Creating VLANs on a LIVE Network

[Darren Dyke]

Hello All,

My company has exhausted all our IPs in the current 192.168.123.x Scope. I am currently working on implementing VLANs to resolve this issue.

I have never implemented VLANs on a live network, let alone on HP equipment. If someone can look over my configs and help me fix what needs to be fixed so the implementation can be done seamlessly.

Thank you in advance.

Darren Dyke

Please see the below configs for each switch:

hostname "West_GB_2910"
module 1 type J9145A

exit
ip default-gateway 192.168.123.254
ip routing
vlan 1
name "DEFAULT_VLAN"
untagged 1-2,4-24
ip address 192.168.123.253 255.255.255.0
no untagged 3
exit
vlan 9
name "VLAN9_VOICE"
untagged 3
ip address 10.123.1.253 255.255.255.0
exit

vlan 400
name "East VLAN"
ip address 192.168.124.253 255.255.255.0
ip helper-address 192.168.123.6
tagged 5
exit
vlan 500
name "West VLAN"
ip address 192.168.125.253 255.255.255.0
ip helper-address 192.168.123.6
tagged 5
exit
vlan 600
name "Private WIFI"
ip address 192.168.126.253 255.255.255.0
ip helper-address 192.168.123.6
tagged 5
exit
vlan 700
name "Public WIFI"
ip address 192.168.127.253 255.255.255.0
ip helper-address 192.168.123.6
tagged 5
exit

fault-finder bad-driver sensitivity high
fault-finder bad-transceiver sensitivity high
fault-finder bad-cable sensitivity high
fault-finder too-long-cable sensitivity high
fault-finder over-bandwidth sensitivity high
fault-finder broadcast-storm sensitivity high
fault-finder loss-of-link sensitivity high
fault-finder duplex-mismatch-HDx sensitivity high
fault-finder duplex-mismatch-FDx sensitivity high
timesync sntp
ip route 0.0.0.0 0.0.0.0 192.168.123.254

==============================================

Running configuration:

; J4903A Configuration Editor; Created on release #I.08.98

hostname "DATA GB WEST"
time timezone -300
time daylight-time-rule Continental-US-and-Canada

trunk 18-19 Trk1 Trunk
trunk 6-7 Trk2 Trunk
trunk 11-12 Trk3 Trunk
ip default-gateway 192.168.123.253
sntp server 192.168.123.254
timesync sntp
sntp unicast
snmp-server community "public" Unrestricted
snmp-server host 192.168.123.58 "public"

vlan 1
name "DEFAULT_VLAN"
untagged 1-5,8-10,13-17,20-24,Trk1-Trk3
ip address 192.168.123.246 255.255.255.0
exit
vlan 500
name "West VLAN"
ip address 192.168.125.246 255.255.255.0
tagged Trk3,1,22-23
exit
vlan 600
name "Private WIFI"
ip address 192.168.126.246 255.255.255.0
tagged Trk3,1,13-14,22
exit
vlan 700
name "Public WIFI"
ip address 192.168.127.246 255.255.255.0
tagged Trk3,1,13-14,22
exit
ip authorized-managers 192.168.123.0 255.255.255.0
spanning-tree Trk1 priority 4
spanning-tree Trk2 priority 4
spanning-tree Trk3 priority 4
password manager
password operator

===============================================

Running configuration:

; J4903A Configuration Editor; Created on release #I.08.98

hostname "EASTGB01"

trunk 2-3 Trk1 Trunk
ip default-gateway 192.168.123.253
sntp server 192.168.123.254
ip routing
timesync sntp
sntp unicast
snmp-server community "public" Unrestricted
snmp-server host 192.168.123.58 "public"
vlan 1
name "DEFAULT_VLAN"
untagged 5-24
tagged Trk1
ip address 192.168.123.241 255.255.255.0
exit
vlan 400
name "East VLAN"
ip address 192.168.125.241 255.255.255.0
tagged Trk1,1,4
exit
vlan 600
name "Private WIFI"
ip address 192.168.126.246 255.255.255.0
tagged Trk1,15
exit
vlan 700
name "Public WIFI"
ip address 192.168.127.246 255.255.255.0
tagged Trk1,15
exit
ip author
fault-finder bad-driver sensitivity high
fault-finder bad-transceiver sensitivity high
fault-finder bad-cable sensitivity high
fault-finder too-long-cable sensitivity high
fault-finder over-bandwidth sensitivity high
fault-finder broadcast-storm sensitivity high
fault-finder loss-of-link sensitivity high
fault-finder duplex-mismatch-HDx sensitivity high
fault-finder duplex-mismatch-FDx sensitivity high
spanning-tree Trk1 priority 4


===============================================

Running configuration:

; J4903A Configuration Editor; Created on release #I.08.98

hostname "WEST OPERATIONS"

ip default-gateway 192.168.123.253
sntp server 192.168.123.254
timesync sntp
sntp unicast
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
no untagged 1-24
ip address 192.168.123.240 255.255.255.0
exit
vlan 500
name "West VLAN"
ip address 192.168.125.240 255.255.255.0
tagged 24
untagged 1-23
exit

==============================================


Running configuration:

; J4903A Configuration Editor; Created on release #I.08.98

hostname "EAST DEV GB"
snmp-server contact "Tom Packert"
ip default-gateway 192.168.123.253
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
no untagged 1-24
ip address 192.168.123.238 255.255.255.0
exit

vlan 400
name "East VLAN"
ip address 192.168.125.238 255.255.255.0
tagged 21
untagged 1-20,22-24
exit

[Helper]

Hi,

I don't understand why each switch have ip address for all vlans ?

If the 2910 is your core switch ?
If yes then only this switch need the ip address, all other should only have vlan configured without ip address.
Only one vlan should be used for management purpose and the switch will have an ip default-gateway.

Bye.

[Darren Dyke]

I would like to leave vlan 1 for management... since that ip scheme of 192.168.123.x is what all servers and switches currently use.

So on the 2910 it should look like this:
hostname "West_GB_2910"
module 1 type J9145A

exit
ip default-gateway 192.168.123.254
ip routing
vlan 1
name "DEFAULT_VLAN"
untagged 1-2,4-24
ip address 192.168.123.253 255.255.255.0
no untagged 3
exit
vlan 9
name "VLAN9_VOICE"
untagged 3
ip address 10.123.1.253 255.255.255.0
exit

vlan 400
name "East VLAN"
ip address 192.168.124.253 255.255.255.0
ip helper-address 192.168.123.6
tagged 5
exit
vlan 500
name "West VLAN"
ip address 192.168.125.253 255.255.255.0
ip helper-address 192.168.123.6
tagged 5
exit
vlan 600
name "Private WIFI"
ip address 192.168.126.253 255.255.255.0
ip helper-address 192.168.123.6
tagged 5
exit
vlan 700
name "Public WIFI"
ip address 192.168.127.253 255.255.255.0
ip helper-address 192.168.123.6
tagged 5
exit

fault-finder bad-driver sensitivity high
fault-finder bad-transceiver sensitivity high
fault-finder bad-cable sensitivity high
fault-finder too-long-cable sensitivity high
fault-finder over-bandwidth sensitivity high
fault-finder broadcast-storm sensitivity high
fault-finder loss-of-link sensitivity high
fault-finder duplex-mismatch-HDx sensitivity high
fault-finder duplex-mismatch-FDx sensitivity high
timesync sntp
ip route 0.0.0.0 0.0.0.0 192.168.123.254

[Darren Dyke]

Sorry, And then the rest of the switch configurations are as followed:

Running configuration:

; J4903A Configuration Editor; Created on release #I.08.98

hostname "EAST DEV GB"
ip default-gateway 192.168.123.253
snmp-server community "public" Unrestricted
ip default-gateway 192.168.124.253
vlan 1
name "DEFAULT_VLAN"
no untagged 1-24
ip address 192.168.123.238 255.255.255.0
exit

vlan 400
name "East VLAN"
tagged 21
untagged 1-20,22-24
exit

=============================================
Running configuration:

; J4903A Configuration Editor; Created on release #I.08.98

hostname "WEST OPERATIONS"

ip default-gateway 192.168.123.253
sntp server 192.168.123.254
timesync sntp
sntp unicast
snmp-server community "public" Unrestricted
ip default-gateway 192.168.125.253
vlan 1
name "DEFAULT_VLAN"
no untagged 1-24
ip address 192.168.123.240 255.255.255.0
exit
vlan 500
name "West VLAN"
tagged 24
untagged 1-23
exit

=============================================

Running configuration:

; J4903A Configuration Editor; Created on release #I.08.98

hostname "EASTGB01"

trunk 2-3 Trk1 Trunk
ip default-gateway 192.168.123.253
sntp server 192.168.123.254
ip routing
timesync sntp
sntp unicast
snmp-server community "public" Unrestricted
snmp-server host 192.168.123.58 "public"
vlan 1
name "DEFAULT_VLAN"
untagged 5-24
tagged Trk1
ip address 192.168.123.241 255.255.255.0
exit
vlan 400
name "East VLAN"
tagged Trk1,1,4
exit
vlan 600
name "Private WIFI"
tagged Trk1,15
exit
vlan 700
name "Public WIFI"
tagged Trk1,15
exit
ip author
fault-finder bad-driver sensitivity high
fault-finder bad-transceiver sensitivity high
fault-finder bad-cable sensitivity high
fault-finder too-long-cable sensitivity high
fault-finder over-bandwidth sensitivity high
fault-finder broadcast-storm sensitivity high
fault-finder loss-of-link sensitivity high
fault-finder duplex-mismatch-HDx sensitivity high
fault-finder duplex-mismatch-FDx sensitivity high
spanning-tree Trk1 priority 4

=============================================

Running configuration:

; J4903A Configuration Editor; Created on release #I.08.98

hostname "DATA GB WEST"
time timezone -300
time daylight-time-rule Continental-US-and-Canada

trunk 18-19 Trk1 Trunk
trunk 6-7 Trk2 Trunk
trunk 11-12 Trk3 Trunk
ip default-gateway 192.168.123.253
sntp server 192.168.123.254
timesync sntp
sntp unicast
snmp-server community "public" Unrestricted
snmp-server host 192.168.123.58 "public"

vlan 1
name "DEFAULT_VLAN"
untagged 1-5,8-10,13-17,20-24,Trk1-Trk3
ip address 192.168.123.246 255.255.255.0
exit
vlan 500
name "West VLAN"
tagged Trk3,1,22-23
exit
vlan 600
name "Private WIFI"
tagged Trk3,1,13-14,22
exit
vlan 700
name "Public WIFI"
tagged Trk3,1,13-14,22
exit
ip authorized-managers 192.168.123.0 255.255.255.0
spanning-tree Trk1 priority 4
spanning-tree Trk2 priority 4
spanning-tree Trk3 priority 4
password manager
password operator