VLAN Tagging On A HP Procurve?
Jul 29, 2012
Unfortunately I do not remember the model and the switch is a couple of hours away without remote access.I have 4 vlans on a procurve switch.
VLAN1 - Network Devices (Server, printers, WAPs)
VLAN100 - Admin (Office workers)
VLAN200 - Teachers
VLAN300 - Students
There is a server doing DHCP. There are 4 ranges of IPs 1 for each VLAN.
The router is on Port 44. VLAN 1, 100, 200, 300 - Tagged
The Server is on Port 46. VLAN 1 - Untagged
The WAPs are on Ports 1, 11, 31 VLAN 1, 100, 200, 300 - Tagged
All other ports are on VLANs 100, 200 or 300 - Untagged
The WAPs all have VLANs 100, 200, 300. Each VLAN on a different SSID.
I have IP helper with the server IP on VLANs 100, 200, 300.
There are IPs from the different subnets on their respective VLANs in the switch.
The gateway for each subnet is on a different subinterface on the router.
The router is a linux box. (Untangle)
The WAPs are not able to talk to the server, therefore no computers on the wireless networks can get an IP.The server can only talk to the router if I change port 44 to untagged.What combination of tagged and untagged ports do I need to make everything talk?
Do I need to put the VLANs on the subinterfaces of the router?
View 1 Replies
ADVERTISEMENT
Nov 23, 2011
We are having one HP core switch and VLAN is configured on it. Four Nortel BES1010(24port) switches will be connected to this HP switch. We need to configure the VLAN tagging in the Nortel switches in order to make deices connected to nortel switches can communicate with devices in the VLAN.
View 3 Replies
View Related
May 18, 2011
I need some assistance in setting up VLAN's (802.1Q) accross two switchs, I want the same 2 vlan's on both switchs, how do i configure them to be connected and pass both vlan's traffic.VLANs from firewall are tagged at 3 and 8.Single port out from the firewall.The first switch is simple enough, port is connect at port 52 and configured from both vlan's then the individual ports are either on one or the other. The question is how do i connect the second switch so that it can also do both vlans. Assume I connect switch1 at port 51 to switch 2 port 52. Do I configure both ports to be on the same VLAN's. or do i setup LAG's.
View 3 Replies
View Related
Aug 19, 2011
I am currently tasked with setting up a network, pretty much from scratch, that requires some fairly hefty VLAN deployment. My hardware on hand (already existed so can't can't change anything easily) 5x ESW-540-48 Switches, 1x3750g switch, 1x2811 router. I don't believe the router should be required as the 3750 is capable of intervlan routing. [code]
Now at one point I actually had the VLAN's *working* in that I could specify an IP address and could ping to and from it! However DHCP wasn't passing despite numerous attempts with DHCP relay and IP-Helper configurations.Also I was having issues with VLAN 1 as the native VLAN, the ESW switches don't allow you to do much with them, as they 'weren't created by the user'. So tried switching that out to VLAN11 also but with very little success there (I had to change the native vlan on all trunks to VLAN 11)All the 10.x.x.x addresses need to be able to communicate with each other.All the ESW switches need to be able to handle their respective VLAN's as well as VLAN 1 (for Printers and wireless access points distributed around the building).
View 16 Replies
View Related
Sep 28, 2012
I'm Confused from the fact that Vlan tagging is done at access port and trunk port always gets tagged packets (untill its case of native vlan).But I still believe in other fact which says tagging happen only when a frame hit the trunk port which means trunk port gets untagged frame and tagging is not possible at access port.
Would like to know where actually this tagging happens ?
and also which command we can use to encapsulate 802.1q protocol to access port ? The way we do at trunk port is #switchport trunk encapsulation dot1q Is the above command applicable for access mode also?
View 6 Replies
View Related
Feb 13, 2012
I have a sf300 with (2) vlans (1) ] vlan for data and vlan (100) is my voice vlan I have Vlan (100) tagged traffic, and my VoIP pbx as an access port only to vlan (100) all other ports are trunk ports with vlan (100) tagged and vlan (1) untagged traffic. I get no outbound audio on calls I can call out hear them fine they cant hear me. I am wondering if my tagged traffic leaving the phone is being striped and if so were. I have CDP turned off.
View 1 Replies
View Related
Feb 14, 2012
I rencently bought the E4200v1 router, to be wired together with my WRT610nv2 to form gigabit network for different floor network.However with the recent installation of fiber to home network offered by my local ISP, I would need router that capable for performing vlan tagging (500 for internet & 600 for IPTV).Would like to know if Cisco have any development plan to enable the VLAN option for:-
1. E4200
2. WRT610nv2
At the moment, I'm still stuck with the provider "home-made" router which lacks of Gigabit & dual band wireless.
View 9 Replies
View Related
Jun 13, 2013
We are trying to replace the CSS between our firewall and DMZ with a BigIP. Among it's other functions, it will act as the router between the firewall and the DMZ. To make this work, I need to assign vlan tags values for the vlans I create on the BigIP box and these must match the tags on the cisco switches (3550's) How do I find this information on the switch?
View 2 Replies
View Related
Oct 30, 2011
Having an issue getting my DMZ vlan working. Running my ASA5505 and i have configured e0/2 for DMZ w/ VLAN ID 3. Connected to my 2716 on port2.Inside e0/1 w/ VLAN ID 1. Connected to my 2716 on port1.
I am trying to get my DMZ Vlan to ports3&4 (LAG1) but when i assign the LAG group to PVID 3 i lose connectivity on VLAN1. I want to send both VLANs to that host because the teamed adaptor is used for Hyper-v Network Switch.
View 17 Replies
View Related
Oct 25, 2012
we have a base license ASA 5510, and been trying to get ICMP working to check that we're routing and not hitting any NAT translation. We have a VLAN280 setup to ISP for VPN link to remote site and another VLAN281 for internet access for internal users.
Users can browse internet from (name _inside interface e0/1 access port) which is fine. When I do a ping to remote office through the VPN I get a response pinging from VLAN280 name VPN_Link. When I do a ping from name inside interface I don't get a response both are security level 100 with same-security-traffic permit inter-interface configured.
Config:
!
interface Ethernet0/0
speed 100
no nameif
[Code]....
View 11 Replies
View Related
Jan 12, 2010
I have a HP Procurve 5406 connected to a Cisco 3560 on a temporary cat5e connection and I have Mitel IP phones needing to go on the Cisco switch.Ive configured the HP Procurve port to TAGGING both VLAN 10 (data) and VLAN 20 (Voice). NO is selected for default VLAN 1.The Cisco is configured on the port with switchport encap dot1q and switchport mode trunk.
Ive configured an IP for interface VLAN 10 and i cannot ping it from across the network. The interfaces are up and happy. I have tried changing the VTP status from transparent to server (VTP pruning is off) ive tried setting allowed vlans 10,20. Still not a think. The worse thing is that i have a working Cisco switch with the HP procurve that i checked the config on and its the same! The only difference is that the media type is SX over SFP in that case.
p.s not that im at this stage yet but i initially configure the FastE ports as trunks with native vlans because i was using non-cisco phones. On a spare port i convigured the voice vlan 20 and i say on the mitel phone that it was looking on vlan20! I didnt expect that, i thought the Voice VLAN ID was carried on CDP enabled devices only.
View 9 Replies
View Related
Jul 5, 2012
I have a 2960 switch connected to another. The I need to verify that vlan0010 on one switch is forwarding tagged traffic between the other switch it is hooked up to through the Gi0/1 port. How do I verify this? I have a server that's multihomed (Broadcom) on the other side an it is supposed to be on this vlan with one of it's network interfaces. We had a pwer outage and now it cannot communicate on this vlan. However, everything else on the vlan can reach all the other nodes accept this server in the front of my building. All the devices in the same room are linked to the same switch which has one port (fa0/17) on vlan0010 and can ping eachother just fine. The server is hooked to port 24 on my server room switch and Gigabit port one goes to a fiber converter all the way to the back. It then gets converted from fiber to cat5e again and links into the switch (2960) in the backroom.
View 5 Replies
View Related
Mar 18, 2012
I'm a little stuck with a 4400 7.0.220.0 + RAP 1550 + MAP 1260 Ethernet bridging issue. I'm using the VLAN tagging functionality and I'm finding that periodically a VLAN that I've tagged on the MAP will deregister from the backhaul and stop passing traffic. If I go into the Mesh tab on the MAP, select the wired interface, remove the VLAN from the list of tagged VLAN IDs and then add it right back to the list, its starts passing traffic again
View 2 Replies
View Related
Dec 13, 2012
We have a problem with CDP packets on sent by our Cisco 6509's. Unlike our other Cisco switches (4948G, 5020, etc.), the 6509 tags administrative traffic on the native vlan. As a result the CDP packets are sent with an 802.1Q header with a tag of 1. The other switches send the CDP packets untagged on the native vlan. This causes problems because we have non-Cisco devices in our lab that also receive and send CDP, but they do not process the packets that are tagged by the 6509. They see the packets from the 4948 and 5020 just fine.
How can I disable the administrative native vlan tagging on the 6509? Here is the current setup:
nwkdev-6509-1#show vlan dot1q tag native
dot1q native vlan tagging is disabled globally
nwkdev-6509-1#show interfaces gigabitEthernet 1/9/1 switchport
[Code].....
View 13 Replies
View Related
Jan 14, 2013
I've been experimenting with the 'vlan dot1q tag native' command on a switch and it seems as though tagging the native vlan breaks vty access to my access point.With the 'vlan dot1q tag native' commnand applied, I lose management connectivity to the AP with 'no vlan dot1q tag native' applied, connectivity is restored. Why is this? Is it safe to say that one can access the AP via vty lines using ONLY untagged packets?
SWITCH
Model: WS-C3560G-24PS
Code: c3560-advipservicesk9-mz.122-46.SE
--Abbreviated CONF
vlan dot1q tag native
[code]....
View 14 Replies
View Related
Feb 26, 2013
Region : Malaysia
Model : TL-WDR4300
Hardware Version : V1
Firmware Version :
ISP : Maxis
I bought the TL-WDR4300 almost 6 months ago using it on my TM Streamyx broadband service, it worked perfectly and this is indeed a very good product very reasonably priced too Kudos to TP-Link. The thing is shortly after purchasing it, I moved to Maxis Home Fibre Internet (more bandwidth). Following the ISP change the router has since went back into the box and had been there for 5 months now. This is because without the VLAN tagging feature or a Maxis mode, it is currently incompatible with Maxis Home Fibre Internet and will stay that way.I understand this is by no mean TP-Link's fault but I and many other WDR4300 owners on Maxis, if TP-Link could look into ENABLING VLAN TAGGING FEATURE/MAXIS MODE on this device. This I am sure would work with TP-Link sales as there are not many routers out there with this feature set and price range that could work with Maxis Home Fibre Internet.
View 1 Replies
View Related
Dec 1, 2012
I have 3 switches
Catalyst 2960
Catalyst 3750
Hp procurve 1410 24g
I want to link them using fiber as they are almost 50 meters apart. What connectors should I use and what fiber optic cable can be connected to those connectors.I have found these connectors and cables on internet will these work
GBM-7000-S85 - 1000Base-SX, multi-mode, 550m, 850nm GBIC transceiver
SC to SC Multimode Duplex High Speed Fiber Optic Ethernet Patch Cable 62.5/125
View 1 Replies
View Related
Jan 22, 2013
We have two publicly routable gateways attached to our A5500 switch that are expecting untagged traffic.
We currently have VLAN 10 as the untagged VLAN for Gateway 1, and VLAN30 as a tagged vlan for Gateway 2. Since both gateways are requiring untagged traffic, I need to make sure all ingress traffic from Gateway 2 gets tagged as VLAN30, while all egress traffic gets untagged.
The tricky part is they must come over the same port so I can't just tag it that way. I get the feeling this will require some static routes or VLAN Interfaces on the switch, but I'm not sure where to start.
View 15 Replies
View Related
Apr 17, 2012
I have 2 procurve switches
2848
2650
Procurve stacking? Is that just a way too manage both switches together?
Or is it for combining both switches together?
Or is that called something else in procurve speak?
Or is that feature not actually available etc?
Next to learn how to breakup the 2848 into multiple switches.
View 18 Replies
View Related
Jun 18, 2011
I'm trying to configure Hp1810-24G and pfsense firewall with no success. I' would like to create two virtual lan on swich which share same internet connection. To simplifing I suppose
vlan 2 port 1-12
vlan 3 port 13-23
port 24 pfsense lan connection
What altready I do on pfsense I create vlan 2 called 1STVLAN VPID 2 and vlan 3 called 2NDVLAN VPID and assigned to them to LAN pfsense real port enabled and gived a static ip to them on HP procure I create two vlan with
vlan 2 port 1-12 untaged 13-23 Excluded 24 tagged
vlan 3 port 1-12 exluded 13-23 untagged 24 tagged
the problem is that I don't be able to speak with pfesense (ping failed on real lan ip and virtual lan ips) so I don't have also internet connection.The ethernet card i'm using are old (i have built the pfesense computer on spare parts that I have at home) so can be a driver issue?
View 1 Replies
View Related
Aug 12, 2011
is there any possible way that NIC starts sending tagged frames. Actually the scenario is that we always have to troubleshoot DSLAMS and there uplinks are bind to some vlans, and we cant directly check their connectivity with PC, and always have to carry a switch with us.
View 4 Replies
View Related
Jul 18, 2011
I have configured stack with 2 sge2010p switches. I want to connect this stack to the HP procurve switch using port agregation (LAG) technique. I want to use one ge port on each sge switch.How to configure it? Will it work witch port agregation on procurve?
View 2 Replies
View Related
Aug 31, 2012
So we recently moved our Comcast demarc to our new server room which resulted in moving the SMC modem from our old server room where it directly connects to the firewall - to a new room where it connects to a 2910 switch, LACP to our L3 switch, LACP to another 2910, then to Sonicwall.
Since the move our internet has been dropping off randomly for about 2-5 minutes then it will come back online. This happens anywhere from 10 to 50 times a day. Sometimes it happens a half hour apart, sometimes it is 15 minutes apart, sometimes it will go 8 hours without issue.
The modem has been replaced, the Comcast line has been "tested."
The modem remains online when we lose internet connectivity - I can connect to it using a laptop on it's lan port and ping out to google.com while an computer connected beyond the switch and sonicwall cannot connect.
I have run a constant ping from a home comptuer to the modem as well as to our sonicwall (both static addresses) and they both seem to go offline when we lose internet connectivity.
Since the issue started, I moved the Sonicwall so that it connects directly to the 2910 that the modem connects to, put it in a vlan with the modem so they only talk to each other and it still results in the same intermittent disconnects. I checked all the port statistics on both ports as well as the event logs, and trunk links and find nothing abnormal.
I take the switch out entirely and plug the modem directly into the firewall like it was prior to the whole move. Works fine.
Traffic is not an issue and the switch in question also connects all my production servers and iSCSI SAN together without issue.
View 19 Replies
View Related
Jan 28, 2013
I'm trying to determine what switches in the Procurve lineup will do Inter-VLAN routing on the same switch. Assume a basic 1 switch network.
I've determined that Procurve "Layer 3 Lite" will do static routing but not dynamic routing. So I would assume their Layer 2 switches do absolutely no routing. However I have a 2520 in front of me that HP claims is Layer 2 only yet I can route between VLAN's on that switch.
View 5 Replies
View Related
Oct 31, 2011
I have:
-Procurve 1810-24G
-Procurve 2520-8-PoE
Router (with Internet Connection) is plugged into port 24 of the 1810.My asterisk server is plugged into Port 1 of the 1810.The 2520 is plugged into Port 2 of the 1810, and all of the VoIP phones are plugged into the 2520.Rest of the office computers are plugged into the remaining ports on the 1810.
After setting up the subnet and assigning an ip to the 1810, everything else just worked out of the box. I would imagine that I should segment and prioritize the network so that the VOIP traffic is isolated and is higher priority from everything else.
I tried playing around a bit, but the phones lost connectivity, so I just defaulted everything back for now.
What would the suggestions be for setting up the VLANS properly to do this?I would also need one of the office PC's (say the one plugged into port 13 of the 1810) to be able to access the asterisk server.Also, would it be more optimal to have the asterisk server on the PoE switch or the main switch?
View 9 Replies
View Related
May 1, 2013
we're running some HP ProCurve 2520's (24 port PoE for desktops/phones) and 2510's for our server racks. The CPU's are a bit weak from what we can tell and sometimes end up with issues on them. The specs on the EAS series look like a decent jump compared to the older HP's. However I've never worked with these ever.
My other option is to go back to Cisco. However to make it fit our budget, we have to dump gig switches for 10/100 + PoE. Which isn't really a major issue on the desktop switches. We'll naturally put gig versions on the server racks. I like our ProCurves, however they cause issues from time to time.
I've also considered going back to Adtran, however I haven't kept up with what they have to offer. I'm tempted to play it safe and go the Cisco route. We're using ASA5510's active/passive for routing/firewall (gig versions).
View 13 Replies
View Related
Mar 16, 2012
how to tag static routes on ASA. I have static routes that I want to redistribute into EIGRP on ASA. I can't find any tag option when defining a static route or under set command in route map... am I overlooking something?
View 1 Replies
View Related
Aug 13, 2012
My current switch layout at work is very basic and offers no redundancy. I'd like to at least setup redundant core switches, so that if any of my switches would to fail, it would result in a smaller number of systems affected.
Current Core Switch: HP Procurve 3500yl-48G (3500yl-24G as cold spare)
Internet Switch: 3com (forget model)
User distribution switches: 9 Planet 10/100 Layer 2 Managed switches, and 2 Dell Powerconnect 5448
Server switches: 5 Procurve 2810-24Gs (1 in each server rack)
In addition, we have 50+ site to site VPNs using different 192.168.x.x subnets across 2 different VPN concentrators, several routers, and a pair of MPLS's.My first step to improve speed and reliance was to reconnect the user switches. The old distribution switches were daisy chained, and all users 120 users were on a single 1GB port on the core switch, and if switch 2 of 11 failed, I'd have 10 switches knocked out of the network. I've since connected them directly to the core switch, and the users have noticed the improvement.
I'll try to get a diagram, but it's basically a large hub and spoke. Each and every switch is connected directly to the single core switch. All of the internet sources are connected directly to the 3com and are on separate VLANs which are then connected to the core via a trunk, which then handles the routing. Currently, I'm using less than half of the ports on the current core switch, so I should still have enough ports on the 24G to at least maintain the critical systems. Each server switch is trunked to the core, as is the internet switch, but the user network is not (but probably should be). Instead they are connected via simple untagged uplinks.
I absolutely cannot afford new equipment right now, so whatever I do will require reusing existing equipment. I'd very much like to increase the bandwidth from the server switches to the core if at all possible. Is there an easy way to configure and Active-Active setup that would improve bandwidth? Or would It be active-passive and require a 2 port LAG on the 48 port (for speed), and a 3rd port for the 24 port (for redundancy).
NOTE: With any luck, we'll be dropping our analog phone system and replacing it with VOIP sometime within the next year. So I should be getting some extra budget to replace the distribution switches with POE. Until then, I'll have to live with my crappy Planets.
View 6 Replies
View Related
Oct 3, 2011
Any good 24 port rack mountable Gigabit switch, that is managed. Is a HP ProCurve 1800-24G 24 port gigabit ethe switch J9028B decent ? Will i be happy ? I have currently a Dell 5224, that works, but it's getting old and for the life of me can't find rack ears AT ALL!! and i want it mounted so i can finish my rack installation.
budget is around 250-300$ 24 ports all gigabit and manage able for vlans etc etc.
View 19 Replies
View Related
Jan 23, 2013
I work as Network administrator in a building products plant at Poland. We had core switch HP Procurve 6200yl with 5 vlans, and 11 Aironet 1240AG Access points without controller. I have a problem with create 2 wi-fi VLANs on the Cisco AP's and linked it with HP switch.
VLANs on the switch:
1 - Default (for office sutff) - working great,
2 - Production (for production stuff) - working great,
3 - Inter (for Router's) - working great,
4 - WMS - i need configure it as wireless,
5 - WiFi with Radius - i need configure it as wireless.VLANS on the Access Points:
4 - WMS - for warehouse terminals - WPA2,
5 - WiFi for office stuff with Radius.
I'm easily able to get it running a single SSID (non-VLAN) network and confirm that I can use that network fine. However, I need to set up these 2 VLANs. I can connect to it via telnet if that'll let me program it faster.
View 2 Replies
View Related
Oct 5, 2011
I have a problem putting a Cisco 1141 AP in repeater mode with a AP HP Procurve.Root AP is a the Procurve, but when try to put the Cisco AP with same SSID, Authentication, etc, I receive this error:
%DOT11-4-CANT_ASSOC: Interface Dot11Radio0, cannot associate: NO Aironet Extension IE
I try disable the Aironet Extensions and always get the same error all time. It's possible connect both APs?
View 6 Replies
View Related
Apr 15, 2012
I am having difficulties implementing Mac-auth on selected ports between an HP ProCurve 2510 and Cisco ACS 5.3.The 802.1x works just fine, but for selected ports I need to implement port-access with MAC-based authentication instead of regular 802.1X (yeah, I know, but this line of ProCurve switches only support one auth-mechanism per port!).The switch successfully forwards interesting MAC-auth requests for authentication to the ACS with CHAP/MD5, but the ACS reports this:
Logged At:
April 16,2012 1:20:48.080 PM
RADIUS Status:
Authentication failed : 22056 Subject not found in the applicable identity store(s). NAS Failure:
Username:
002655886b3d MAC/IP Address:
00-26-55-88-6b-3d Network Device:
[code].....
The ACS is configured to use the Internal Hosts database, where the client computer is configured like this;MAC-address: 00-26-55-88-6B-3D
View 1 Replies
View Related
Apr 10, 2012
I wanted to know if I can somehow setup my network to use a proxy for all connected devices?
For example I can go into Firefox proxy settings and setup to browse using proxy. Is there any way to do this at the router or switch level to not have to configure every device individually I have a wndr3700 router and a HP procurve 1810g switch and am thinking of building a pfsense box.
View 8 Replies
View Related
