hp 8212zl trafficunable to ping from vlan 30 to the default vlan

[karimbidal]

hi hp customers,

i have installed a hp 8212zl switch routing.

i have readen hp 8212 zl 's docs but i was enable to understand the problem i met.

I've create a vlan

vlan 30 named storage vlan, with the ip interface  192.168.2.254/24

 VLAN                 | IP Config  IP Address      Subnet Mask     Std  Local
  -------------------- + ---------- --------------- --------------- ----------
  DEFAULT_VLAN         | Manual     192.168.1.254   255.255.255.0    No    No
  MGMT                 | Manual     192.168.5.254   255.255.255.0    No    No
  WIFI_GUEST           | Disabled
  VLAN20               | Disabled
  storage_vlan         | Manual     192.168.2.254   255.255.255.0    No    No

I try to verify that the routing switch can route my traffic from vlan 30 to the default valn.

i have a computer PC1 on that vlan 30

PC1  has this ip configuration : 192.168.2.75/24 and gateway is :192.168.2.254/24

PC2 has this ip configuration : 192.168.1.60/24    gateway : 192.168.1.254/24

Ping response is enabled on both.

from PC 1 i can reach with ping request the following adresses 192.168.2.254, 192.168.1254. But I can't ping the PC2 adresse.

this is the routing configuration :

HP-8212zl# show ip route

                                                                                               IP Route Entries

  Destination        Gateway         VLAN Type      Sub-Type   Metric     Dist.
  ------------------ --------------- ---- --------- ---------- ---------- -----
  0.0.0.0/0          192.168.1.205   1    static               1          1
  127.0.0.0/8        reject               static               0          0
  127.0.0.1/32       lo0                  connected            1          0
  172.16.1.0/24      192.168.1.253   1    static               1          1
  192.168.1.0/24     DEFAULT_VLAN    1    connected            1          0
  192.168.2.0/24     storage_vlan    30   connected            1          0
  192.168.5.0/24     MGMT            5    connected            1          0

For my understand and go forward I need your help.

Thank you for your help.

hp 8212zl configuration :

 J9091A Configuration Editor; Created on release #K.15.12.0012
; Ver #05:08.41.ff.3f.ef:63
hostname "HP-8212zl"
module 1 type j9534a
module 2 type j9534a
module 3 type j9538a
module 4 type j9154a
module 5 type j9534a
module 6 type j9534a
module 7 type j9534a
module 8 type j9534a
module 9 type j9534a
module 10 type j9534a
module 11 type j9534a
module 12 type j9534a
trunk B1-B2 trk1 lacp
trunk B3-B4 trk2 lacp
trunk A9-A10 trk3 lacp
trunk A11-A12 trk4 lacp
timesync sntp
time timezone 60
ip access-list extended "GUEST"
   exit
ip default-gateway 192.168.1.205
ip directed-broadcast
ip route 0.0.0.0 0.0.0.0 192.168.1.205
ip route 172.16.1.0 255.255.255.0 192.168.1.253
ip route 192.168.5.0 255.255.255.0 192.168.1.253
ip routing
no ip load-sharing
snmp-server community "public" unrestricted
snmp-server host 192.168.1.77 community "public"
snmp-server host 192.168.1.250 community "public"
snmp-server contact "Karim Maroufi" location "PRIMES"
router rip
   redistribute connected
   exit
vlan 1
   name "DEFAULT_VLAN"
   no untagged A2-A3,B13,B17,B21,D2
   untagged A1,A4-A8,A13-A22,B5-B12,B14-B15,B18-B20,B22,C1-C8,D1,E1-E24,F1-F24,G1-G24,H1-H24,I1-I24,J1-J24,K1-K24,L1-L24,Trk1-Trk4
   tagged A23-A24,B16,B23-B24
   ip address 192.168.1.254 255.255.255.0
   exit
vlan 5
   name "MGMT"
   untagged A2,A23-A24,B21,B23-B24,D2
   tagged A1
   ip address 192.168.5.254 255.255.255.0
   exit
vlan 10
   name "WIFI_GUEST"
   tagged A23-A24,B23-B24,D2
   no ip address
   exit
vlan 20
   name "VLAN20"
   untagged B13,B17
   no ip address
   exit
vlan 30
   name "storage_vlan"
   untagged A3
   ip address 192.168.2.254 255.255.255.0
   exit
spanning-tree Trk1 priority 4
spanning-tree Trk2 priority 4
spanning-tree Trk3 priority 4
spanning-tree Trk4 priority 4
no tftp server
no autorun
no dhcp config-file-update
no dhcp image-file-update
password manager

[Vince-Whirlwind]

Which switchports are each of the PCs patched to?

Can PC2 ping its default GW?

Put both PCs on the same subnet/VLAN. Can they ping each other?

[karimbidal]

bonjour!

prior following thank you for your help.

    Which switchports are each of the PCs patched to?

IP ARP table

  IP Address       MAC Address       Type    Port
  ---------------  ----------------- ------- ----
  192.168.1.60     001372-2dee44     dynamic B18
  192.168.1.201    001109-5bcf41     dynamic B22
  192.168.1.205    001109-5bc20b     dynamic B22
  192.168.1.250    000c29-8ef746     dynamic B22
  192.168.1.253    441ea1-c2e4d6     dynamic D1
  192.168.2.75     0024e8-d55e69     dynamic A3

Pc 1 is connected to A3    switch port

PC2 is connected to B18 switch port

    Can PC2 ping its default GW?

bellow this my ping request to the default gateway

C:\>ping 192.168.1.254

Envoi d'une requête 'ping' sur 192.168.1.254 avec 32 octets de données :

Réponse de 192.168.1.254 : octets=32 temps<1ms TTL=255
Réponse de 192.168.1.254 : octets=32 temps<1ms TTL=255
Réponse de 192.168.1.254 : octets=32 temps<1ms TTL=255
Réponse de 192.168.1.254 : octets=32 temps<1ms TTL=255

and this is my ping request to PC1 from PC2

C:\>ping 192.168.2.75

Envoi d'une requête 'ping' sur 192.168.2.75 avec 32 octets de données :

Réponse de 192.168.2.75 : octets=32 temps=2 ms TTL=127
Réponse de 192.168.2.75 : octets=32 temps=1 ms TTL=127
Réponse de 192.168.2.75 : octets=32 temps=1 ms TTL=127
Réponse de 192.168.2.75 : octets=32 temps=1 ms TTL=127

Statistiques Ping pour 192.168.2.75:
    Paquets : envoyés = 4, reçus = 4, perdus = 0 (perte 0%),
Durée approximative des boucles en millisecondes :
    Minimum = 1ms, Maximum = 2ms, Moyenne = 1ms

    Put both PCs on the same subnet/VLAN. Can they ping each other?

i suppose You would verify if the firewall block the requests so when i put them in the same vlan 30

i make this configuration on PC2

Configuration IP de Windows


Carte Ethernet Connexion au réseau local:

        Suffixe DNS propre à la connexion :
        Adresse IP. . . . . . . . . . . . : 192.168.2.60
        Masque de sous-réseau . . . . . . : 255.255.255.0
        Passerelle par défaut . . . . . . : 192.168.2.254

C:\>ping 192.168.2.75

Envoi d'une requête 'ping' sur 192.168.2.75 avec 32 octets de données :

Réponse de 192.168.2.75 : octets=32 temps=1 ms TTL=128
Réponse de 192.168.2.75 : octets=32 temps=1 ms TTL=128
Réponse de 192.168.2.75 : octets=32 temps=1 ms TTL=128
Réponse de 192.168.2.75 : octets=32 temps<1ms TTL=128

Statistiques Ping pour 192.168.2.75:
    Paquets : envoyés = 4, reçus = 4, perdus = 0 (perte 0%),
Durée approximative des boucles en millisecondes :
    Minimum = 0ms, Maximum = 1ms, Moyenne = 0ms

So I suppose there is a configuration to make in order to enable traffic throught default_vlan sent from other vlans

[karimbidal]

I would to add this information.

from PC1 ping request cannot reach the default vlan except the the switch-router ip interface on the default vlan....

But I have installed a web server on PC2 running.

http request from PC1 reach the server because it displays a web page installed on PC2.

So I think there a security setting based on ICMP protocol to test for enabling PING request from others VLAN to the default van.

I have readden docs about hp 8212zl (Switch Software Management and configuration.pdf, advanced_traffic_management.pdf, Multicast and Routing Guide K_KA_KB_15_16 .pdf) and i didn't find this information.

What do you think?

How could I ckeck this?

Thanks for your contribution

[karimbidal]

hi!,

i follow my investigation but no solution from my side... I would to understand what happen this default vlan.

Please  hp experienced?

[karimbidal]

So after searching

idecided to verify an obvious think...

even if I set the fire wall enabling ping request.... the anti virus was blocking too....

Sooo

finally in conclusion I think there no things to enable in the default_vlan properties...

sham

ok thanks...

[Vince-Whirlwind]

It's a default Windows thing, to block ICMP that is from a different subnet.

Not the switch.

[karimbidal · Accepted solution]

The hp8212zl it's new device for me.

It's so sofisticated that i was thinking it was the device with some protection settings. But the problem was under my nose. the pc firewall....

thank you for your contribution again.