+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 27 of 27
Wireless Networks Thread, Securing a New Wireless Setup!!! in Technical; so what you'll need is a static route from the VLAN to the netpilots address. I'm not familiar with the ...
  1. #16

    Domino's Avatar
    Join Date
    Oct 2006
    Location
    Bromley
    Posts
    4,168
    Thank Post
    217
    Thanked 1,280 Times in 798 Posts
    Blog Entries
    4
    Rep Power
    511
    so what you'll need is a static route from the VLAN to the netpilots address. I'm not familiar with the particular hardware so can't really tell you exactly how to do it

  2. #17

    Join Date
    Oct 2007
    Location
    Lincolnshire
    Posts
    133
    Thank Post
    0
    Thanked 22 Times in 22 Posts
    Rep Power
    17
    Athlona - we're running HP Procurves here and I'm happy to help you out, but you'll have to give more information about your current setup. Switch config and IP addresses at least.

  3. #18

    Join Date
    Nov 2007
    Location
    North Yorkshire
    Posts
    104
    Thank Post
    14
    Thanked 6 Times in 3 Posts
    Rep Power
    15
    Hi

    HP ProCurve 5406:-
    5406.jpg

    Netpilot:-
    Netpilot.jpg

    Hope this is enough?

  4. #19

    Join Date
    Oct 2007
    Location
    Lincolnshire
    Posts
    133
    Thank Post
    0
    Thanked 22 Times in 22 Posts
    Rep Power
    17
    That's good, but we also need the actual running config. If you click on the 'Diagnostics' tab on that first screen, then on the 'Configuration' button you should see it.

  5. #20

    Join Date
    Nov 2007
    Location
    North Yorkshire
    Posts
    104
    Thank Post
    14
    Thanked 6 Times in 3 Posts
    Rep Power
    15
    Hi keithu

    Please could you tell me which area of configuration you would like a screen grab off???

    5406b.jpg

  6. #21

    Join Date
    Oct 2007
    Location
    Lincolnshire
    Posts
    133
    Thank Post
    0
    Thanked 22 Times in 22 Posts
    Rep Power
    17
    In that screenshot you're on the 'Configuration' tab (top of the screen). You need to click on the 'Diagnostics' tab, which is two tabs to the right. On the screen that comes up press the 'Configuration Report' button. The text which appears in the window is what we want, but it might be a bit long for a screenshot so you may have to copy and paste it.

    It looks like this:

    Running configuration:

    ; J4819A Configuration Editor; Created on release #E.10.02

    hostname "Server Room - ProCurve 5308xl"
    snmp-server location "A55"
    max-vlans 40
    connection-rate-filter sensitivity aggressive
    mirror-port E14
    module 1 type J4878B
    module 4 type J4907A
    module 2 type J4907A
    module 3 type J4878B
    module 5 type J4907A
    module 7 type J4878B
    blah, blah, blah.....

  7. #22

    Join Date
    Nov 2007
    Location
    North Yorkshire
    Posts
    104
    Thank Post
    14
    Thanked 6 Times in 3 Posts
    Rep Power
    15
    Here it is:

    Running configuration:

    ; J8697A Configuration Editor; Created on release #K.11.63

    hostname "ProCurve Switch 5406zl"
    snmp-server location "CORE Switch"
    module 1 type J8702A
    module 2 type J8702A
    module 3 type J8705A
    trunk C21-C22 Trk30 LACP
    ip default-gateway 10.45.224.2
    snmp-server community "public" Unrestricted
    snmp-server host 10.45.224.231 "public"
    vlan 1
    name "DEFAULT_VLAN"
    untagged A1-A24,B1-B24,C1-C20,C23-C24,Trk30
    ip address 10.45.224.41 255.255.240.0
    exit
    vlan 50
    name "VLAN50"
    ip address 10.45.250.1 255.255.240.0
    tagged A12
    exit
    spanning-tree Trk30 priority 4
    password operator

  8. #23

    Join Date
    Oct 2007
    Location
    Lincolnshire
    Posts
    133
    Thank Post
    0
    Thanked 22 Times in 22 Posts
    Rep Power
    17
    That looks okay, but a couple of things jump out at me:

    In VLAN50 you've defined the gateway address as 10.45.250.1 which is in the middle of the subnet. I would put it at 10.45.240.1 which is the first address. VLAN1 is similar too, but you may have your own reasons for that. It will still work as it is of course.

    If you're testing with a laptop plugged into port A12 you'll probably want to set that port as untagged for now.

    It looks like your main problem is defining a route between the laptop/access point and your proxy. On the laptop you need to make sure that its IP address is within the VLAN50 address range and its gateway address is 10.45.250.1 (or 10.45.240.1 if you change it). On the proxy you need to define a route to the VLAN50 subnet. Unfortunately I don't know anything about this proxy. Does it run on windows? Have you got admin access?

  9. #24

    Join Date
    Nov 2007
    Location
    North Yorkshire
    Posts
    104
    Thank Post
    14
    Thanked 6 Times in 3 Posts
    Rep Power
    15
    Hi keithu many thanks for all your help, I have phoned our LA how are going to setup that static route to the proxy - vlan50...

    Thanks Again

  10. #25

    Join Date
    Oct 2007
    Location
    Lincolnshire
    Posts
    133
    Thank Post
    0
    Thanked 22 Times in 22 Posts
    Rep Power
    17
    You're welcome

    One thing you haven't mentioned is dhcp. If you want clients on vlan50 to use an existing dhcp server on vlan1 you'll have to define an 'ip helper'. To do that you log in to your switch and type the following at the command prompt:

    config
    vlan 50
    ip helper-address <dhcp server address>
    exit
    wr mem


    You'll then have to define a new dhcp scope for the vlan50 subnet on your existing dhcp server and add a static route from the dhcp server to vlan50.
    Last edited by keithu; 30th October 2008 at 11:04 AM. Reason: more info

  11. #26

    Join Date
    Nov 2007
    Location
    North Yorkshire
    Posts
    104
    Thank Post
    14
    Thanked 6 Times in 3 Posts
    Rep Power
    15
    I have created a 2nd Scope on IP 10.45.250.0 but like you have pointed out its labeled as 10.45.240.0 strange!!! I will re-do it to the 10.45.240.0... Or i am better doing the ip helper...??? As it sounds like a better idea to me...

  12. #27

    Join Date
    Oct 2007
    Location
    Lincolnshire
    Posts
    133
    Thank Post
    0
    Thanked 22 Times in 22 Posts
    Rep Power
    17
    You have to define an ip-helper as well, otherwise the dhcp request packets from vlan50 will never reach your dhcp server. Don't forget to add a static route to the dhcp server too.

SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. Wireless setup
    By marvin in forum Wireless Networks
    Replies: 2
    Last Post: 17th January 2008, 04:22 PM
  2. Wired & Wireless Securing
    By Samson in forum Wireless Networks
    Replies: 6
    Last Post: 14th August 2007, 10:47 PM
  3. Securing Printers
    By Espada in forum Windows
    Replies: 4
    Last Post: 25th January 2007, 04:49 PM
  4. Securing macs
    By TechMonkey in forum Mac
    Replies: 10
    Last Post: 1st June 2006, 03:22 PM
  5. securing wireless network
    By adamyoung in forum Wireless Networks
    Replies: 22
    Last Post: 1st February 2006, 09:26 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •