rbizzell Posted December 9, 2016 Posted December 9, 2016 I have 3 hp 2910 and 1 10G Netgear and currently just with the native vlan 1. I am creating vlans to segment traffic between the netgear and the HP. I will leave the native vlan 1 alone and configure new vlans. I enable ip routing on hp switch I assign ip address and subnet to each vlan I create ip routing & default route “ip route 0.0.0.0 0.0.0.0 x.x.x.x the firewall ip to the internet. I can't ping any of the vlans.
Blue_Cookeh Posted December 9, 2016 Posted December 9, 2016 Where are you trying to ping the VLANs from? Can you ping the IP of the VLAN that device is on?
rbizzell Posted December 12, 2016 Author Posted December 12, 2016 No I can't ping the IP of the VLAN!
rbizzell Posted December 12, 2016 Author Posted December 12, 2016 When I enable IP routing and and create the vlans and give them an IP address and I add the default route 0.0.0.0 0.0.0.0 and then the next hop would be my firewall IP which is on the native vlan 1 and I can't ping that or ping an ip from one of my vlan that isn't the native vlan. If I disable IP routing and add the route to the vlans I can ping a vlan IP other than the native vlan 10 192.168.10.254 I have a laptop I gave IP 192.168.10.3 IP routing disabled and add the route I can ping within that vlan but I still can't ping the nothing on the native vlan which has the internet route as well as other clients. I don't want to change native vlan because it would cause too much interruption. I want 3 vlans 10 20 30 and I am integrating a 10G netgear switch but I am trying to get the vlans working on HP before I create a trunks between those two switches to pass traffic but I can't get the HP inter-vlan routing to work. I am using HP Procurve 2910 al I am testing it on HP Procurve 2610
Davit2005 Posted December 12, 2016 Posted December 12, 2016 Check IP route to make sure you can see the route for the vlan. I have a 2910al at home and I know they can play silly b******s if you haven't untagged a port for the vlan. If anyone knows a way to get around this let me know
Techie2000 Posted December 12, 2016 Posted December 12, 2016 Have you configured your ip default gateway?
rbizzell Posted December 12, 2016 Author Posted December 12, 2016 I configured the ip default gateway. I issued this command ip routing & default route “ip route 0.0.0.0 0.0.0.0 x.x.x.x”
Techie2000 Posted December 12, 2016 Posted December 12, 2016 If you don't mind - could you post your entire config? (removing any secrets/ IP addresses you don't want making public)
rbizzell Posted December 12, 2016 Author Posted December 12, 2016 Destination Gateway VLAN Type Sub-Type Metric Dist. ------------------ --------------- ---- --------- ---------- ---------- ----- 0.0.0.0/0 172.16.0.1 1 static 1 1 127.0.0.0/8 reject static 0 250 127.0.0.1/32 lo0 connected 0 0 172.16.0.0/22 DEFAULT_VLAN 1 connected 0 0 192.168.10.0/24 172.16.0.1 1 static 1 1 192.168.20.0/24 172.16.0.1 1 static 1 1 the 192.168.10 the 192.168.20 should be in their own vlan not sure why it isn't showing in their respective vlan VLAN ID Name | Status Voice Jumbo ------- -------------------------------- + ---------- ----- ----- 1 DEFAULT_VLAN | Port-based No No 10 Virtual | Port-based No No 20 QA | Port-based No No - - - Updated - - - hostname "ProCurve Switch 2610-24" ip default-gateway 172.16.0.1 ip routing snmp-server community "public" Unrestricted vlan 1 name "DEFAULT_VLAN" untagged 1-2,4-28 ip address 172.16.0.88 255.255.252.0 tagged 3 exit vlan 10 name "Virtual" ip address 192.168.10.254 255.255.255.0 tagged 3 exit vlan 20 name "QA" ip address 192.168.20.254 255.255.255.0 exit ip route 0.0.0.0 0.0.0.0 172.16.0.1 ip route 192.168.10.0 255.255.255.0 172.16.0.1 ip route 192.168.20.0 255.255.255.0 172.16.0.1 spanning-tree
Techie2000 Posted December 12, 2016 Posted December 12, 2016 Have you missed tagging port 3 on vlan 20?
rbizzell Posted December 12, 2016 Author Posted December 12, 2016 I thought I leave it untagged within their own vlan and then tag it on the native vlan please let me know
rbizzell Posted December 12, 2016 Author Posted December 12, 2016 ; J9085A Configuration Editor; Created on release #R.11.119 hostname "ProCurve Switch 2610-24" ip default-gateway 172.16.0.1 ip routing snmp-server community "public" Unrestricted vlan 1 name "DEFAULT_VLAN" untagged 1-2,4-28 ip address 172.16.0.88 255.255.252.0 tagged 3 exit vlan 10 name "Virtual" ip address 192.168.10.254 255.255.255.0 tagged 3 exit vlan 20 name "QA" ip address 192.168.20.254 255.255.255.0 exit ip route 0.0.0.0 0.0.0.0 172.16.0.1 ip route 192.168.10.0 255.255.255.0 172.16.0.1 ip route 192.168.20.0 255.255.255.0 172.16.0.1 spanning-tree
rbizzell Posted December 12, 2016 Author Posted December 12, 2016 Any suggestions I can ping the vlan 10 and native vlan I have a laptop setup on the vlan 10 subnet but I can't ping from the switch or from the laptop ip default-gateway 172.16.0.1 ip routing snmp-server community "public" Unrestricted vlan 1 name "DEFAULT_VLAN" untagged 1-2,4-28 ip address 172.16.0.88 255.255.252.0 tagged 3 exit vlan 10 name "VM Traffic" ip address 192.168.10.254 255.255.255.0 tagged 3 exit vlan 20 name "QA Traffic" ip address 192.168.20.254 255.255.255.0 exit ip route 0.0.0.0 0.0.0.0 172.16.0.1 ip route 192.168.10.0 255.255.255.0 172.16.0.1 spanning-tree
Techie2000 Posted December 12, 2016 Posted December 12, 2016 I assume you're using your firewall as your default gateway? Are you able to ping the switch from the firewall?
Davit2005 Posted December 13, 2016 Posted December 13, 2016 (edited) Any suggestions I can ping the vlan 10 and native vlan I have a laptop setup on the vlan 10 subnet but I can't ping from the switch or from the laptop ip default-gateway 172.16.0.1 ip routing snmp-server community "public" Unrestricted vlan 1 name "DEFAULT_VLAN" untagged 1-2,4-28 ip address 172.16.0.88 255.255.252.0 tagged 3 exit vlan 10 name "VM Traffic" ip address 192.168.10.254 255.255.255.0 tagged 3 exit vlan 20 name "QA Traffic" ip address 192.168.20.254 255.255.255.0 exit ip route 0.0.0.0 0.0.0.0 172.16.0.1 ip route 192.168.10.0 255.255.255.0 172.16.0.1 spanning-tree Jus a quick few. Why have you got a route ip route 192.168.10.0 255.255.255.0 172.16.0.1 as the switch is doing ip routing and the ip address of the vlan is local on the switch, you shouldn't need to, and the next hop you have set is the firewall?? With ip routing enabled I think you find default gateway is not used. On the firewall you will need to put a routes back to the vlans via the core switch i.e. 192.168.10.0 255.255.255.0 172.16.0.88 if you need traffic to flow back to the vlans. Can you post an ip route output again after trying above. Edited December 13, 2016 by Davit2005
rbizzell Posted December 13, 2016 Author Posted December 13, 2016 So I can ping from firewall to switch. 172.16.0.0 is native Network and 192.168.0.0 is one of my new vlans. The Netgear switch has a local IP of .the native vlans 172 block the HP also has local 172 block and I want to be able to pass the vlans from 192 block across the switches and my Network. But I want to make sure that the hp routing is working correctly on hp switch
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now