IP Routing question between switches

[sphar]

Hi everyone,

I am migrating from 147.x.y.z to 10.x.y.z subnets

My switches are:
Procurve 2848 core switch
Procurve 2524 access switch on each floor
Running a w2k3 DC DNS/DHCP server 147.x.y.1

I want to migrate the 1st floor, will the following work???

Add 10.x.y.z DHCP scope on DC
Turn on IP routing on 2848
Create VLAN on 2524 ports a1-a8
Add IP address 10.x.y.z
Add IP address-helper being 147.x.y.1
Add PC's to a1-a8

Will the PC's on 2524 ports a1-a8 being able to access the DHCP server and get 10.x.y.z address?

How will the 2524 switch know about 147 subnet if it doesn't support routing???

Thanks!

[Jeff Carrell]

so far so good, you are going in the right direction, mostly :-)

here's some minor changes to your config:

on the 2848:
create vlan 10.x.y.z
add ip addr 10.x.y.1
add ip helper-address 147.x.y.1
add tag

on the 2524:
create vlan 10
add untag 1-8
add tag


the pc's will now be in the vlan 10 on the 2524, their dhcp request will pass up to the 2848, it will "forward" that request to the dhcp srvr - sourcing the request from network 10, the dhcp server will give out a network 10 addr (since you have its scope setup, make sure the scope def g/w is the 2848 ip addr of vlan 10), the reply gets back to the pc, and pc can now communicate in the network...

hth...jeff

[sphar]

Hi Jeff,

Thanks for the tips.

So my switch configs will be:

On DC
Add second IP to NIC (10.x.y.5)
Add DHCP scope 10.x.y.z

2848
ip routing
default_vlan ... ip 147.x.y.16

Add vlan called vlan10
add ip address 10.x.y.1
add ip helper address 147.x.y.1 (DC)
add tag

2524
add vlan called vlan10
add ip address 10.x.y.16
untagged 1-8
add tag

Results / questions

PC on 2524 requests a dhcp address
The switch port has an IP 10.x.y.z and is tagged to vlan 10
So the dhcp client on PC uses vlan10 on 2848 to receive its dhcp config

How can a business unit span multiple switches if required via a vlan?
Will the PC be able to communicate with clients in 147.x.y.z subnet?

Thanks

[Jeff Carrell]

1) you do not need to add a 2nd nic in the DC

2) you do not need an ip addr on the 2524, in fact its better to not have but only the single ip addr in vlan 1

3) not sure what you are asking on the question: How can a business unit span multiple switches if required via a vlan?

4) yes, since you have routing on the 2848 and each of its vlans have an ip addr, all devices on all vlans can communicate with each other

hth...jeff

[sphar]

Hi Jeff,

1) yep, no need to add 2nd nic, but I will need to add second IP (10.x.y.z) to DC

3) If I have 80 devices on a floor and want them to belong to the same vlan across multiple 2524 switches, how is this done on procurve switches?? (on cisco its VTP).

Thanks for the help!

[Jeff Carrell]

1) yep, no need to add 2nd nic, but I will need to add second IP (10.x.y.z) to DC

why? remember, the switch will do all the work getting the dhcp request from vlan10 to the DC on 147...as long as you have the scope for vlan10, the dhcp server will also work correctly - it does not require an ip addr in vlan10...

3) If I have 80 devices on a floor and want them to belong to the same vlan across multiple 2524 switches, how is this done on procurve switches?? (on cisco its VTP).

ah, you have the same vlan on each switch and tag the switch-to-switch link ports in the new vlan...then have the vlan on the 2848, ip addr for the vlan (for routing), ip helper-address pointing to DC, scope in DC for this vlan...

make sense?

[sphar]

1) Add second IP (10.x.y.z) to DC

why? remember, the switch will do all the work getting the dhcp request from vlan10 to the DC on 147...as long as you have the scope for vlan10, the dhcp server will also work correctly - it does not require an ip addr in vlan10...

Why? Because wont the 10.x.y.z DHCP scope require a 10.x.y.z address for the DC DNS scope option ie.

10.x.y.z dhcp scope has 10.16.128.80 - 10.16.128.240 as its IP lease range.

Gateway as the 2848 ip addr of vlan 10 (say 10.x.y.254)

DNS address be for the DC will be the second IP address added to the DC NIC (which already has the 147 IP).

Hope that clears things up.

[Jeff Carrell]

1) Add second IP (10.x.y.z) to DC

why? remember, the switch will do all the work getting the dhcp request from vlan10 to the DC on 147...as long as you have the scope for vlan10, the dhcp server will also work correctly - it does not require an ip addr in vlan10...

Why2? Because wont the 10.x.y.z DHCP scope require a 10.x.y.z address for the DC DNS scope option ie.

10.x.y.z dhcp scope has 10.16.128.80 - 10.16.128.240 as its IP lease range.

Gateway as the 2848 ip addr of vlan 10 (say 10.x.y.254)

DNS address be for the DC will be the second IP address added to the DC NIC (which already has the 147 IP).

Hope that clears things up.

jc - well, you're doing more than you have to...it is a bit more simple...

here's what the dhcp srvr needs:
1) nic with 147 addr (only)
2) dhcp scope for 147
def g/w in 147
dns addr of DC
lease range
3) dhcp scope for 10.x.y.0
def g/w 10.x.y.254
dns addr of DC (this will be dns addr 147.----
4) lease range 10.16.128.80 - 10.16.128.240

again, the switch when sending the dhcp request from the pc from vlan10, will source the request from its vlan10 addr to the dhcp srvr on 147 (its called DHCP option 82), the dhcp srvr knows to give an addr from the vlan10 scope - even tho the dhcp srvr does not have a vlan10 addr...

as long as the switch has the ip helper-addr statement on vlan10, ip routing enabled, ip addr on vlan1 (net 147) and vlan10, this all works...

try it :-)

see the DHCP Relay section of this manual, starting on page 5-123:
http://cdn.procurve.com/training/Manuals/3500-5400-6200-8200-MRG-Jan08-5-IP-Routing.pdf

it has some diagrams of what this looks like...

[sphar]

Thanks Jeff, I'll put it to the test in the test lab over the next few days.

Steve

[sphar]

Hi Jeff, hope you or another tech can check the following config as the DC DHCP server is not issue'ing the client with DHCP lease!

My DC is 147.x.y.1
I have a 2824 connected to a 2524 (port 1 on each switch). Port 21 is the DC.
10.16.128.0 is the new subnet!

Hope you can spot the problem.

hostname "hp2824"
ip default-gateway 147.x.y.1
ip routing
no timesync
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
untagged 2-20,22-24
ip address 147.x.y.10 255.255.255.0
no untagged 1,21
exit
vlan 10
name "10DOT"
ip address 10.16.128.20 255.255.254.0
ip helper-address 147.x.y.1
tagged 1,21
exit
no stack
spanning-tree protocol-version MSTP
password manager


hostname "hp2524"
time daylight-time-rule None
cdp run
ip default-gateway 10.16.128.20
vlan 1
name "DEFAULT_VLAN"
untagged 7-26
ip address 147.x.y.5 255.255.255.0
no untagged 1-6
exit
vlan 10
name "10DOT"
untagged 2-6
ip address 10.16.128.18 255.255.254.0
tagged 1
exit
no stack
no aaa port-access authenticator active
spanning-tree protocol-version stp
password manager