HP ProCurve - New VLAN and route

[CHiLL]

So I've created a new VLAN with the following details:

 

VLAN ID: 220

VLAN IP/Gateway: 10.22.220.1/24

 

The idea is that VPN clients connecting in via Always-On VPN will obtain a DHCP address from the 240 range (I have already configured DHCP and DNS for this range). However when I check my routing table on my core switch (HP 5406zl), all other VLANs appear in the table, apart from the new 220 VLAN. There will be no physical devices connected on this VLAN.

 

The VLAN port assignment is set to auto for all interfaces on the core switch. I'm not sure if I'm meant to change this, as other VLANs have certain interfaces tagged/untagged.

 

What am I missing?

Edited November 30, 2018 by CHiLL

[localzuk]

Can you post the relevant config from your switch?

[CHiLL]

Yeah, here it is:

 

SRV-5406-CORE-001(config)# sh running-config

 

Running configuration:

 

; J9850A Configuration Editor; Created on release #KB.15.18.0006

; Ver #09:34.6b.ff.f7.fc.7f.ff.3f.ef:f2

hostname "SRV-5406-CORE-001"

module A type j9993a

module B type j9993a

module C type j9990a

module D type j9990a

module E type j9990a

module F type j9990a

console idle-timeout 600

console idle-timeout serial-usb 600

trunk E15-E16,F15-F16 trk99 lacp

gvrp

timesync sntp

sntp unicast

sntp 30

sntp server priority 1 10.22.11.12

sntp server priority 2 10.22.11.11

no telnet-server

time daylight-time-rule western-europe

time timezone 60

no web-management

ip route 0.0.0.0 0.0.0.0 10.22.11.30

ip routing

ip multicast-routing

interface A3

name "UPLINK-10G-ICT2"

exit

interface A4

name "UPLINK-10G-ICT3"

exit

interface A5

name "UPLINK-10G-TECH0"

exit

interface A6

name "UPLINK-10G-TECH1"

exit

interface A7

name "UPLINK-10G-ADMIN"

exit

interface A8

name "UPLINK-10G-SCIENCE"

exit

interface B3

name "UPLINK-10G-ICT2"

exit

interface B4

name "UPLINK-10G-ICT3"

exit

interface B5

name "UPLINK-10G-TECH0"

exit

interface B6

name "UPLINK-10G-TECH1"

exit

interface B7

name "UPLINK-10G-ADMIN"

exit

interface B8

name "UPLINK-10G-SCIENCE"

exit

interface E1

name "AP-SR01"

exit

interface E2

name "AP-SR02"

exit

interface E3

name "AP-SR03"

exit

interface E15

name "TRK99-QNAP"

exit

interface E16

name "TRK99-QNAP"

exit

interface E19

name "DECT-AP"

exit

interface E21

name "UPLINK-1G-Library"

exit

interface E22

name "UPLINK-1G-English"

exit

interface E23

name "UPLINK-1G-SAC"

exit

interface F1

name "ASA-OUTSIDE"

exit

interface F2

name "ASA-INSIDE"

exit

interface F3

name "RUCKUS-WLC"

exit

interface F15

name "TRK99-QNAP"

exit

interface F16

name "TRK99-QNAP"

exit

interface F21

name "UPLINK-1G-Library"

exit

interface F22

name "UPLINK-1G-English"

exit

interface F23

name "UPLINK-1G-SAC"

exit

snmp-server community "public" unrestricted

oobm

ip address dhcp-bootp

exit

router pim

enable

exit

vlan 1

name "LEGACY"

no untagged E1-E14,E17-E19,F1-F14,F17-F19,Trk99

untagged A3-A8,B3-B8,C1-C24,D1-D24,E20-E24,F20-F24

tagged A1-A2,B1-B2

ip address 10.122.79.254 255.255.252.0

ip igmp

exit

vlan 2

name "Firewall"

untagged F1-F2

tagged A1-A2,B1-B2

ip address 10.22.2.1 255.255.255.0

exit

vlan 10

name "Server-Mgmt"

untagged E4-E12,F4-F10

tagged A1-A2,B1-B2

ip address 10.22.10.1 255.255.255.0

ip igmp

exit

vlan 11

name "Server"

untagged A1-A2,B1-B2,E13-E14,E17-E18,F11-F14,F17-F19,Trk99

tagged F3

ip address 10.22.11.1 255.255.255.0

ip helper-address 10.22.11.11

ip helper-address 10.22.11.12

ip igmp

ip pim-dense

ip-addr any

exit

jumbo

exit

vlan 20

name "NET-Mgmt"

ip address 10.22.20.1 255.255.255.0

ip igmp

exit

vlan 22

name "WIFI-Mgmt"

untagged E1-E3,F3

ip address 10.22.22.1 255.255.255.0

ip helper-address 10.22.11.11

ip helper-address 10.22.11.12

ip igmp

exit

vlan 30

name "Printers"

ip address 10.22.30.1 255.255.255.0

ip helper-address 10.22.11.11

ip helper-address 10.22.11.12

ip igmp

exit

vlan 31

name "Catering"

ip address 10.22.31.1 255.255.255.0

ip igmp

exit

vlan 32

name "BMS"

ip address 10.22.32.1 255.255.255.0

ip igmp

exit

vlan 34

name "CCTV"

ip address 10.22.34.1 255.255.255.0

ip igmp

exit

vlan 36

name "Display"

ip address 10.22.36.1 255.255.255.0

ip igmp

exit

vlan 40

name "IPT"

untagged E19

ip address 10.22.40.1 255.255.255.0

ip helper-address 10.22.11.11

ip helper-address 10.22.11.12

ip igmp

voice

exit

vlan 60

name "Wired-Staff"

tagged A1-A2,B1-B2,F3

ip address 10.22.60.1 255.255.252.0

ip helper-address 10.22.11.11

ip helper-address 10.22.11.12

ip helper-address 10.22.11.14

ip igmp

exit

vlan 80

name "Wired-Student"

tagged A1-A2,B1-B2,F3

ip address 10.22.80.1 255.255.252.0

ip helper-address 10.22.11.11

ip helper-address 10.22.11.12

ip helper-address 10.22.11.14

ip igmp

exit

vlan 100

name "UNAUTH"

tagged A1-A2,B1-B2,F3

ip address 10.22.100.1 255.255.252.0

ip helper-address 10.22.11.11

ip helper-address 10.22.11.12

ip helper-address 10.22.11.14

exit

vlan 160

name "WIFI-Staff"

tagged C1-C3,E1-E3,F3

ip address 10.22.160.1 255.255.252.0

ip helper-address 10.22.11.11

ip helper-address 10.22.11.12

ip igmp

exit

vlan 180

name "WIFI-Student"

tagged C1-C3,E1-E3,F3

ip address 10.22.180.1 255.255.252.0

ip helper-address 10.22.11.11

ip helper-address 10.22.11.12

ip igmp

exit

vlan 200

name "APPLE"

tagged C1-C3,E1-E3,F3

ip address 10.22.200.1 255.255.248.0

ip helper-address 10.22.11.11

ip helper-address 10.22.11.12

ip igmp

exit

vlan 220

name "VPN"

ip address 10.22.220.1 255.255.255.0

ip helper-address 10.22.11.11

ip helper-address 10.22.11.12

ip igmp

exit

vlan 240

name "BYOD"

tagged A1-A2,B1-B2,C1-C3,E1-E3,F3

ip address 10.22.240.1 255.255.248.0

ip helper-address 10.22.11.11

ip helper-address 10.22.11.12

ip igmp

exit

vlan 254

name "GUEST"

tagged C1-C3,E1-E3

ip address 10.22.254.1 255.255.255.0

ip helper-address 10.22.11.11

ip helper-address 10.22.11.12

exit

vlan 256

name "DMZ"

tagged A1-A2,B1-B2

ip address 10.22.0.1 255.255.255.0

exit

spanning-tree

spanning-tree Trk99 priority 4

spanning-tree bpdu-protection-timeout 300

no tftp server

loop-protect disable-timer 300

no autorun

no dhcp config-file-update

no dhcp image-file-update

password manager

password operator

[localzuk]

How is traffic going to be on that vlan if it isn't on any ports? Surely in order for it to work, whatever device acts as the interface for the VPN needs to be on that vlan? So, whatever the AoVPN server is?

 

I suspect it won't appear in the routing table as at the moment it isn't possible for traffic to arrive at the switch with that VLAN?

[ReBoot]

Agree with localzuk. If there are no active interfaces associated with this VLAN its probably not going to appear by default in the routing table.

 

Having a quick look at the spec for the HP 5406zl there is no mention of it supporting VPNs there is just has some basic L3 features. I'm a bit unclear as to how VPN traffic is going to be presented to the switch.