Definitive Voice/Data vlan config (help please)

[cenk sasmaztin]

hi Tino
many company one dhcp server and more vlans system

method 1:
one dhcp server and one nic on more ip scobe (for one vlan one scobe )
example:
dhcp server nic address 10.0.0.10/24

scobe 1:vlan id :10
range 10.0.10.1/24---10.0.10.250/24
default gateway 10.0.10.1(same address switch vlan 10 interface ip address)

scobe 2:vlqan is :20
range 10.0.20.1/24---10.0.20.250/24
default gateway:10.0.20.1(same address switch vlan 20 interface ip address)
create all switch vlan 1 vlan 10and vlan 20
vlan 1 only managemet vlan vlan 10 voice vlan 20 data all uplink port aware all vlan (vlan untag 10and 20 tag port)
enable ip routing and use ip helper address
ip helper address for all vlan 10.0.0.10(dhcp server nic)
on only core switch or switchs you write vlan ip address ,other edge switch unnecessary vlan ip address for vlan 10 and vlan 20
vlan 1 managemet ip address you write all switch same subnet address

on vlan 20 client send dhcp request whit routing unicast packet this client take dhcp server vlan 20 scobe ip range

on vlan 10 client send dhcp request whit routing unicast packet this client take dhcp server vlan 10 scobe ip range

many people or company whit this configuration create network in hundreds vlans


because you state
three vlan one vlan mamagenet other vlan voip and data.and you use two nic dhcp server
therefore I recommed above config
because very easy config only layer 2 operation ,ony vlan 1 all switch for managemet assign ip address other vlan no need ip address because only layer 2 operation all uplink port aware vlans one vlan untag port connect device this vlan member
same port connect two device (ipphone and pc )you create same port vlan 10 (data)untag member and vlan 20 tag member (voice) and set ip phone vlan id 20
I hope you understand

good luck...

[Joel Belizario]

Hi Tino,

See my last reply in the thread "Cascading Multiple Procurve's ?" to Karl Collinson's query.

Cheers,
Joel

[Colonelk]

One last question.

I've got an ISA server as a proxy and back firewall (behind a Cisco PIX box) currently on our network. On our current network its internal NIC address is the default gateway address for our network.

On the new network the HP "Mothership" switch is the default gateway for the data VLAN (192.168.5.1) and the ISA server will have the internal address of 192.168.5.20. With IP routing enabled on the switch I don't seem to be able to set a default gateway for it to go through the ISA server. Whats the best way of ensuring that all traffic that needs to go out to the internet goes out via the ISA server?

Thanks

Tino

[cenk sasmaztin]

hi tino attach ip route command

example:
config)switch#ip routing 0.0.0.0 0.0.0.0 192.178.1.1(this ip pix lan interface)

and you write on pix ip routing command for each vlan

pix:ip routing 10.10.10.0(vlan network address) 255.255.255.0 10.10.10.1(vlan ip address)

pix:ip routing 10.10.20.0(vlan network address) 255.255.255.0 10.10.20.1(vlan ip address)

[cenk sasmaztin]

sorry for frist isa and after pix configuration

switch ip route command ok .
0.0.0.0 0.0.0.0 (isa server lan ip address)


you write ip route for each vlans on isa

route add 10.10.10.0 255.255.255.0 10.10.10.1

route add 10.10.20.0 255.25.255.0 10.10.20.1

good luck ...

[Colonelk]

OK so my ISA internal NIC will be 192.168.5.20
Its NIC that attaches to the PIX will be 192.168.6.2

The PIX will be 192.168.6.1

So the command on the HP master switch will be:


switch ip route command ok .
0.0.0.0 0.0.0.0 192.168.5.20


And then on the ISA I create manual routes for our VLANs. So

route add 192.168.5.0 255.255.255.0 192.168.5.1 (HP masterswitch VLAN 20 Data IP)

route add 192.168.4.0 255.25.255.0 192.168.4.1 (HP Vlan 10 Voicevlan IP)



Is that right?

[cenk sasmaztin]

ok Tino:) you understand