sosmrttech

I contacted HP support with this. This is part of the e-mail response: "Thank you for contacting HP Networking Support. The switch does not support the creation of different static routes based upon VLAN ID. Different static routes can be configued with metrics, which serve to specify an integer value that is associated with the route. It is used to compare a static route to routes in the IP route table from other sources to the same destination. Another parameter that can be set for static routes is the distance. This specifies the administrative distance to associate with a static route. If not specified, this value is set to a default of 1. For more on this topic, refer to “Administrative Distance” on page 5-10 of the "Multicast and Routing Guide" at http://bizsupport2.austin.hp.com/bc/docs/support/SupportManual/c02610033/c02610033.pdf The option supported by the HP Switches is Equal Cost Multipath for Static Routes, as described on page 5-30 of the same Guide. The prerequisite for ECMP is the deployment of OSPF, which is also described in the Routing Guie, beginning with page 5-46." Thanks to all for all the help and suggestions.

Any one know the CLI syntax for configuring PBR? I can't seem to find much info on it on the web. I know that I have to upgrade the firmware on the 5406 since the current one does not support PBR.

Sorry, I'm a bit rusty in Visio, but there it is.

Yes, the two ISP routers are XTM510 Watchguards. I'm trying to avoid using the Watchguard as the gateway IP in VLAN 52, 53 addresses. If I do that, I have internet connectivity on those VLANs, but then the Watchguard is doing the routing for these VLANs. I'm starting to think that the 5406 will not do what I want it to. In the GUI interface, I found a spot to enter a default gateway and it looks like it will route all VLAN traffic to that 192.168.60.1 gateway regardless of the VLAN source. I opened a case with HP network support as well. I wonder what they will come up with? I also want to start looking at PBR - Policy Based Routing. Maybe that's my ticket?

For VLAN 1 I want the next hop to be 192.168.60.1. Which is exactly what's happening. For VLAN 52, the next hop should be 192.168.52.1 For VLAN 53, the next hop should be 192.168.53.1 All the intra VLAN routing works perfectly as the default gateway for each VLAN is the 5406. However any outside access is only sent through 192.168.60.1. I'm trying to come up with something along the lines of: 0.0.0.0 0.0.0.0 192.168.60.1 for VLAN 1 0.0.0.0 0.0.0.0 192.168.52.1 for VLAN 52 0.0.0.0 0.0.0.0 192.168.53.1 for VLAN 53 This would establish a different default route based on VLAN source.

It looks like the 5406 is already doing that. Destination Gateway VLAN Type Sub-Type Metric Dist. ------------------ --------------- ---- --------- ---------- ---------- ----- 192.168.52.0/24 Wireless 52 connected 1 0 Where "Wireless" is the IP of 5406 for VLAN 52. This makes routing possible on the inside. However if the VLAN 52 needs to go outside, the 5406 routes it though the static default route (0.0.0.0/0 192.168.60.1). I can't seem to find a spot to specify default routes by VLANs.

This is the current routing table: ZULU(config)# sh ip route IP Route Entries Destination Gateway VLAN Type Sub-Type Metric Dist. ------------------ --------------- ---- --------- ---------- ---------- ----- 0.0.0.0/0 192.168.60.1 1 static 1 1 10.0.1.0/24 vMotion 11 connected 1 0 127.0.0.0/8 reject static 0 0 127.0.0.1/32 lo0 connected 1 0 192.168.1.0/24 192.168.60.253 1 static 1 1 192.168.2.0/24 192.168.60.253 1 static 1 1 192.168.3.0/24 192.168.60.253 1 static 1 1 192.168.4.0/24 192.168.60.250 1 static 1 1 192.168.5.0/24 192.168.60.253 1 static 1 1 192.168.6.0/24 192.168.60.253 1 static 1 1 192.168.7.0/24 192.168.60.253 1 static 1 1 192.168.8.0/24 192.168.60.253 1 static 1 1 192.168.9.0/24 192.168.60.253 1 static 1 1 192.168.11.0/24 192.168.60.253 1 static 1 1 192.168.34.0/24 192.168.60.4 1 static 1 1 192.168.51.0/24 Management 51 connected 1 0 192.168.52.0/24 Wireless 52 connected 1 0 192.168.53.0/24 VoIP 53 connected 1 0 192.168.54.0/24 Central Store 54 connected 1 0 192.168.55.0/24 Cameras 55 connected 1 0 192.168.60.0/24 DEFAULT_VLAN 1 connected 1 0 192.168.61.0/24 192.168.60.254 1 static 1 1 The top static route is manually entered. I can't seem to find anything in the that allows me to enter routes based on VLAN. The "connected" one were dynamically generated bt the 5406. If I try adding a static route, there is no place to specify the VLAN: ZULU(config)# ip route IP-ADDR/MASK-LENGTH Specify IP address and mask of the route destination. ZULU(config)# ip route

How would I go about implementing that? Any syntax examples would be greatly appreciated.

This is exactly how I have the non-VLAN 1 devices configured right now. The 5406 still has an IP address in VLANs 52, 53, etc, but the DHCP scope for these VLANs is serving router2's IP as the default gateway. Now I have internet access on these VLANs, but they don't talk to VLAN 1 devices. Ultimately I might have to start looking at tagging all VLANs going to router1 and forget about router2.

I have implemented a ProCurve 5406 switch as a main layer 2/3 switch on the network. It has several VLANs configured. Everything works properly except for internet access which only works for VLAN 1. There are 2 ISP routers connected to the switch. What I want is VLAN 1 to be routed through router1 and remainder of VLANs to be routed thought router2. The connection from 5406 to router1 is untagged for VLAN 1 and router1 has IP of 192.168.60.1. The connection from 5406 to router2 is tagged for all VLANs with exception VLAN 1 and router2 has IP of 192.168.52.1 for VLAN 52, 192.168.53.1 for VLAN 53, etc. All internal routing works as devices can ping the 5406 and both routers. The 5406 has the following IPs: 192.168.60.2 for VLAN 1 192.168.52.2 for VLAN 52 192.168.53.2 for VLAN 53 These are the IPs that are served as default gateways in DHCP Here's the dilemma. I have a static default route of 0.0.0.0 0.0.0.0 192.168.60.1 on the 5406. Now what the 5406 is doing is routing all traffic to the outside though router1 only. Is there a way to have default routes based on VLANs? Something along the lines of: 0.0.0.0 0.0.0.0 192.168.60.1 for VLAN 1 0.0.0.0 0.0.0.0 192.168.52.1 for VLAN 52 0.0.0.0 0.0.0.0 192.168.53.1 for VLAN 53 Any help would be greatly appreciated.