Inter VLAN Traffic and Routing

[VIkrant1984]

Dear Friends,

 

I need quick help to configure Inter VLAN routing on HP Aruba S2930 Switch, Requesting you to please help me, below config you can reffer,

VLAN  3012 is connected to ISP Gateway and I can ping the ISP gateway adn Google from Vlan 3012,

VLAN  3013 is connected to  Network,

I want to give internet access from this VLAN to my office network, as I unable to ping my office network and Google from VLAN 3013
I want to allow ISP traffic in my Office network
ISP --->Int 1/2 (VLAN3012)----->Int 1/21, 1/23 (VLAN3013)-----.OFFICE NETWORK

Please help to resolve the issue

ip route 0.0.0.0 0.0.0.0 XX.XX.XX.81
ip route 0.0.0.0 0.0.0.0 172.24.204.246
ip route XX.XX.XX.64 255.255.255.240 XX.XX.XX.66
ip route XX.XX.XX.131 255.255.255.255 117.205.9.130
ip route XX.XX.XX.144 255.255.255.248 XX.XX.XX.130
ip routing
interface 1/1
name "TO_ISP_01"
exit
interface 1/2
name "TO_ISP_02"
no power-over-ethernet
exit
vlan 3010
name "ISP_01_WAN_100"
untagged 1/1
tagged 1/22,1/24
ip address XX.XX.XX.245 255.255.255.252
exit
vlan 3011
name "ISP_01_100M"
untagged 1/5
tagged 1/3-1/4,1/12,1/22,1/24
ip address XX.XX.XX.129 255.255.255.248
exit
vlan 3012
name "ISP_TCL_WAN_200"
untagged 1/2
tagged 1/21,1/23
ip address XX.XX.XX.82 255.255.255.252
exit
vlan 3013
name "ISP_TCL_LAN_200M"
untagged 1/6
tagged 1/21,1/23
ip address XX.XX.XX.65 255.255.255.240
exit

[akg7]

Hello @VIkrant1984 ,

How Aruba 2930 switch conencted to two different ISPs?

Is it P2P conenction?

Is it possible to share other end config?

Thanks!

[Ihaqueit]

The first thing  the tagged port.

Cable from router to switch which port you connected.

Is it two port you connected e.g 

tagged 21 and 22 or only one port?

Connected from which router?

[akg7 · Accepted solution]

Hello @VIkrant1984 ,

First thing in Aruba/Procurve switches Tagged=Trunk Port and Untagged=Access Port

I have tested below setup in LAB and working for me.

I am assuming that ISP 1 is also has VLAN 3010 and ISP 2 has VLAN 3012 and they are passing traffic towards 2930 via trunk port.

ISP has to give below routing:
ISP 1:
ip route 0.0.0.0 0.0.0.0 XX.XX.XX.245

ISP 2:
ip route 0.0.0.0 0.0.0.0 XX.XX.XX.82

You have to do following changes into 2930 switch:

ip route 0.0.0.0 0.0.0.0 XX.XX.XX.246 -->Default route towards ISP 1
ip route 0.0.0.0 0.0.0.0 XX.XX.XX.81 -->Default route towards ISP 2
ip routing
interface 1/1
name "TO_ISP_01"
exit
interface 1/2
name "TO_ISP_02"
no power-over-ethernet
exit
vlan 3010
name "ISP_01_WAN_100"
tagged 1/1 -->Changed it to Trunk port
tagged 1/22,1/24 -->If these are tunk port then its fine and if these are Access port then change it to 'Untagged'
ip address XX.XX.XX.245 255.255.255.252
exit
vlan 3011
name "ISP_01_100M"
untagged 1/5 -->Verify if this is a access port or trunk port
tagged 1/3-1/4,1/12,1/22,1/24 -->Verify if this is access port or trunk port
ip address XX.XX.XX.129 255.255.255.248
exit
vlan 3012
name "ISP_TCL_WAN_200"
tagged 1/2 -->Changed it to Trunk port
tagged 1/21,1/23 -->If these are tunk port then its fine and if these are Access port then change it to 'Untagged'
ip address XX.XX.XX.82 255.255.255.252
exit
vlan 3013
name "ISP_TCL_LAN_200M"
untagged 1/6 -->Verify if this is a access port or trunk port
tagged 1/21,1/23 -->If these are tunk port then its fine and if these are Access port then change it to 'Untagged'
ip address XX.XX.XX.65 255.255.255.240
exit

I hope this will help you.

Thanks!

[VIkrant1984]

Hi AKG

Thanks for your, Post, Now I am able to ping 8.8.8.8 from VLAN 3012 as well as 3013, and My Office system is COnnected to Inteface 1/21 & 23 (Vlan 3013) and syatem IP in same subnet of VLAN 3013 but still I am unable to ping  Vlan 3013 IP from System as welll as 8.8.8.8,  Im missing something, below is my routing

Vikrant Ambhore

10:53 AM (0 minutes ago)

to me

s2930-www-IT# sh ip

Internet (IP) Service

  IP Routing : Enabled

  Default TTL     : 64

  Arp Age         : 20

  Domain Suffix   :

  DNS server      :

                       |                                            Proxy ARP

  VLAN                 | IP Config  IP Address      Subnet Mask     Std  Local

  -------------------- + ---------- --------------- --------------- ----------

  DEFAULT_VLAN         | Disabled

  ISP_01_WAN_100       | Manual     XX.XX.XX.245  255.255.255.252  No    No

  ISP_01_100M          | Manual     XX.XX.XX.129   255.255.255.248  No    No

  ISP_TCL_WAN_200      | Manual     XX.XX.XX.82  255.255.255.252  No    No

  ISP_TCL_LAN_200M     | Manual     XX.XX.XX.66   255.255.255.240  No    No

s2930-www-IT# sh ip route

                                IP Route Entries

  Destination        Gateway         VLAN Type      Sub-Type   Metric     Dist.

  ------------------ --------------- ---- --------- ---------- ---------- -----

  0.0.0.0/0          XX.XX.XX.81  3012 static               1          1

  0.0.0.0/0          XX.XX.XX.246  3010 static               1          1

  XX.XX.XX.64/28   ISP_TCL_LAN_... 3013 connected            1          0

  XX.XX.XX.128/29   ISP_01_100M     3011 connected            1          0

  XX.XX.XX.131/32   XX.XX.XX.130   3011 static               1          1

  XX.XX.XX.144/29 XX.XX.XX.130   3011 static               1          1

  XX.XX.XX.80/30  ISP_TCL_WAN_200 3012 connected            1          0

  127.0.0.0/8        reject               static               0          0

  127.0.0.1/32       lo0                  connected            1          0

  XX.XX.XX.244/30  ISP_01_WAN_100  3010 connected            1          0

[VIkrant1984]

Hi AKG,

Now It's Perfect, I am able to access Internet, Thank u so much for your help