Inter-vlan routing and / or static routing?

[lorn10]

A happy new year to all!

It has emerged a new little question. It would be great if someone can provide an example of the most logical way to allow inter VLAN routing at a Comware MSR router.

There are plenty of config examples out there but usually the most of them are quite complex and large.

So what’s the current situation? I have three VLAN. It turned out, that at least one computer (192.168.2.21) in VLAN2 should be reachable from VLAN1. That can be achieved according to the mentioned examples over the VLAN interfaces or a static route.

Well, in my case, just a simple network topology is present.

VLAN 1 is the main business network group.
VLAN 2 contains all the IP phones, the VoIP server, and one Guest computer (which should be reachable from VLAN1).
VLAN 3 is the public group; it is isolated over an ACL rule from both others.

The network settings are:

192.168.1.x  =>  VLAN1 (untagged)
192.168.2.x  =>  VLAN2 (tagged)
192.168.3.x  =>  VLAN3 (tagged)

The interface are defined as follow:

interface GigabitEthernet2/0
 port link-mode route
 ip address 192.168.1.1 255.255.255.0
 rip version 2 multicast
 dhcp server apply ip-pool vlan1

#              

interface GigabitEthernet2/0.2
 vlan-type dot1q vid 2
 ip address 192.168.2.1 255.255.255.0
 dhcp server apply ip-pool vlan2

#              

interface GigabitEthernet2/0.3
 vlan-type dot1q vid 3
 firewall packet-filter 3333 inbound
 ip address 192.168.3.1 255.255.255.0
 dhcp server apply ip-pool vlan3

A full config example of my system can be found here:

https://community.hpe.com/t5/Comware-Based/Config-migration-to-newer-Comware-versions/td-p/7086562/page/2#.X-8wiRIxm70

Some additional information can be found in the following two older topics.

https://community.hpe.com/t5/Comware-Based/Inter-Vlan-Routing/td-p/2317914#.X-8tZhIxm71

https://community.hpe.com/t5/Comware-Based/Adding-a-second-IP-in-the-same-subnet-to-a-vlan/td-p/6876494#.X-8wARIxm72

[lorn10 · Accepted solution]

Okay, here follows now a final status update to this topic. I have migrated in the meantime to a newer Comware 7 based HP MSR1002-4 router (JG875A).

My config is almost the same like at my previous Comware 5 based 3Com MSR20 router (JF283A). Interestingly the inter-vlan routing between VLAN1 and VLAN2 works now as it should. I am able to ping all the IP-phones in VLAN2 from VLAN1. This worked right from the beginning, - no additional rule or settings was applied.

So my conclusion is that there exists a bug in the last MSR20.SI_5.20.R2516P13 firmware release of my old MSR20 router. Because this model is long EOL this will most likely newer be fixed.

Whatever, the MSR1002-4 seems to be a good replacement. It is newer, runs stable and has more features. The only drawback is that only one SIC module can be installed although it has two slots. The MSR20 series was able to handle two modules because it has two fully featured SIC slots. And regarding the software, the Comware 7 Web-UI is far less feature rich then the old Comware 5 Web-UI. It offers only some very rudimental settings, no deeper config options are present (these have to be set at the CLI).