Calling All LIGHTSPEED & HP SWITCH users!

[akj5011]

Hi All,

 

I'm looking for some help with a strange issue I currently have - my network setup as follows:

 

Client>>>>HP Switch>>>>Lightspeed>>>>Router

 

Vlan 1 - Default Vlan (Client Default gateway address is 10.18.168.1)

Vlan 40 - Guest BYOD (Client Default gateway addess is 10.19.72.2) >>>10.19.72.2 is the Vlan 40 IP address.

Vlan 60 - Staff BYOD (Client Default gateway address is 10.19.88.2) >>>10.19.88.2 is the vlan 60 IP address.

 

I have a static route set on the main switch for the default gateway 10.18.168.1 - so everything that cant find its way out goes to 0.0.0.0/0 then the static route forwards it to 10.18.168.1 (the router)

 

The problem is any users on Vlan 40 or 60 do not seem to be getting filtered by the lightspeed, so users can access any website.

 

I have contacted lightspeed but they seem to think the tagged traffic is not hitting the lightspeed?

 

Does anyone have any ideas, I have tagged the port 4/12 with vlan 40 that goes out the lightspeed but it doesn't make any difference (the lightspeed is working as a bridge)? I'm just trying to get vlan 40 to work so far.

 

Here is the running config of the switch and router below:

 

 

HP Switch>>>>>

 

 

Running configuration:

 

; hpStack_WB Configuration Editor; Created on release #WB.15.11.0007

; Ver #03:12.15.0d:09

 

stacking

member 1 type "J9728A" mac-address 6cc217-0b6c00

member 2 type "J9728A" mac-address 1458d0-9b22c0

member 3 type "J9728A" mac-address 6cc217-0b9cc0

member 4 type "J9728A" mac-address 1458d0-9be100

exit

hostname "HP-Stack-2920|ITWorkshop|CabA"

trunk 2/A2 trk1 trunk

trunk 2/A1 trk2 trunk

banner motd

 

timesync sntp

sntp unicast

sntp server priority 1 10.18.168.13

sntp server priority 2 86.19.119.81

no telnet-server

web-management ssl

ip access-list extended "vlan40filter"

exit

ip access-list extended "vlan60filter"

exit

ip default-gateway 10.18.168.1

ip dns server-address priority 1 10.18.168.13

ip route 0.0.0.0 0.0.0.0 vlan 1

ip routing

interface 2/19

name "Internet Out - LightSpeed"

speed-duplex 100-full

exit

snmp-server community "public" unrestricted

oobm

ip address dhcp-bootp

member 1

ip address dhcp-bootp

exit

member 2

ip address dhcp-bootp

exit

member 3

ip address dhcp-bootp

exit

member 4

ip address dhcp-bootp

exit

exit

vlan 1

name "DEFAULT_VLAN"

no untagged 2/21,2/23-2/24

untagged

1/1-1/8,1/10-1/48,1/A1-1/A2,1/B1-1/B2,2/1-2/20,2/22,2/25-2/48,2/B1-2/B2,3/1-3/4

8,3/A1-3/A2,3/B1-3/B2,4/1-4/48,4/A1-4/A2,4/B1-4/B2,Trk1-Trk2

tagged 1/9

ip address 10.18.171.2 255.255.252.0

exit

vlan 40

name "Student + Guest BYOD"

untagged 2/21,2/23-2/24

tagged 1/43,2/19,4/9,4/11-4/13,4/15,4/19,Trk1-Trk2

ip address 10.19.72.2 255.255.248.0

ip helper-address 10.18.168.13

ip helper-address 10.18.168.14

exit

vlan 60

name "Staff BYOD"

tagged 1/43,4/9,4/11,4/13,4/15,4/19,Trk1-Trk2

ip access-group "vlan60filter" vlan

ip address 10.19.88.2 255.255.252.0

ip helper-address 10.18.168.13

ip helper-address 10.18.168.14

exit

spanning-tree Trk1 priority 4

spanning-tree Trk2 priority 4

no autorun

no dhcp config-file-update

no dhcp image-file-update

password manager

 

 

HP Router

>>>>>>>>>>>>

 

interface GigabitEthernet0/1

description LAN

bandwidth 1000000

no ip address

ip verify unicast reverse-path

duplex full

speed 100

!

interface GigabitEthernet0/1.1

bandwidth 1000000

encapsulation dot1Q 1 native

ip address 10.18.171.254 255.255.252.0

ip access-group LAN-to-LAN in

!

interface GigabitEthernet0/1.40

bandwidth 1000000

encapsulation dot1Q 40

ip address 10.19.79.254 255.255.248.0

ip access-group LAN-to-LAN in

!

interface GigabitEthernet0/1.60

encapsulation dot1Q 60

ip address 10.19.91.254 255.255.252.0

 

I'm not sure where I'm going wrong here? Could someone post me there HP switch & router config if you have the same setup please? Any help would be great.

 

 

Thanks Al