Routing help on HP 5820

[ritzini]

Hi, i need some help getting my routing right on HP5820.

VLAN 10

Ip address: 10.10.1.1/16 has an direct routing table 

My default route is 0.0.0.0 0.0.0.0 to 10.14.1.1(my firewall)

I need 10.10.128.0/22 to be routed to 10.14.1.1(my firewall)

Since VLAN10 needs to have ip address on interface, all traffic to 10.10.0.0 is routed internally because my internal network is defined as 10.10.0.0/16. I need the Hp5820 to route 10.10.128.0/22 traffic to 10.14.1.1 first. 

Any suggestions how to define this since routing for VLAN10 is added automatically with direct and preference 0 wich overrides my static route 10.10.128.0 to 10.14.1.1 with preference 1

[Scutt14]

Hi,

Because the 10.10.128.0 sits within 10.10.1.1/16 any traffic within vlan 10 looking for the 10.10.128.0 address is layer 2 and so will not even look at your routing table.

What is this traffic? What is 10.10.128.0 and why do you need it to go via the firewall first? How is it all physically connected?

Can you not set up an interface on the firewall within vlan 10?

[ritzini]

Thanks for your reply.

Our organisation is separated in two different locations. Each location with a firewall and established a link network between. This linknett is 172.31.255.0/28. 

Location 1 has a new server nettwork in 10.20.20.x/22 and old server network in 10.10.128.0/22

Location 2 has a new server network in 10.30.20.x/22 and old server network in 10.10.0.0/16

Since either location 1 or 2 has interferring networks in the new ranges they routes between the firewalls over the link network.

The problem is that we need to trust domain controllers from location 2 new network domain controller 10.30.20.10 against location 1 old network domain controller 10.10.129.40 over the linknetwork.

I have defined the route on location 2 firewall and it routes the rquest to location 1 10.10.128.40 network.

The problem is that i am pretty new to HP5820 and need help solving how to get my request from location 2  servernetwork 10.30.20.0/22 to go through 5820 and to the firewall.

My default route in 5820 is 0.0.0.0 0.0.0.0 to my firewall ip.

I got VLAN10 with interface 10.10.1.1/16, so that will create a direct route in 5820.

How am i to get my request from location 2 10.30.20.0/22 to 10.10.128.0/22 to go from HP5820 and to my firewall?

Really hope for some help on solving this.

[paulgear]

Hi ritzini,

If i'm understanding your configuration correctly, there's really no way to get this working correctly without eliminating the overlapping IP ranges. Even if you put the "correct" routing in your switch, all of the devices in 10.10.0.0/16 will still attempt to connect to hosts in 10.10.128.0/22 directly. So you would have to add an additional route to every device in 10.10.0.0/16 to make it work. This is a great way to make your work day more painful than a trip to the dentist. :-) Change 10.10.0.0/16 to 10.10.0.0/22 or something like that, and get rid of the overlap.