HP Procurve 5308xl Vlan issues.

[Andrew Davenport]

Hi,

I am trying to set up a multiple VLAN environment with a number of subnets and servers.
I wish to divide the ports into groups for each subnet.
I do not want people in the groups to be able to browse the other subnets but i want to route traffic between them.
I am using several HP Proliant Server with the onboard adapters in a teamed configuration.
What is the best method for me to configure this solution.
Do i need an external router/firewall to do the routing?
How do i configure the VLAN settings on the switch and in the adapter teams?

Thanks in advance.
Andy

[Andrew Davenport]

Sorry i forgot to mention that there are remote switches connected that i also need to split 50/50 and retain VLAN connections over the Fibre. This is because 2 subnets are located in the same building but need to be kept apart.

[Jonathan Axford]

Hi Andrew,

The HP5308 is Layer 3 capable, so it will happily route between subnets.

You can use normal Static VLAN assigment for the ports, and ensure that host device's are 'untagged' in the relevant VLANS and then 'Tag' the interswitch links. This ensures that all VLAN traffic not destined for the local switch will be passed on to the other switches.

As for not wanting users to be able to browse other subnets i am not quite sure what you mean! One way would be to use access lists to restrict what traffic can flow between subnets, But without checking i can't remember if the 5300 has the ability to do this....

Hope this helps a little... :-)

[Andrew Davenport]

Ok i understand all that however i have come across the following problem.
When i dont have any cables patched into the ports i can assign them as untagged to a VLAN, as soon as i patch in from a Proliant DL380 G4 server they switch back to NO and the listings show C8,C11 as opposed to C8-C11, the server is running the onboard NIC's with Teaming Enabled, i notice that there is a VLAN tab in the teaming config, do i need to set anything here?