VLAN creation for VOIP and CCTV

[musafir05]

I have recently been made an IT Manger for a secondary school.

The school has a flat network with VOIP and CCTV system on the same network. There is a summer project to create dedicated VLANs. My problem begins here, I have not done any type of VLAN in the past. My predecessor had purchased two HP Aruba 2930f and one HP 1910 switch which arrived today. My aim is to stack the two HP Aruba 2930f and perform L3 routing. Our network uses the DHCP with address scope of 10.190.112.0 and we have smoothwall. Just need laymen step by step instructions to achieve the task.

[Jcx500]

On your l3 switch set your vlans up .then create a trunk port to your l2 switches and set your vlans up on your l2 switches

 

Also you will need to setup dhcp relay to your dhcp server.

Edited June 30, 2019 by Jcx500

[Davit2005]

As @Jcx500 pointed out

 

You will need to setup a default static route on the 2930f stack pointing to the Smoothwall this should be the gateway everything else was pointed to. And probably a static route from the smoothwall to tell it where the new vlans are been routed i.e. on the 2930f switch.

 

I have done the exact same thng at home.

 

Set up the VSF stack, when doing this with 2 switches I have found the best way is to use ports on each switch in the same link (i.e. member 1 link 1 1/25,1/26 and member 2 link 2/25,2/26) otherwise I've found there will be a huge delay in second link coming up and even a reboot of the if one link was disconnected. It also does not seem to load balalance the traffic between both the ports if they are setup with 2 links.

Only plug one of the cables in one of the VSF ports on each switch. Once the second switch has rebooted and joined the VSF domain then configure the second port on the second switch to be on the same link 1 and connect the second cable.

 

You should have something like this in your running config:

vsf

enable domain 1

member 1

type "[sWITCH MODEL]" mac-address [sWITCH MAC ADDRESS]

priority 200

link 1 1/25,1/26 # dependong on the ports you have configured

link 1 name "I-Link1_1"

exit

member 2

type "[sWITCH MODEL]" mac-address [sWITCH MAC ADDRESS]

priority 128

link 1 2/25,2/26 # dependong on the ports you have configured

link 1 name "I-Link2_1"

exit

exit

 

 

 

Set the 2930f stack to do routing i.e. ip routing

 

Set up a different network between the 2930f and the Smoothwall this could be a on tagged sub interface on the smoothwall or a spare interface if practical and you have the capacity.

 

Create the vlans on the 2930f giving each one a different subnet

 

On each vlan create a ip helper-address this should point to your DHCP server. If this is on a vlan routed on the same switch then all you need do is setup the different subnets as DHCP ranges on the DHCP server and that shoukd work. If the DHCP server has it's gateway routed elsewhere you may need some extra config.

 

You will need to setup a default static route on the 2930f stack pointing to the Smoothwall IP address that acts as the next hop. And probably a static route from the smoothwall to tell it where the new vlans are been routed i.e. on the 2930f stack.

 

You may also need to add the new vlans to firewall rules and NAT rules for them to be able to talk to the Internet where necessary.

 

It should be not much more difficult as this.

 

Once this has been done you can then configure an LACP trunk link between the 1920 and the VSF stack if you do lt create the LACP link and use 2 connections for resilience you will end up with a spanning tree loop, not good.

 

One additional thing you will need to do is configure a voice vlan on the edge switches, the DHCP range for the VOIP phones may need to have dhcp options such as tftp etc. These may already be setup for the existing range. On the 1920 I beleive you can setup the ports to autoconfigure for VOIP phones. Or alternatively do this manaully and just configure a voice vlan.

Edited July 1, 2019 by Davit2005