2 Physical Networks and 2 VLANs

[Allsite]

Hi All,

I have been fighting with this for a couple day now and can't seem to get my switches configured correctly...  Any help would be greatly appreciated.

A quick map of my network

2 x Physical Networks - Admin and Guest

4 x HP V1910 24port w/ fiber uplinks

Admin

Default Gateway: 192.168.1.1 (RVS4000 Router)

DHCP Server: 192.168.1.3 (SBS 2003 Server)

DNS Server: 192.168.1.3 (SBS 2003 Server)

Main Admin SW:

VLAN 1: mgt (management VLAN), untagged ports 24, 28

VLAN 10: Admin, untagged ports 1 thru 23, tagged ports 25 thru 27 (

VLAN Interface 10: 192.168.1.5, 255.255.255.0, 192.168.1.1

Guest

Default Gateway: 192.168.2.1 (RVS4000 Router)

DHCP Server: 192.168.2.1 (RVS4000 Router)

DNS Server: 192.168.2.1 (RVS4000 Router)

Main Guest SW:

VLAN 1: mgt (management VLAN), untagged ports 24, 28

VLAN 20: Guest, untagged ports 1 thru 23, tagged ports 25 thru 27

VLAN Interface 10: 192.168.2.5, 255.255.255.0, 192.168.2.1

Area1 SW: 

VLAN 1: mgt (management VLAN), untagged ports 24, 27, 28

VLAN 10: Admin, untagged ports (odd) 1 thru 23, tagged ports 25 (fiber link connects to port 25 on Main Admin SW)

VLAN 20: Guest, untagged ports (even) 2 thru 22, tagged ports 26 (fiber link connects to port 25 on Main Guest SW)

VLAN Interface 10: 192.168.1.6, 255.255.255.0, 192.168.1.1

Area2 SW: 

VLAN 1: mgt (management VLAN), untagged ports 24, 27, 28

VLAN 10: Admin, untagged ports (odd) 1 thru 23, tagged ports 25 (fiber link connects to port 26 on Main Admin SW)

VLAN 20: Guest, untagged ports (even) 2 thru 22, tagged ports 26 (fiber link connects to port 26 on Main Guest SW)

VLAN Interface 10: 192.168.1.7, 255.255.255.0, 192.168.1.1

_____________________________________________________________________________

Heres the issue is that I can use VLAN 10 on Area1 and Area2 SW as long as I don't plug in the Guest uplink (port 26 on Area1 and Area2 SW's) - this leaves me with access to the Admin Network and we are all a go (uplinks for Admin network are of course all plugged in) - I can completely see all devices connected to all of the ports in VLAN 10.

As well the opposite is true - I can use VLAN 20 as long as I unplug the Admin uplinks and plug in the Guest uplinks...

As soon as I plug in both either one or the other crash and I get an error saying bad gateway...

Am I missing something glaringly obvious??

Again any help would be GREAT as I'm going crazy!!!

P.S. This thread has been moevd from ProCurve / ProVision-Based to Web and Unmanaged - Hp forum Moderator

[Matcol]

Spanning tree.

You haven't looped the VLANs in the info you have given, but the switch detects the loop anyway and is presumably blocking a link somewhere.

You haven't provided any info on where your router is in your physical description, presumably it connects to port 27 on one or both of the "Main" switches?

So I can't tell if you have inter-VLAN routing configured.

Assuming VLAN 10 AND VLAN 20 are both trunked to the router, and assuming the router has a live interface in each VLAN, then the easy way to get you working is this:

On ports 25 and 26 on all 4 switches, add in the missing VLAN. ie, on the ports that have VLAN10TAGGED, add VLAN20TAGGED and vice-versa.

[Allsite]

Thank you for the reply...

Sorry just to clarify - there are 2 x RVS4000 Routers.  One plugged into the Main Guest SW (port 23) and one plugged into the Main Admin SW (port 23)...

I am trying to keep the VLANs completely seperate with no traffic allowed to pass over to the other.

I hope that clears up the confusion???

[John Gelten]

Sounds like your config is just fine...

Under Main guest switch, you mention VLAN interface 10; I assume you meant VLAN interface 20 there.

Further assuming there are no other cables between the switches then the ones you mentioned, thinks look fine.

The only thing I can come up with is that there is a cable running from a VLAN10 interface to a VLAN20 interface on the same (or an other) switch. That would definitely create one big LAN consisiting of both VLANs 10 and 20.

I know the 1910 have only limited CLI (we don't use them) if the command show lldp info remote is available, that might give you a clou which interfaces are connected to a switch.

Just to be sure:

1. When you have the Guest uplinks disconnected, can a host connected to a Guest port on SW1 or SW2 get a DHCP-address ?

2. The uplinks from the main switches to the area switches have only one VLAN tagged on that interface (at both ends of the link exactly identical), and there are no other VLANs on those interfaces, neither tagged nor untagged ?

3. Do you have spanning-tree disabled ?  Because physically, you have created one big fat loop; enabling spanning-tree should not crash anything, it should 'just' make part of your network unusable.