VLAN Advice - Draytek + Aruba Switch

[max_carpenter]

Evening All,

 

I am hoping for some advice around setting up VLAN's as I am either being really dumb (most likely) or something isn't right.

 

I have a Draytek 3900 router and a Aruba 2530 switch. Both reset to factory defaults for this testing. I am trying to setup 5 VLANS but for simplicity lets just start with 2 and I have disabled the others.

 

VLAN 1 - ID: 10 - Default router vlan that it comes with, setup on 192.168.1.x range and has a DHCP

VLAN 2 - ID: 200 - Created by me, It mimicks VLAN 1 in all settings other than its ip/subnet, its DHCP range and its id/name

 

I have VLAN 10 set to Tagged Ethernet 1 and VLAN 200 set to Tagged SFP 1 on the Draytek

 

On the Aruba Switch in simiplest setup I have:

 

Port 46 Tagged VLAN 10 - This is a connection to Ethernet 1 on the Draytek

Port 47 Untagged VLAN 10

Port 48 Untagged VLAN 200

Port 52 Tagged VLAN 200 - This is a connection SFP 1 on the Draytek

 

If I plug my laptop into port 47 on the Aruba I get an IP in VLAN 10 and can contact the router and internet

 

If I plug my laptop into port 48 I don't get any IP address. If I set a static in either the range of VLAN 10 or 200 I get nothing.

 

The Switch has a management interface on both VLANS.

 

I have also run the following commands on the Aruba:

interface vlan 200

ip helper-address ip.of.router.on.vlan200

 

Can someone please advise as I am tearing my hair out with this one and cannot see what I am missing.

Thanks in advance.

Edited July 25, 2021 by max_carpenter

[ronnoco]

Hi,

 

On your Aruba switch, you haven't told your uplink port (i.e. port 52) to carry traffic from your default VLAN. In your case, VLAN 10. You've only told it to carry traffic tagged for VLAN 200. I think you need to add the correct command to allow traffic untagged from VLAN10.

 

Trunk ports can only have 1 X port untagged just so you know.

 

Hope this helps.

[Davit2005]

 

If I plug my laptop into port 48 I don't get any IP address. If I set a static in either the range of VLAN 10 or 200 I get nothing.

 

Can you ping the default gateway on the DrayTek when you assign a static IP at all on vlan 200? i.e. when the laptop is plugged into a port untagged on vlan 200

 

Additionally you don't really need to define a ip helper address on vlans which have a dhcp server on them. i.e. if there is a dhcp server on vlan 200 then clients will pick up addresses from it anyway. You only need a helper address if the dhcp server is on a different subnet. Not sure they are relevant unless you are doing layer 3 routing on the switch anyway TBH.

Edited August 10, 2021 by Davit2005

[ThomL]

Hi,

 

On your Aruba switch, you haven't told your uplink port (i.e. port 52) to carry traffic from your default VLAN. In your case, VLAN 10. You've only told it to carry traffic tagged for VLAN 200. I think you need to add the correct command to allow traffic untagged from VLAN10.

 

Trunk ports can only have 1 X port untagged just so you know.

 

Hope this helps.

 

OP has multiple uplink ports at play to the Draytek, I think? so switch and draytek are connected with multiple cables - with each cable tagged to 1 vlan.