HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
Web and Unmanaged
cancel
Showing results for 
Search instead for 
Did you mean: 

how to HP 1920 as a Router

 
adisuhadi
Occasional Contributor

how to HP 1920 as a Router

Hi,

I have a HP1920 and I want to setting as a router, can you tell me how with the configuration ?

Vlan1 = ISP ( internet ) ........ 103.x.x.22 255.255.255.30 103.x.x.21
Vlan2 = Server (Aplication ) ........ 10.0.1.1
Vlan3 = Static User ( Internet + Server access ) .... 10.0.2.1
Vlan4= DHCP User ( Internet + Server access ) .... 10.0.3.1

on Vlan3 and Vlan4 can access Internet and

3 REPLIES
16again
Respected Contributor

Re: how to HP 1920 as a Router

Judging from address 103.x.x.22 255.255.255.30:  You can't !

That address is a public IP address, to route to the internet, you require a device that does NAT and firewalling.
The 1920 can't do NAT

KSHKND
Advisor

Re: how to HP 1920 as a Router

The 1920's are capable of ip routing and can route traffic accross vlan but again if that's all you need, yes it is capable of that but NATing is not an option on any of HPE switches.

luckyh
Advisor

Re: how to HP 1920 as a Router

simply create your vlans and than add the ip address statement to the vlan, this enables the Layer-3 functionality and let your swich act as an MLS (router)

example:

vlan 3
   name "Server"
  untagged 1-8
   tagged 21-24
   ip address 10.10.3.1 255.255.255.0
   exit
vlan 4
   name "clients"
   untagged 9-12
    tagged 21-24
   ip address 10.10.4.1 255.255.255.0
   exit
<... more svi's here>
vlan 5 name "ISP uplink" untagged 20 ip address 103.17.18.21 255.255.255.252 exit

than add the routes (most probably to your ISP) you need if your FW has the ...22

ip route 0.0.0.0 0.0.0.0 103.17.18.22

do not forget to add a route to your connected networks on the switch on the firewall! So your firewall needs something like

ip route 10.10.0.0/20 via 103.17.18.21  (summarized route via the nexthop on your 1920)