5412zl VLAN Routing (What Am I doing wrong)

[Nick Kelnhofer]

I've been wrestling with our 5412zl today, trying to set up vlans and route between them.

Heres my current config:

ip routing
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
untagged A1-A24,B1-B24,C1-C24,D1-D24,E1-E24,F1-F24,G1-G24,H1-H24,I1-I24,J1-J1
8,J20-J21,J23-J24,L1-L24
ip address 172.17.1.1 255.255.255.0
no untagged J19,J22
exit
vlan 10
name "VLAN10"
untagged J22
ip helper-address 172.17.1.2
ip address 172.17.10.1 255.255.255.0
exit
vlan 2
name "VLAN2"
untagged J19
ip address 172.17.2.1 255.255.255.0
exit


Now, I havea machine on each VLAN. I have them configured with static addresses for now. I can ping all of the gateway/vlan IPs from all of the machines, but I cant ping any of the machines to eachother, through the vlans. The switch appears to have the proper routes, but nothing is actually routing.

What stupid thing am I missing here?

[Matt Hobbs]

Make sure the client machines don't have their firewalls enabled.

[Nick Kelnhofer]

That was my first problem, but it is not the current problem. I can ping the machines from the switch itself and get a response. Any other ideas? This seems so strange.

[Mohieddin Kharnoub]

Hi

I advice you to update the 5400 to latest firmware:
ftp://k1251zip:procurve@hprc.external.hp.com/yl-zl-Software-K1251.zip

The was a small issue in STP resulting a problem in ping.

Also, make sure each PC has a default gateway (his Vlan IP), and the firewall disabled ....

Good Luck !!!

[Olaf Borowski]

Nick,

Is the default gateway address of the client set to the IP address of the approriate VLAN? A client on VLAN 1 needs it's default gateway set to 172.17.1.1 and a client on VLAN 2 is 172.17.2.1.
When you ping from client on VLAN 1 to client on VLAN 2, what is the icmp message you get or is it just timing out?

[Nameesh NR]

Hi Nick,

I think if you enable "ip proxy-arp" on all the
VLAN. And then you should be able to ping
across machines on different VLANs.

Command>
sw5412zl(config)#vlan 1 ip proxy-arp
sw5412zl(config)#vlan 2 ip proxy-arp
sw5412zl(config)#vlan 10 ip proxy-arp

And also make sure that you are have the correct subnet-mask configured on each of
the machines. It needs to be same as the
subnet mask for the VLAN on the switch.

Thanks & Regards,
Nameesh.
Ps:
Dont forget to assign points :)

[Alaa Saleh]

The problem is you didnt add the routing protocol.

the simplest one is rip, yous put this command:

router rip

and in each vlan, you should put:

ip rip.

[Matt Hobbs]

For a simple single switch setup, you do not need to use proxy-arp or RIP.

[Nick Kelnhofer]

Thanks for all the responses guys. It turned out my config was fine, I just had a routing loop. I decided to KISS (keep it simple stupid). I disconnected all modules except the one I was working from. I then plugged them in one by one, waiting for the problem to resurface, and it never did.

This Monday I have the building running on the 5412zl as the core with all subnets running!