Jump to content

larry22

Members
  • Posts

    4
  • Joined

  • Last visited

Reputation

0 Neutral

About larry22

  1. Okay, so the way I have it set up now (without all those extra VLANs I'll promptly delete trying to do a stretched layer 2) is good? Is that best practice?
  2. Okay, we have a Fiber WAN now through our ISP connecting 4 schools in hub and spoke. Everything is working fine now with the config you will see below. However, this summer I want to have our 5412zl do all the routing for all the schools. The way it is set up now is that I have a 5412zl (config below) but I have a switch at each school doing routing for their school (2910al's). I'm using roughly 2-5% CPU usage on the 5412zl and I figured it would be more efficient to "dumb down" the switches at the other schools and have the 5412zl handle all the routing for all the VLANs at all the schools. As you will see, I have already set up the VLANs for all the schools and added the ip helper-address for DHCP. Before I go any farther I want to know: 1) Since none of the VLAN ports from the other schools (ABS, HES, WS) are tagged on this switch, can I add the IPs or will that screw anything up? 2) Then, when I'm ready, I can A) tag all the VLANs on the port that the ISP fiber is plugged into, B) turn off routing on all the other switches at the other schools, C) turn off the default route at each of the "core" 2910's at the other school, D) shut down VLAN9 Inter-School VLAN, and E) REMOVE all those static routes I added on the config below, correct? Here is the config: HP-E5412zl# show config Startup configuration: 128 ; J8698A Configuration Editor; Created on release #K.15.07.0008 ; Ver #02:1b.2f:36 hostname "HP-E5412zl" time timezone -300 time daylight-time-rule Continental-US-and-Canada module 1 type J9538A module 2 type J9538A module 3 type J9536A module 4 type J9154A module 5 type J9534A module 6 type J9534A module 7 type J9534A module 8 type J9534A module 9 type J9534A ip default-gateway 10.1.2.50 ip routing vlan 1 name "DEFAULT_VLAN" no untagged A1-A8,B1-B8,C1-C22,D1-D2,E1-E24,F1-F24,G1-G24,H1-H24,I1-I24 no ip address exit vlan 3 name "Mirror" untagged E1,E3 no ip address exit vlan 9 name "Inter-School" untagged I24 ip address 10.9.1.1 255.255.255.0 exit vlan 110 name "Chromebooks" ip helper-address 10.1.2.2 ip address 10.11.0.1 255.255.254.0 tagged A1-A4,A6-A8,C1-C4,G5,G13,I2,I22 exit vlan 15 name "School A Public WLAN" ip helper-address 10.1.2.2 ip address 10.15.0.1 255.255.252.0 tagged A1-A4,A6-A8,C1-C4,G5,G13,I2,I22 exit vlan 10 name "School A LAN" untagged A5,B1-B8,C5-C22,E2,E4-E24,F1-F24,G1-G4,G6-G24,H1-H24,I1,I3-I21,I23 ip helper-address 10.1.2.2 ip address 10.1.2.51 255.255.254.0 tagged A1-A4,A6-A8,C1-C4,D1-D2 exit vlan 20 name "School A Staff WLAN" untagged C1-C4,G5,I22 ip helper-address 10.1.2.2 ip address 10.2.0.1 255.255.254.0 tagged A1-A4,A6-A8,G13,I2 exit vlan 11 name "School A Student WLAN" ip helper-address 10.1.2.2 no ip address exit vlan 50 name "School C LAN" ip helper-address 10.1.2.2 no ip address exit vlan 30 name "School B LAN" ip helper-address 10.1.2.2 no ip address exit vlan 40 name "School B Staff WLAN" ip helper-address 10.1.2.2 no ip address exit vlan 60 name "School C Staff WLAN" ip helper-address 10.1.2.2 no ip address exit vlan 70 name "School D LAN" ip helper-address 10.1.2.2 no ip address exit vlan 80 name "School D Staff WLAN" ip helper-address 10.1.2.2 no ip address exit vlan 12 name "School B Student WLAN" ip helper-address 10.1.2.2 no ip address exit vlan 13 name "School C Student WLAN" ip helper-address 10.1.2.2 no ip address exit vlan 14 name "School D Student WLAN" ip helper-address 10.1.2.2 no ip address exit vlan 16 name "School B Public WLAN" ip helper-address 10.1.2.2 no ip address exit vlan 17 name "School C Public WLAN" ip helper-address 10.1.2.2 no ip address exit vlan 18 name "School D Public WLAN" ip helper-address 10.1.2.2 no ip address exit vlan 19 name "Central Office Public WLAN" ip helper-address 10.1.2.2 no ip address exit vlan 90 name "Central Office LAN" ip helper-address 10.1.2.2 no ip address exit vlan 100 name "Central Office Staff WLAN" ip helper-address 10.1.2.2 no ip address exit vlan 102 name "Central Office Student WLAN" ip helper-address 10.1.2.2 no ip address exit mirror 1 port E3 timesync sntp sntp unicast sntp server priority 1 96.47.67.105 ip route 0.0.0.0 0.0.0.0 10.1.2.50 ip route 10.3.0.0 255.255.254.0 10.9.1.3 ip route 10.4.0.0 255.255.254.0 10.9.1.3 ip route 10.5.0.0 255.255.254.0 10.9.1.2 ip route 10.6.0.0 255.255.254.0 10.9.1.2 ip route 10.7.0.0 255.255.254.0 10.9.1.4 ip route 10.8.0.0 255.255.254.0 10.9.1.4 ip route 10.9.0.0 255.255.255.0 10.9.1.5 ip route 10.10.0.0 255.255.255.0 10.9.1.5 ip route 10.10.2.0 255.255.255.0 10.9.1.5 ip route 10.12.0.0 255.255.254.0 10.9.1.3 ip route 10.13.0.0 255.255.254.0 10.9.1.2 ip route 10.14.0.0 255.255.254.0 10.9.1.4 ip route 10.16.0.0 255.255.254.0 10.9.1.3 ip route 10.17.0.0 255.255.254.0 10.9.1.2 ip route 10.18.0.0 255.255.254.0 10.9.1.4 ip route 10.19.0.0 255.255.255.0 10.9.1.5 interface A5 monitor all both mirror 1 exit interface E1 monitor all both mirror 1 exit primary-vlan 10 no autorun no dhcp config-file-update no dhcp image-file-update password manager password operator
  3. Okay, where would I add the routes (on an HP procurve). Would it be a config command? Here is the shwo config from Site B: hostname "ProCurve Switch 5304XL" snmp-server location "WS Main Closet" time timezone 420 module 3 type J4821A module 2 type J4820A module 4 type J4907A ip default-gateway 10.5.0.10 sntp server 192.43.244.18 ip routing timesync sntp sntp unicast snmp-server community "public" Unrestricted vlan 1 name "DEFAULT_VLAN" ip address dhcp-bootp no untagged B1-B24,C1-C4,D1-D16 exit vlan 50 name "WS LAN" untagged B1-B24,D1-D14 ip address 10.5.0.11 255.255.254.0 tagged C1-C4,D15-D16 exit vlan 60 name "WS WLAN" untagged C1-C4 ip address 10.6.0.1 255.255.254.0 ip helper-address 10.5.0.3 tagged D15-D16 exit ip route 0.0.0.0 0.0.0.0 10.5.0.10 primary-vlan 50 So, I would change the ip route part?
  4. Here is what our network looks like now: School A - A core switch (10.1.2.51 - Procurve 5412zl) which does all the routing Sonicwall - 10.1.2.50 where the internet comes from (into X1) Two subnets - 10.1.2.xxx (512 IPs) = wired LAN - VLAN1 10.2.1.xxx (512 IPs) = wireless LAN - VLAN30 Filter - 10.1.2.18 (filters all traffic, pretty much only adult content) Other misc. servers, etc. School B - A core switch (10.5.0.11 - Procurve 5304xl) which does all the routing Sonicwall - 10.5.0.10 where the internet comes from (into X5 for some reason) Two subnets - 10.5.0.xxx (512 IPs) = wired LAN - VLAN50 10.6.0.xxx (512 IPs) = wireless LAN - VLAN60 Other misc. servers, etc. Now, we are going to have a Fiber WAN setup between these two schools. School A will be the Hub and School B will be the spoke. Our ISP says it should be setup like a PTP between the two. Some questions: I'm going to come out of School A right into the current School B core switch bypassing the current School B firewall completely, right? Because the Firewall at School A will takeover all of that. What do I need to add to the School B core switch so that any non-School B packets (like the internet) will be passed back to School A (which the WAN will come from)? The ISP engineer also said that I needed to make sure that what was coming from School B into the School A core switch port - I had to make sure THAT port included all the subnets (something about a "on a stick")? Thanks!
×
×
  • Create New...