Bridging VLAN's with same subnet does not work on HP 2910al switch

[jjoensson]

Hi!

I'm setting up a network with a Citrix Branch Repeater VPX. All equipment must be on 2 VLAN's to have traffic pass trough the Branch Repeater which acts as a bridge.

I have created VLAN1 and VLAN2. My firewall is on VLAN1 and the WAN interface of the BR is also on that VLAN.

The firewall got an IP-address of 172.16.0.10 and the switch has an IP-address of 182.16.0.1 on the same VLAN.

All my other equipment is on VLAN2. It has it's default gateway set to the one of the firewall (172.16.0.1) and is in the range

172.16.0.100 - 199. The LAN interface of the BR is also on  VLAN2.

It's not that communication does not work. It does. But it's extremly bad. If you PING the firewall (on VLAN1) from a computer on VLAN2 it has packet loss. You can't access the switch on it's IP-address when you're on VLAN2. Only if you're on VLAN1.

I'm pretty sure it's not the BR causing the problem. Because if I attach a cable in a port on VLAN1 and the other end of the cable in a port on VLAN2 it works but with same bad behavior as with the BR.

The switch configuration:

; J9148A Configuration Editor; Created on release #W.14.49

hostname "HP2910al"

module 1 type J9148A

ip default-gateway 172.16.0.10

ip routing

vlan 1

    name "VLAN01"

    untagged 1-6

    ip address 172.16.0.1 255.255.255.0

    tagged 45-48

    no untagged 7-44

    exit

vlan 2

    name "VLAN02"

    untagged 7-44

    tagged 45-48

    no ip address

    exit

vlan 3

    name "VLAN03"

    ip helper-address 172.16.0.20

    ip address 17.17.0.1 255.255.255.0

    tagged 1-48

    exit

fault-finder bad-driver sensitivity high

fault-finder bad-transceiver sensitivity high

fault-finder bad-cable sensitivity high

fault-finder too-long-cable sensitivity high

fault-finder over-bandwidth sensitivity high

fault-finder broadcast-storm sensitivity high

fault-finder loss-of-link sensitivity high

fault-finder duplex-mismatch-HDx sensitivity high

fault-finder duplex-mismatch-FDx sensitivity high

timesync sntp

sntp unicast

sntp server priority 1 10.40.1.50 3

ip route 0.0.0.0 0.0.0.0 172.16.0.10

snmp-server community "public" operator

snmp-server community "private" unrestricted

snmp-server contact "Helpdesk" location "Outer space" no autorun password manager password operator

This is something that is possible on a Cisco switch.But I can't see anything special in the configuration on another site we have running.

Any ideas or is the switch just not capable of doing the same as a Cisco switch ?

:-) Jens

[Michael_Breuer]

Hi Jens,

did you verify that you didn't create any looping condition? Keep in mind that your posted config will not recognize any loops in your network, because Spanning Tree protocol is not enabled. Check "sh int port" output if you have any congestions due to loops.

Cheers,

Michael

[TurboPower]

It sound's a lot like duplex issues, I'm sure the switch can do.