Mask Proxy ARP
    -------------------- + ---------- --------------- --------------- ---------
    DEFAULT_VLAN | Manual 10.8.160.2 255.255.248.0 No
    VLAN100 | Manual 10.8.161.1 255.255.255.0 No
    VLAN200 | Manual 10.8.162.1 255.255.254.0 No
    Attached Images Attached Images

  5. #5
    maestromasada's Avatar
    Join Date
    Apr 2009
    Posts
    166
    Thank Post
    93
    Thanked 14 Times in 13 Posts
    Rep Power
    12
    ups

    sorry I posted the wrong pic, this is the right one with the ports on the HP switch configured.

    VLANs.jpg

  6. #6

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,082
    Thank Post
    853
    Thanked 2,677 Times in 2,271 Posts
    Blog Entries
    9
    Rep Power
    769
    I'd setup rip on the core so that you can advertise routes back to the upstream router. That should mean that as long as you stay within the global range that you get from the upstream provider you can divide them any way you see fit internally without having to wait for the upstream people for each change.

    I think its ip routing rip
    and something to advertise static

    you need:
    Code:
    ip default-gateway (upstream router IP)
    ip routing
    
    vlan 53
       name "GuestWireless"
       ip helper-address (DHCP server IP) 
      ip address 192.168.53.1 255.255.255.0
       tagged 2,4,6,8,48
       exit
    ip route 0.0.0.0 0.0.0.0 (upstream router IP)
    router rip
       default-metric 2
       redistribute static
       exit
    
    vlan 1
       ip rip (advertising port on vlan) 
      exit
    Had to set one of these up the other day for a new Ruckus system

    you might also want to put in

    Code:
    timesync sntp
    sntp unicast
    sntp server priority 1 (Domain Controller) 3
    To set the switch up to sync to a time server (domain controller)

  7. #7

    Join Date
    May 2012
    Posts
    49
    Thank Post
    0
    Thanked 6 Times in 6 Posts
    Rep Power
    6
    Hi

    I’ve done this a couple of times and the people on the help desk at Atomwide will set you up a stub network to delivery your whole network to your local L3 switch - I know they also have done local config work within schools but that tends to be chargeable. Still if they get you going with a working config and then you take it over it’s a quick and useful lesson to have. HP switch tho … might be a bit entertaining – I’ve only really done this with cisco kit.

SHARE:
+ Post New Thread

Similar Threads

  1. Basic VLAN
    By mcnallyfc in forum Wireless Networks
    Replies: 1
    Last Post: 2nd February 2011, 01:43 PM
  2. MAC Based vlan allocation with procurve switches (11x)
    By AlexB in forum Wireless Networks
    Replies: 25
    Last Post: 21st September 2008, 05:56 PM
  3. Procurve VLAN help
    By meastaugh1 in forum Wireless Networks
    Replies: 8
    Last Post: 4th September 2008, 08:29 PM
  4. Adding vLAN not working on HP Procurve
    By mrforgetful in forum Wireless Networks
    Replies: 21
    Last Post: 2nd March 2007, 11:53 AM
  5. Changing port vLANs on an HP ProCurve switch
    By MrDylan in forum Hardware
    Replies: 6
    Last Post: 9th March 2006, 03:13 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •