Help configuring 2600 series switch J4900B

[John Henna]

Hello.

I`m new to configuring managed switches and VLANs, so I hope somebody will help me with this case.

I`m setting up a network with 6 different VLANs.

VLAN 12: 64.23.100.1 255.255.255.128
VLAN 13: 64.23.100.129 255.255.255.128
VLAN 14: 64.23.103.1 255.255.255.128
VLAN 15: 64.23.103.129 255.255.255.128
VLAN 16: 64.24.12.1 255.255.255.128
VLAN 17: 64.24.12.129 255.255.255.128
VLAN 18: 66.5.16.1 255.255.255.128
VLAN 19: 66.5.16.129 255.255.255.128
VLAN 60: 10.1.32.1 255.255.224.0 (management, not official IPs, not to be routed out on the internet)

All of these VLANs shuld be able to reach each other, and they should be routed out through the ISPs gateway exept the management VLAN witch should be completly seperate.

There also needs to be storming control setup.

The routing out on the internett is done via a linknet, where the ISP side should have IP 195.203.120.121 and my side 195.203.120.122....

If somebody would explain (ceep in mind I`m new to this) the best way to set this up, I`m a happy HP camper.

[John Henna]

Sorry, typo, 9 VLANs :)

[Bruce Campbell_3]

Here's a start...

ip default-gateway 195.203.120.121
ip routing
ip route 0.0.0.0 0.0.0.0 195.203.120.121
vlan 12
ip address 64.23.100.1 255.255.255.128
exit
vlan 13
ip address 64.23.100.129 255.255.255.128
exit
vlan 14
ip address 64.23.103.1 255.255.255.128
exit
vlan 15
ip address 64.23.103.129 255.255.255.128
exit
vlan 16
ip address 64.24.12.1 255.255.255.128
exit
vlan 17
ip address 64.24.12.129 255.255.255.128
exit
vlan 18
ip address 66.5.16.1 255.255.255.128
exit
vlan 19
ip address 66.5.16.129 255.255.255.128
exit
vlan 60
ip address 10.1.32.1 255.255.224.0
exit
vlan 2000
ip address 195.203.120.121 255.255.255.x
exit
untagged 50
exit

and connect port 50 to your ISP.

The 2600 doesn't support ACLs so I
don't see a way of keeping your mgmt
net inaccessible from your
other nets, other than not doing
routing for that net at all.

I don't think the 2600 supports virus
throttling.

[Matt Hobbs]

You can keep the management VLAN separate by enabling the management VLAN feature. Otherwise you could control access to it with 'ip authorized-managers'

[John Henna]

Thank you.

In cli I used the command "management-vlan 60" is that okay?.

Should I set a broadcast-limit for storming control?, what should I set the limit to?.

I guess the ip address on vlan 2000 should be 195.203.120.122 and not the same as the isp side.

Anything alse you would recomend setting on a new switch?.

PS where can I find good examples/templates on banners for the switch?.