VLAN/HP ProCurve problem at work...

[fracmo2000]

Dont know if anybody here can help with this one, but I will try explain best I cant. Some of the folk in my work set a few VLANs to split up our flat network (2000+ machines!!!) The problem is that some of the software installed in the rooms (LogixPro/CAD)...cant talk with the server which is one the other subnet. The clients can see the server (I installed it from there, I can navigate to the share and obviously ping the server too)...but what ever protocol is being used...is getting blocked (I think).

 

I dont know enough about this subject, but the only thing I could find online was user ACL (access control lists) on the switches...but I may be wrong.

 

Any experts on this kinda thing? All thoughts welcome!

[pantscat]

Hi,

 

I'm guessing it's trying to contact a licence server perhaps?

 

First thing is to try and work out what port whatever the service running on the server is listening to.

1. Logon to the server

2. Go to a command prompt

3. Use "netstat -a -n -o" to list all the processes and ports

4. Hopefully you'll know or recognise the name of the executable and can match it to the port.

 

Next step, once you've found out the port, is to reconfigure the HP switches in that area with an additional ACL to allow traffic from the client PCs to the server on that particular port.

 

The best way to do this is to export the config to a text file - use something like "show run" from a telnet/SSH session and copy it to a text file - from here you'll be able to see the existing ACL statements and edit them or add a new one.

 

Hope this helps,

 

Ant

[fracmo2000]

What a great answer, thanks alot of taking to time help! I will try this out today and let you know how I get on. I really didnt expect such a detailed reply...especially so quickly

 

Thanks again pantscat

[ChrisH]

There's a few threads on AB tutor and getting that working across VLANs. You can probably apply that knowledge here.

[pantscat]

@fracmo2000 - Aww, gee, shucks. Don't mention it.

[fracmo2000]

Just an update for anybody else that has a similar issue, it looks like multicast must be allowed on the routers (it was turned off by the guys who installed the new layer 3 switch. As far as I can tell, it increases network traffic...so there is a thing called multicast filtering (still need to read up on that).

 

Thanks again both pantscat and ChrisH, I think Im making progress...I just need time to sit down and check the routers.

[pantscat]

Hmm - I've not really touched much on multicast stuff.

 

I know that the HP Switches have an option for turning on Multicast filtering (I think it looks at the destination IP/Mac addresses) and tries to send it to only those bits of the network that need to receive it.

 

I must admit that I don't know a lot more than that!

[paulfinlay]

You want to enable PIM to allow multicast routing. IGMP is what does the multicast filtering, you can turn it on if you find multicast is flooding the network.

[DMcCoy]

PIM may also require the advanced feature license for the Procurve devices that support it.