Hi All,
I'm looking for some help with a strange issue I currently have - my network setup as follows:
Client>>>>HP Switch>>>>Lightspeed>>>>Router
Vlan 1 - Default Vlan (Client Default gateway address is 10.18.168.1)
Vlan 40 - Guest BYOD (Client Default gateway addess is 10.19.72.2) >>>10.19.72.2 is the Vlan 40 IP address.
Vlan 60 - Staff BYOD (Client Default gateway address is 10.19.88.2) >>>10.19.88.2 is the vlan 60 IP address.
I have a static route set on the main switch for the default gateway 10.18.168.1 - so everything that cant find its way out goes to 0.0.0.0/0 then the static route forwards it to 10.18.168.1 (the router)
The problem is any users on Vlan 40 or 60 do not seem to be getting filtered by the lightspeed, so users can access any website.
I have contacted lightspeed but they seem to think the tagged traffic is not hitting the lightspeed?
Does anyone have any ideas, I have tagged the port 4/12 with vlan 40 that goes out the lightspeed but it doesn't make any difference (the lightspeed is working as a bridge)? I'm just trying to get vlan 40 to work so far.
Here is the running config of the switch and router below:
HP Switch>>>>>
Running configuration:
; hpStack_WB Configuration Editor; Created on release #WB.15.11.0007
; Ver #03:12.15.0d:09
stacking
member 1 type "J9728A" mac-address 6cc217-0b6c00
member 2 type "J9728A" mac-address 1458d0-9b22c0
member 3 type "J9728A" mac-address 6cc217-0b9cc0
member 4 type "J9728A" mac-address 1458d0-9be100
exit
hostname "HP-Stack-2920|ITWorkshop|CabA"
trunk 2/A2 trk1 trunk
trunk 2/A1 trk2 trunk
banner motd
timesync sntp
sntp unicast
sntp server priority 1 10.18.168.13
sntp server priority 2 86.19.119.81
no telnet-server
web-management ssl
ip access-list extended "vlan40filter"
exit
ip access-list extended "vlan60filter"
exit
ip default-gateway 10.18.168.1
ip dns server-address priority 1 10.18.168.13
ip route 0.0.0.0 0.0.0.0 vlan 1
ip routing
interface 2/19
name "Internet Out - LightSpeed"
speed-duplex 100-full
exit
snmp-server community "public" unrestricted
oobm
ip address dhcp-bootp
member 1
ip address dhcp-bootp
exit
member 2
ip address dhcp-bootp
exit
member 3
ip address dhcp-bootp
exit
member 4
ip address dhcp-bootp
exit
exit
vlan 1
name "DEFAULT_VLAN"
no untagged 2/21,2/23-2/24
untagged
1/1-1/8,1/10-1/48,1/A1-1/A2,1/B1-1/B2,2/1-2/20,2/22,2/25-2/48,2/B1-2/B2,3/1-3/4
8,3/A1-3/A2,3/B1-3/B2,4/1-4/48,4/A1-4/A2,4/B1-4/B2,Trk1-Trk2
tagged 1/9
ip address 10.18.171.2 255.255.252.0
exit
vlan 40
name "Student + Guest BYOD"
untagged 2/21,2/23-2/24
tagged 1/43,2/19,4/9,4/11-4/13,4/15,4/19,Trk1-Trk2
ip address 10.19.72.2 255.255.248.0
ip helper-address 10.18.168.13
ip helper-address 10.18.168.14
exit
vlan 60
name "Staff BYOD"
tagged 1/43,4/9,4/11,4/13,4/15,4/19,Trk1-Trk2
ip access-group "vlan60filter" vlan
ip address 10.19.88.2 255.255.252.0
ip helper-address 10.18.168.13
ip helper-address 10.18.168.14
exit
spanning-tree Trk1 priority 4
spanning-tree Trk2 priority 4
no autorun
no dhcp config-file-update
no dhcp image-file-update
password manager
HP Router
>>>>>>>>>>>>
interface GigabitEthernet0/1
description LAN
bandwidth 1000000
no ip address
ip verify unicast reverse-path
duplex full
speed 100
!
interface GigabitEthernet0/1.1
bandwidth 1000000
encapsulation dot1Q 1 native
ip address 10.18.171.254 255.255.252.0
ip access-group LAN-to-LAN in
!
interface GigabitEthernet0/1.40
bandwidth 1000000
encapsulation dot1Q 40
ip address 10.19.79.254 255.255.248.0
ip access-group LAN-to-LAN in
!
interface GigabitEthernet0/1.60
encapsulation dot1Q 60
ip address 10.19.91.254 255.255.252.0
I'm not sure where I'm going wrong here? Could someone post me there HP switch & router config if you have the same setup please? Any help would be great.
Thanks Al
