topic Re: GVRP and VLAN IP in Switches, Hubs, and Modems

GVRP and VLAN IP

pistodj — Mon, 24 Jan 2011 11:07:28 GMT

Hi i have configure on my HP procurve 2900al my VLAN and IP of any VLAN and enabling a routing.

VLAN ID Name | Status
------- -------------------- + ----------
1 DEFAULT_VLAN | Port-based
2 User Wired | Port-based
3 User Wireless | Port-based

show ip

VLAN | IP Config IP Address Subnet Mask

DEFAULT_VLAN | Manual 10.20.16.1 255.255.248.0
User Wired | Manual 10.20.0.254 255.255.248.0
User Wireless| Manual 10.20.8.254 255.255.248.0

I have enable a GVRP on hp 2900al and hp 2810 and i have linked with a trunk.

I have this result...

show vlans

802.1Q VLAN ID Name Status
-------------- ------------ ------------
1 DEFAULT_VLAN Port-based
2 GVRP_2 Dynamic
3 GVRP_3 Dynamic

and show ip

nordica-1(config)# show ip

Internet (IP) Service

Default Gateway :
Default TTL : 64
Arp Age : 20

VLAN | IP Config IP Address Subnet Mask
------------ + ---------- ---------------
DEFAULT_VLAN|Manual 10.20.16.1 255.255.248.0

How can enable correctly a forwarding of IP configuration of my Dynamic VLAN?
Without the VLAN IP my routing not work

thanks

Re: GVRP and VLAN IP

Michael_Breuer — Mon, 24 Jan 2011 21:09:30 GMT

Hello,

GVRP doesn't propagate any IP information to a neighbor switch. You can use GVRP to tag your VLAns between the switches. As I can see you have an IP address on each VLAN on the 2900al. IF you turn on "ip routing" the switch will forward packets between the VLANs. So why do you want to have an additional routing device in the network?

Cheers,

Michael

Re: GVRP and VLAN IP

pistodj — Tue, 25 Jan 2011 07:27:44 GMT

I want the IP in every VLAN because I have tried to ping the IP 10.20.0.254 (of the second Vlan) from the 2810 switch but I haven't got any answer...

I understand that if I propagate only the VLANs without their IP address the routing does not work...

Is it correct?

Re: GVRP and VLAN IP

Pieter 't Hart — Tue, 25 Jan 2011 12:34:30 GMT

>>> How can enable correctly a forwarding of IP configuration of my Dynamic VLAN <<<
bmk GVRP does nothing with tcp/ip.

GVRP can propagate vlans configured on the 2900 available to the 2810 (Layer2).
but does not do the tcp/ip connectivity (Layer3).
for this Layer3 connectivity you need a router.

the 2900 can do the routing.
to do this it needs a different ipaddress/subnet in each vlan.

each client must have the 2900's address in it's own vlan configured as default gateway.

the 2810 does not really need an ip address to function, not even for gvrp (it only needs a single ip address for management.)
as long as it learn the vlans using GVRP, there can be L2 connections between local ports untaggged in a vlan and to 2900 ports untaggged in the same vlan .

Re: GVRP and VLAN IP

Pieter 't Hart — Thu, 10 Nov 2011 15:51:15 GMT

your other post http://h30499.www3.hp.com/t5/Switches-Hubs-Modems-Legacy-ITRC/GVRP-between-two-swich/m-p/4712055#M24423

does not seem solved?
pleas attach the running config

by the way.
you seem to use the same ip-address on both the 2900 and the 2810!
DEFAULT_VLAN|Manual 10.20.16.1 255.255.248.0
(in you other post the also are both ip address 192.168.0.1 255.255.255.0 )

They need to be different addresses!!!!
change the 2810's address to 10.20.16.2
remember this is only for management, this has nothing to do with routing.
also on the 2810 to find the route back you need to add
ip route 0.0.0.0 0.0.0.0 10.20.16.1
(points to the 2900 wich routes to the other subnet/vlan).

Re: GVRP and VLAN IP

pistodj — Tue, 25 Jan 2011 16:33:31 GMT

Good! with your last help (ip route 0.0.0.0 0.0.0.0 10.20.16.1) i have resolve my problems.

I have last question...

I need force autentication of some ports in my 2810 switch but this configuration not work because are Dynamic Vlan.

aaa port-access authenticator 1 control authorized
aaa port-access authenticator 1 auth-vid 15

There's any config to force a membership of port in Dynamic VLAN?

Thanks