HP Procurve 2650 routing problem

[ljshan]

I bought a HP Procurve 2650 switch but ping from one vlan to another vlan doesn't work. Then add another vlan 2 in addition to the default one:

ip routing
vlan 2
name "TESTVLAN"
untagged 3-20
ip address 192.168.2.100 255.255.255.0
wr mem
exit

Here is my network structure: I have a firewall(IP=192.168.0.1) that connects directly to the port 1 of the switch(VLAN 1). The switch DEFAULT_VLAN's ip is 192.168.0.100.
Then i install another PC with IP=192.168.2.200 that connects directly to port 10 of the switch. On the switch, i can see the route entry for the network 192.168.2.0 by typing "show ip route". Also, i can ping 192.168.2.200 from the switch. Then I want to test the route function on the switch: First I configure the route on the firewall PC(192.168.0.1):

route add -net 192.168.2.0 netmask 255.255.255.0 gw 192.168.0.100

But when i ping 192.168.0.200 from the firewall PC, it doesn't work! Since Procurve 2650 has routing enabled, why can't i ping another vlan from the default vlan? What should i do to configure the switch? I am new to managed switch. Thanks in advance.

[cenk sasmaztin · Accepted solution]

vlan 1
name "DEFAULT_VLAN"
untagged 1-2
no untagged 3-20
ip address 192.168.0.100 255.255.255.0
exit
vlan 2
name "VLAN2"
ip address 192.168.2.100 255.255.255.0
untagged 3-20


firewall pc *****
ip address 192.168.0.1
subnet mask 255.255.255.0
default gateway 192.168.0.100****

all vlan 1 member pc default gateway address must be
vlan 1 ip address

vlan 2 member pc***
ip address 192.168.2.200
subnet mask:255.255.255.0
default gateway :192.168.2.100****

all vlan 2 member pc default gateway address must be
vlan 2 ip address

no need static route for routing between vlan's

[cenk sasmaztin]

so if you want connect internet all vlan's you can write static route command

switch static route command

0.0.0.0 0.0.0.0 192.168.0.100(192.168.0.20 firewall or internet router lan nic address )


on firewall or internet router static route commad

192.168.0.0 255.255.255.0 192.168.0.100

[cenk sasmaztin]

and ip routing must be enable on switch

[cenk sasmaztin]

sorry switch static route addres 192.168.0.100 address wrong true address 192.168.0.20(internet router adddress)

so if you want connect internet all vlan's you can write static route command

switch static route command

********************************************
0.0.0.0 0.0.0.0 192.168.0.20(192.168.0.20 firewall or internet router lan nic address )
********************************************

on firewall or internet router static route commad

192.168.0.0 255.255.255.0 192.168.0.100

[ljshan]

thank you! i didn't add the default gw for 192.168.2.0/24.

[cenk sasmaztin]

you are welcome Ijshan