HP 1910 8G - gateway

[airwolf_it]

Hi all,

I'm looking for your support, I'm becomming crazy

I need to configure HP 1910 8g for a special situation.

I have 2 different and physically separated network each one with their gateway/firewall.

all the device are close.

NET1 : 192.168.100.xxx -- gw 192.168.100.252

NET2:  192.168.10.xxx -- gw 192.168.10.1

both the network have to get access on a remote service on network 10.0.19.xxx

so i would want to use only one 1910 8G to offer 10.0.19.xx access

I have setup 3 Vlan:

Vlan 1 - 192.168.100.253

Vlan 10 - 192.168.100.254

Vlan 19 - 172.19.0.14

the routing to 10.0.19.xxx through 172.19.0.14 work well

and Vlan1 can't reach Vlan10 and Vlan10 can't reach Vlan1

the problem is how to setup 2 different default route to the firewalls.

I mean:

Vlan 1 must have 192.168.100.252 like gateway

Vlan 10 must have 192.168.10.1 like gateway

I tried to create 2 static route

0.0.0.0  0.0.0.0  Vlan-interface1 192.168.100.252

0.0.0.0  0.0.0.0  Vlan-interface10 192.168.10.1

but both network are forwarded to the same firewall and only one one can browse internet.

is there a way to setup a specific gateway for every Vlan??

thanks for your help

Matteo 

[TerjeAFK]

As far as I know you can only have one default gateway on most basic HP switches like the 1900 series. If you want more than one default gateway you need a switch with VRF support, like Comware switches (it's called vpn-instance there). Then you can put different VLANs in their own vpn-instance and have one routing table per instance.

Otherwise, you need to route everything to one of your firewalls and then maybe you can use source-based routing on that one to do what you want?

[Vince-Whirlwind]

Remove IP configuration from the switch and patch your firewalls into switchports that are in the correct VLAN. The IP address your devices are trying to recah should be on the firewall interface their VLAN is connected to.

[airwolf_it]

thanks for your suggestions.

unlucky in the end I installed 2 devices instead only one.

thanks angain

Matteo