HP 2650 VLANS.

[Fear Fas]

Hi Guys, I have a little question.

I have some Procurve 2650 switches.
In one of those switches I configure 2 vlans.
1- 192.168.1.1/x
2- 192.168.2.1/x

I have a computer 192.168.1.3 attached to vlan1
and a 192.168.2.3 attached to vlan2. (I really have a lot of computers, but im using this as a test).

I need computer 192.168.1.3 to ping (and access to) 192.168.2.3 and the other way round, but its impossible. I cant find the way..
Can anybody help me.
Thanks!

[Ben Dehner]

For the moment, lets ignore the second switch and look at the one with 2 vlans.

You need to enable IP routing on the switch.

You need to assign the switch an IP address in each of the VLANs.

You need to determine how the computers are assigned to the VLANs, either simple port-based VLANs or something more sophisticated like 802.11x.

On the computers, you need to assign the default gateway to be the IP of the switch, for whatever VLAN that computer is on. If you use DHCP, this may involve some additional tweaking for things like DHCP forwarding.

At this point, the computers should be able to ping each other using the ProCurve as their default gateway.

Now, add the second switch. There's a couple of ways to do this. First, treat it like a dumb hub -- no VLANs or tagging are set up, just make its uplink port a member of one of the VLAN. This will work okay if only one VLAN will exist on the second switch.

A better way is to define both VLANs on the second switch, and to make the connection between the switches tagged ports on both ends. Give it a management IP on one of the VLANs, but do not enable IP routing. This allows you to put both VLANs on the second switch, but leaves the first switch as the inter-VLAN router.

[Fear Fas]

Dear Ben .
I think that I did what you told me.
But its still not working.. here you have the config..
Thanks !!!

Running configuration:
ip routing
ip irdp
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
untagged 1-50
ip address 192.168.0.10 255.255.255.0
exit
vlan 2
name "Secundaria"
ip address 192.168.2.1 255.255.255.0
tagged 1-50
exit
vlan 3
name "Tercera"
ip address 192.168.1.1 255.255.255.0
tagged 1-50
gvrp
ip route 192.168.0.0 255.255.255.0 192.168.0.1

[_blkdog]

It won't work unless either your clients understand tagged vlans (for instance linux hosts) or you shut down "untagged" on DEFAULT_VLAN
The idea is that 2650 can have up to 30 tagged vlans per port and only one untagged, and this is applicable to any managed switch with the difference of number of tagged vlans per port

[Muhammed Sathar]

hi,

i could see from your configuration that all the ports are tagged.

pls check that in which port you connected your pc's and other , that should be untagged.

regards,

sathar

[Alaa Saleh]

Hi,

the distibution of the ports is wrong, I dont understand why you do it in that way, I suggest to specify group of ports as untagged for vlan 1 (lets say 1-15), and a group of ports as untagged also for vlan 2 (lets say 16-30), and the same for vlan 3 (31-48).

I think 192.168.0.1 that you put, is the ip for your router or internet modem, which is in vlan 1. in this way, just vlan 1 will have the internet connection because their is no routing between the vlans (1,2 and 3)yet.

for this scenario, the configration should be like this:

ip routing
ip irdp
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
untagged 1-15
ip address 192.168.0.10 255.255.255.0
exit
vlan 2
name "Secundaria"
ip address 192.168.2.1 255.255.255.0
untagged 16-30
exit
vlan 3
name "Tercera"
ip address 192.168.1.1 255.255.255.0
untagged 31-48
gvrp
ip route 192.168.0.0 255.255.255.0 192.168.0.10
ip route 192.168.2.0 255.255.255.0 192.168.2.1
ip route 192.168.1.0 255.255.255.0 192.168.1.1
ip route 0.0.0.0 0.0.0.0 192.168.0.1

try it and tell me what happen.