Search the Community
Showing results for tags 'vlan'.
-
Hi there, We have an interesting issue here. All the apple products(imaccs, macbooks) stop printing after about 2 weeks after they have been re-imaged but only if they are not on the same VLAN as our domain controllers. We do not use MDNS and Bonjour is disabled as well. As soon as you plug it back in to the main domain it starts printing again for about 2 weeks then it stops again. It looks like an authentication issue (Kerberos) but can't figure out what goes wrong. Using Windows 2012 R2 on the DC and Sierra 10.12.6 on the Macs Any ideas? Thanks Peter
-
Hi All, We have an issue with our Smoothwall UTM - We recently set up a VLAN for our guest wireless using the DHCP of the Smoothwall box - It works fine, except when you try to access internal resources (The school website, our exchange server etc) I tried setting up some exceptions but nothing seemed to work. Any ideas anyone? Something obvious I'm missing? -
Hello all, I'm currently planning our schools migration from an ancient flat network, to a segmented, VLAN network. We've just about settled on HP Procurves for our core and edge switches and I'm reasonably comfortable on getting the VLANS set up and routing configured, together with subnets etc. Im undecided on whether to use ACLs to secure our inter plan traffic or whether to use our existing Sophos UTM firewall to achieve similar results. Does anyone have specific experience of using Sophos UTMs to do this or is using ACLs a better option? Thanks in advance. Michael
-
Hello Everyone, We are just trialing what i thought was a great product. It installs like a dream, is super easy to use and ticks all the boxes we need. However, when using it we found that it couldn't find our wireless laptops and then discovered the broadcast / multicast settings that are needed. This doesn't work for a few reasons, a) we have 5 vlans, student desktop/wireless, staff desktop/wireless and server network. so straight away the 3 network options means we cant run it on all 5 vlans b) Broadcast traffic, it says in a manual I have been sent that my managed switches need to be configured to allow this traffic. Are you for real? Do i need to change all my switches for your software to work? c) If I am a techie who wants to use the tool for remote access I can use channel 0 (great stuff) but the the above vlan issue will stop it working how i need it to. Now I am wondering if I am completly wrong about all this and there is something I am missing, if anyone works in environment where you have this working, working well in a managed switch VLAN environment please let me know how you overcame these issues. Thanks Matt -
Hi guys, I'm after some advice on setting up a VLAN for wireless guest access. My network is currently flat with approx 600 devices, so there is quite a lot of broadcast traffic. I've been thinking about implementing VLANs for a while. I'm aware of how they work, but I'm not quite sure on the specifics of setting up the switches here to make it all work. In the main we have 3com 4400 switches at the edge and 3com 5500g-ei switches at the core. I think this is all we need to make VLANs work across switches and with some kind of routing. I would like to setup a VLAN for guest access with Ruckus and seperate VLAN for standard wireless. I'm aware ruckus can do guess access wihout VLANs but I don't like the idea of my DNS and DHCP being contaminated with devices I don't control. Am I correct in thinking that this can be done by changing the ports used by WAPs to be members of multiple VLANs (a trunk port?) assigning the SSIDs to VLANS in ruckus, then trunking the uplink, and setting up the VLAN on the core switch. Then to change the config on the core 3com 5500 switch; my understanding is: define the VLANs and what ip address ranges each have set the ports VLAN memberships setup dhcp forwarder Do I need to setup rules (ACL?) to forward dns, etc? Does anyone know of the CLI commands to set it up? I've downloaded the reference guide but I don't really want to experiment with the core switch. I would also need to setup a dhcp range on the server and dns scopes Have I missed anything? Thanks for any assistance you can provide
-
Hi, I have a 3com 5500EI switch at the core of my network that is set as the gateway device. I have set up an additional VLAN and configured it on all the other switches. I can access devices across VLANs with the default settings. I want to use the new VLAN for guest access and keep the original VLAN for normal LAN Does anyone know how to stop the routing between VLANs while allowing 2 ips from the guest to the LAN (for authentication of wireless and internet) and forwarding on the the ISP router? I know you do it using telnet, but have no idea of the necessary commands, or the order to run them. Thanks,
-
At my schools the generic network is vlan 1, servers and managment vlan 20 and wireless vlan 100. right now they are static vlans. We are a 100% hp procurve shop. 5406 core, 3500ly edge I could use some advice on "laptop mobile lab carts". we purchased 8 and they have our ap installed in them. so a teacher can check one out, take it to class plug in the carts network jack and power, off they go. so inorder for the ap in the cart to get vlan 100, i either tag all ports on all switches in vlan 100 or use gvrp (read this is a possible nightmare) or other (not sure of any other option). i don't see an issue with tagging everything vlan 100, destops will continue to operate on vlan 1 and ignore the tagged traffic. But does anyone have any other suggestion? Thanks!
-
We have a strange problem. Computers on non-default VLANs take a long time to process Computer Settings policies. It also takes a long time to go from the log on box to showing the desktop when a user logs in. It can take as long as five minutes from power up to a full log on. After a user has logged in there doesn’t appear to be further problems with network speed. Access to the file shares or networked printers is at normal speeds. There are no unusual slowdowns when accessing the Internet. In fact if the computer was not on the domain you would not notice there was a speed problem at all. Computers on the default VLAN act like normal domain clients with no slow downs during start up or during login. Can’t see what we have missed. Should there be such a big difference in the operation of domain clients on different VLANs? Any ideas? TIA.
-
Hello, Possibly in the summer I'm going to look at purchasing a HP ProCurve 5412zl switch as our core switch. With that I'm interested in configuring VLANs. I've been thinking about this and have come up with a possible setup - I'm wondering what people think who have setup VLAN's in the past 1 - Default VLAN (limited access - enough to add computers onto the domain basically) 2 - VLAN for authenticated domain stations via LAN via 802.1x (i.e. added to our AD) 3 - VLAN for authenticated domain stations via Wireless 4 - VLAN for 3rd party computers (i.e. students laptops for example) to have limited access to the domain (web browsing, internal vle etc and my docs) 5 - VLAN for servers 6 - VLAN for management consoles (switches, WAP's etc) 7 - VLAN for Printers and other network peripherals Then in the future VLAN's specifically for telephony, video systems etc Then with our wireless network (for which I may purchase the procurve wireless management module) to have three SSIDS 1 - SSID for authenticated domain computers (802.1x) 2 - SSID For authenticated computers (for school machines that don't support 802.1x - i.e. our PDA's etc) 3 - SSID for Open Access (but secure encyption) to the VLAN network for 3rd party machines. Thanks, Rob
-
I'm looking to setup an always on VPN service for our staff laptops. However, I'd prefer the VPN Server to reside on an isolated network as is best practice. Our firewall is provided by Exa via Link2ICT and is fully managed. I've asked if it's possible for a VLAN to be created on the Exa router and it to be isolated from the rest of the network. They've said an additional VLAN can be created in a different range, however it's not possible for it to be isolated i.e traffic would be free to flow between the subnets which the defeats the purpose of this. I've been given the option of the VLAN or a /30 point to point layer 3 link and handling the routing ourselves (something which I'm not particularly comfortable with) Has anybody had any experience with this type of scenario?, I would approach Exa support directly however, Link2ICT has an agreement with them and so we can't contact them directly Any help is greatly appreciated
-
Hi all, I consilidated two switches into a stack. both have multiple VLANS and I'll give an example here; sw1 vl 2, 3, 4 sw2 v 12, 3, 4, 5 I decided to re-use sw1 and keep the config and wiped sw2 and stacked. So far so good. After configuring the uplink trunk to allow vl's 12 and 5 this is what happens vl5 works fine vl12 picks up an IP address but can't go anwhere, can't ping the default gateway etc. It can ping other devices on the same switch stack. So conclusion is DHCP is fine as it uses broadcast any vl traffic for vl12 isn't leaving the switch. I can't see any reason why I've checked for relevant ACL's both on the edge switch and the core switch. These are all Cisco switches. Can anybody think of what I'm missing?
-
Hi, I am trying to set up a vlan on a ProCurve 1800-24G and i am really getting lost with it. I have setup a new vlan and added the two ports i would like on that vlan, i have also removed them from the default vlan. Next i have set the PVID of the two ports to the new vlan but i can still ping this from other ports on the switch that are not on the vlan, i thought having it on a separate vlan would not allow it to be pinged, am i missing something? any help would be appreciated.
-
Hi, Can anyone please help/advise. We are moving from a flat network to VLANed. Our normal range IP is 10.50.*.* We have now set-up all our additional VLANs for cameras, BYOD, doors, Printers, etc on the 192.168.0/1/2/3.* range. This is all working well. ACLs are in place etc. I am now a little confused on how we will move all our PCs/Servers from the default VLAN to the "SCHOOL NETWORK" Vlan? Obviously I do not want to chnage IPs on devices. But im confused on th fastest way to do this. What would the original switches IPs be?. They are currently on the 10.50.*.* range. Would we need to set-up a management VLAN? Could this be done one one day where staff aren't in? Or is this going to have to involve us walking around with COM/Cat5 cables to each switch? Thanks in advance! -
Hi, our school has run-out of IP address ( 123.123.123.x/24 ) so the LA gave us a new scope (456.456.456.x/24). I added this new scope to our Win2008R2 DHCP server but the new scope didn't issue any IPs, I went back to the LA and got this reply:- The switch ports need to be configured into the correct vlan on the switches. I'll need the switch port numbers and the addresses/name of the switches they are connected to and I could do it for you. I don't remember this being necessary in the past (at other schools), so I asked another engineer at the LA and he said both scopes (new & old) needed to be in a super scope, I configured the super-scope and both scopes issued IPs, however the computers receiving IPs from the new scope were unable to see the server shares and connect to the internet. Does anyone know where I'm going wrong? Is the first LA engineer correct and he needs switch info? Thanks TraineeGeek
-
Hi All, I was wondering if anyone has experienced anything similar and can give me a few pointers. We are currently experiencing bleeding between some of our VLANs (Specifically traffic from one of our WLAN on Meru is bleeding onto our curriculum VLAN) This is causing an intermittent connection to our smoothie box/gateway. I 'm looking down the route of ARP tables and ARP flux but I don't feel like i'm making progress (Not very knowledgeable about this area) Our switches are currently a mix of managed layer 3 HP and some very old 3com switches which I really want to bin completely but y'know... Money Cheers guys S
-
Hi All, Really new to this stuff so please bear with me. We have just taken delivery of four Dell tablets, supplied by Live Register, that are to be used as mobile tills for catering. They have come pre-installed with the necessary software, all I need to do is connect them to the relevant VLAN so they can talk to the catering server and then we can get LR to do the final config. They need to have static IP addresses in the same range and settings as our static tills - the only difference is the WiFi - we've never connected the cashless catering stuff wirelessly. I've done the following: On our WiFi controller (A Meru MC4200) 1) Configured a VLAN with the same number as the catering VLAN on our switches and the same IP settings as far as Default Gateway, IP Address and Subnet Mask are concerned. 2) Configured a security profile with no requirements for passwords etc so I can test stuff easily 3) Set up the SSID to look at the configured VLAN of choice. If I set the wifi adapter of one of the tills to one of the chosen static addresses the device seems to connect (there is no internet connection but this is the case with the other static tills as the system only connects over the internet via the server). Problem is the mobile till will not ping anything, gateway, server other static tills once connected. It can ping itself. Nothing can ping out to the till either. As the network settings are identical to the static tills aside from the fact the static tills are cabled and the mobile tills are not I'm guessing there is something in the WiFi config that I have missed. It's probably pretty basic. Any suggestions?
-
Hi All, I want to VLAN my HP switches so i can make a guest wi-fi. All the switch's were installed before i started working in my school so i have no documentation. I have found there IP addresses in DHCP but this doesn't give me a clue where they are psychically! I see they have a serial port with console written under neath. Does anyone know how to access the management console on a HP Procurve 2425 with a serial cable on a windows 7 machine? Thank you for any help.
-
Hello all, Started work at a new school yesterday and have inherited a lot of outstanding issues. One of them is a virtual Linux server that has broken and now not working as an SMTP relay. I have never used Linux so trying to resolve will be very difficult. At my old establishment, we simply used smtp.Gmail.com but there were no VLANS in place. All printers are on a a vlan at the new school and the routing is handled by virtual nics on a Smoothwall appliance. If I were to use smtp.Microsoft.com - would it automatically route or is this why there is the need for the Linux vm acting as a relay? We don't scan a huge volume and I just wondered before I tried to work out the settings if its feasible. I haven't got much experience of VLANS. Any help wouid be much appreciated as I'm very busy at the moment!
-
Hello, We currently have a mix of XP/7 clients running the latest version of Reflector. We also have a Ruckus wireless system which has been divided in to three vlans; admin (vlan1), student (vlan2) and guest (vlan3). iPads/iPhones seem to work ok on the admin wireless system as they reside on the same vlan as the wired clients, although the app is extremely slow for certain devices (ipad2) and fine for others (iphone5) regardless of settings. The app also crashes when we try to airplay full screen videos’. With these issues set aside we have the main problem of not being able to connect to the reflector app from any other wireless SSID. Our Ruckus controller has been upgraded to the latest version (9.7.0.0 build 220) and we have applied the following settings: The bonjour gateway service has been enabled to bridge airplay traffic from vlan1 > vlan2 Client isolation has been disabled Multicast filter has been disabled 802.11d support has been enabled When connected to the student wireless system (vlan2) we can see that the airplay service is being advertised correctly from the client machine (vlan1) and we are prompted for the password when we try to connect. Once connected, the blue bar appears at the top of the screen indicating that mirroring is active, but nothing happens. 20-30 seconds later, the blue bar disappears and airplay is no longer enabled on the device. We have disabled windows firewall and antivirus products but to no avail. Any help would be appreciated. Thank you
-
Hello Everyone, I’d like to get staff & pupils on different IP ranges because using devolved web filtering I can set different levels of filtering for different IP ranges. We already have 3 VLANs setup on our CISCO POP3 (Catalyst 3550) switch, done by the LA. Our admin machines (3) use the admin VLAN (10.121.77.0/24) and their workstations have a static IP config. Both staff and pupils are on 10.74.68.0 -10.74.69.255), I’d like to have our pupils on the 10.74.68.0/23 range and the teaching staff on the 10.74.30.0/24 range but I’m unsure of the following:- 1) Create VLANS 2) Do we have the correct hardware 3) How to issue DHCP to each VLAN (I Am able to give each WLAN a VLAN number though)? 4) If the teaching staff are on 10.74.30.0/24 how will they be routed through to 10.74.68.0/23? 5) Our AppleTV devices will probably be on 10.74.30.0/24 how will pupil ipads connect to them via AirPlay? A basic diagram.
-
I'm trying to get my head around VLANs in order to get a suitable BYOD system going. I've given up with wpad and pac as I think it'll end up with a queue at our door each lesson. I want to have a proper go at this next week (half term), but had a preliminary look yesterday and last night and am even more confused now than I was before - it's entirely possible that I've fundamentally misunderstood something here! Our Ruckus system sends out two WLANs for our stuff here (one for our laptops etc whose key rarely changes, and one for stuff such as staff phones whose key does change periodically). There are currently no (well, one, I suppose) VLANs; I haven't configured any - everything is set to VLAN1 and PVID1 as it came out of the box. I'm adding another WLAN, with AD Authentication, for pupil BYOD. Ruckus appears to be able to add a VLAN tag to traffic from a particular WLAN, so I'm setting the BYOD to VLAN2. So far I think I'm ok - now comes the sketchy bit that I need to check; please can someone confirm that the logic here is correct before I break my network (we have Netgear FSM726 switches if that helps / makes a difference)? I have a Smoothwall transparent proxy to sit between the VLANs, provide DHCP for the BYOD, and send everything to the LEA proxy; so I need the "green" connected to VLAN2 (that is a port with a PVID set to 2) and the "Red" connected to VLAN1 (like everything else on the network is at the moment)? The port that the access point comes into the switch on needs to be a trunk, as it carries traffic on both VLANs, as do all the connections between switches that carry BYOD traffic? Does the zonedirector need a trunk as well or does the traffic go straight from the AP into the network? Here's a diagram of what I'm trying to do in case it's easier (just one switch shown here) Now, to muddy the waters somewhat, I tried setting that up last night, setting green to 10.x.x.6 and red to 10.x.x.7 . before fiddling with any switch port settings. With my workstation connected to the same switch (wired) I set off a ping, pinging both addresses and another which is an-other server. When I changed the PVID of the green port on the switch, I was expecting to stop getting pings back from it, but I expected the red to carry on replying; but they both stopped... "an-other" kept going - reversibly and reproducably - what's going on there please? Many thanks!
-
Hi I want to create a guest network and arent sure which way to go about it. We currently have multiple access points D-Link DWL-8600AP and a D-Link 3024L Controller. The access points are across the network and connected to different switches in different rooms. The controller is in a central cabinet along with the main network core switch. At the moment we have one SSID secured with WPA which is used by internal laptops. My question is how would I go about creating a guest SSID and VLAN it so that the guest traffic is routed to the router remembering that the router is in another cabinet than the core switch and the access points are also connected to multiple switches in different locations. Is that at all possible? Any help appreciated.
-
Hi, hope someone is able to help me out with this setup. I have been given the task of using HDMI over Ethernet to display a video on a television screen in the main reception of our small business. I went with the ESYNiC 120m HDbitT HDMI Extender Ethernet Network Extender option as it supported being distributed over switches. I purchased the NETGEAR GS108E-300UKS and went with the recommendation of assigning the ports to a VLAN (VLAN 3), with ports 5 on the respective switches tagged (1x in reception, 1x in Server room). I additionally setup a VLAN 2 whereby ports 2 and 3 tagged. The rest of the ports are disabled. However, when I'm connecting it, both switches are plugged in and VLAN 2 appears to communicate fine. However, VLAN 3 can't communicate with the sender device in the Server room. There is one port patched in the room, which is connected to an unmanaged switch which is fed off VLAN 2. By my basic understanding of Layer 2 switches, the nodes cannot communicate through VLANS, this is an advantage of layer three? We cannot afford layer three switches, or anything above what we have already bought. I understand my setup won't work as the only uplink for the switch is on VLAN 2 and thus won't communicate. These switches are "SMART" meaning they are configurable via a Web browser. I have been using the 802.1Q VLAN setup option. Is there an option on these switches to configure a, say "master" uplink for all VLANS? Or am I barking up the wrong tree? Does anyone have these switches, or can provide me with a resolution? We are really short of cash, and need the switch in reception to serve computers, it cannot be directly patched. As soon as we connect the HDMI extender to VLAN 2 we get an image however the data floods the network and thus knocks off the Wireless. In simple terms, I want to use the switches we've got and use port 5 for HDMI (VLAN 3), ports 2,3 and 4 I want to use for two computers in our reception, on VLAN 2. Cheers for the info you provide. We are a small business and I don't work there full time. I hope we have all the equipment we need? Appreciate any guidance. -
I would like some advice on suitable simple software for network switch management. I only want the basics, automatic detection of switches, network map (with ports used for interconnect), and VLANs. We only have 35 switches (all HP), but we are running vlans, so software to make sure I configure the vlans correctly would be more that useful. I have been trialling (60 day trail) HP IMC, I am very disappointed with the software, we are running HP switches, and I cannot get the software to find all of our HP switches, never mind the stacked pair of HP 3500yl-24G that is the central routing switch.
-
I've just started working in a school with a Ruckus wifi network. They have HP ProCurve switches throughout, but they had a company in over the Summer to re-cable their core switch and tidy up their server room cab. They have various DHCP scopes set up for each VLAN, but since the re-cabling, no devices connected to any of the SSIDs can get an IP address, unless the SSID is moved onto the default VLAN (ID 1). For Example, on the switch I have got: vlan 30 name "Wifi_Staff" tagged A1-A3,A5,A9,A13,A19,A21,B3,B19-B20,C1,C24,D10-D11,E1-E3,F1-F4,F12,F2 ip address 10.56.131.1 255.255.255.128 ip helper-address 10.56.132.10 The DHCP server is 10.56.132.10 On Ruckus I have a 'Staff' SSID with the VLAN ID set within advanced options. Access VLAN VLAN ID:30 If I try to connect to the SSID, I can't get an IP address. If I change the VLAN ID back to 1 (default VLAN) it connects fine. The problem is that we soon run out of IP addresses when we put all the SSIDs onto the default VLAN. I have different scopes set in DHCP with the router within scope options for each set as the IP address of the associated VLAN. This all worked fine before the recabling, now it's only the scope for the default VLAN which dishes out any IP adresses. The scope is the only one without a router IP address set. I'm not sure where to begin the troubleshooting, any ideas? I guess the VLANs are all messed up somehow, maybe cables weren't plugged back into the right ports on the switch? Any help would be greatly appreciated!
