Procurve 2848 Vlan Routing

[Anakonda]

From time to time we'r testing some applications which are webbased.

I would like to configure our Procurve 2848 configure(for example port 27 as vlan) and make a route between this port and our network.

it's actualy a separate network

Original Network on Default vlan:
192.168.1.0 255.255.255.0

default gateway: 192.168.1.1

Test network on vlan 2 port 27:
192.168.2.1 255.255.255.0

Q1: How to assign a IP address to this vlan port.

Q2: How to route this port to default vlan.


all machines on vlan 2 on port 27 must be able to access internet.


Rene

[cenk sasmaztin]

hi Rane

I make config for your test

yess..

primary setup on switch enable ip routing

whit this command

config)#ip routing

and assign ip address vlan 1

config-vlan1)#ip address 192.168.1.1/24

and you can create new vlan 2

config)#vlan 2

and assign ip address

config-vlan2)#ip address 192.168.2.1/24

after assign vlan 2 member port on switch (all port default member vlan 1)

for example interface 27

config-vlan2)#untagged 27

and write static routig command on switch for internet connection

0.0.0.0 0.0.0.0 192.168.1.10 (1.10 ip internet router lan ip )

and you can must be write on internet router static ip command

192.168.1.0 255.255.255.0 192.168.1.1
192.168.2.0 255.255.255.0 192.168.1.1

ok..... at the present time connect pc on switch

pc 1 vlan1 member pc

ip address 192.168.1.20
subnet mask 255.255.255.0
default gateway 192.168.1.1


pc 2 vlan 2 member pc

ip address 192.168.2.20
subnet mask 255.255.255.0
default gateway 192.168.2.1

good luck

[Anakonda]

Thanks for your quick responce.

The switch is already configured.

All ports are member of default vlan.

i have configured port 27 throug hp management tool as vlan 2. without ip address.

now i can't delete this port anymore.

First i need to aasign a ip address to this port.
Then i need to make the route between these two vlan's.

[cenk sasmaztin]

Hi rene

fristly
you can create vlan 2 on switch and assign ip address vlan 2

192.168.2.1/24

and you can must be int 27 untagged member vlan 2

imposible assign ip address on port
ip address assign on vlan interface

[Anakonda]

when i try to set ip addres i receive the message that the ip address exists.

How can i check that.

Thanks for your support

[Anakonda]

Ok,

I have now the following configured:

Default_Vlan: 192.168.1.10
Vlan 2: 192.168.2.1

Default gateway for both vlan's is : 192.168.1.1

Ip route is enabled.

So far so good.

But how can i access Default_vlan and internet?

[cenk sasmaztin]

please look attach file

[Anakonda]

Thanks for the attached file.

Now i can ping other pc's, but the pc's on the send vlan can not internet.

These are the results of my sho ip:

VLAN: VLAN_2
IP CONFIG: Manual
IP ADDRESS: 192.168.2.10
SUBNET MASK: 255.255.0.0
PROXY ARP: NO

[cenk sasmaztin]

All the same ...

change your ip address my configuration
and you make test

cenk

[cenk sasmaztin]

sory soryy

please send me sh run print now

[Anakonda]

We have modified the ip and the subnet.

Default_Vlan: IP: 172.27.1.10
Subnet: 255.255.0.0
Ip range: 172.27.0.0
Default gateway: 172.27.0.254
Reserverd ports: 1-26 28-48

RESVMH_VLAN: 172.28.1.10
Subnet: 255.255.0.0
IP Range: 172.28.0.0
Reserved port: 27

Must used default gateway 172.27.0.254

Computers on 172.28.0.0 must communicate with 172.27.0.0 and internet.

Thanks for your support.

[EckerA]

Hi,
you just need a route at your default gateway
(172.27.0.254) back to the switch.
something like
172.28.0.0 255.255.0.0 172.27.1.10

and than everthing should work fine.
alex

[cenk sasmaztin]

you can write on internet router static route command

172.27.0.0 255.255.0.0 172.27.1.10
172.28.0.0 255.255.0.0 172.27.1.10

cenk

[Anakonda]

When i type the following command:

ip route 172.28.0.0 255.255.0.0 172.27.1.10

i receive this massage:

172.27.1.10 can not be switch ip address and route gateway at the same time.

My default gateway is 172.27.0.254

[cenk sasmaztin]

Rene

****************************************************
switch on only have one routing

0.0.0.0 0.0.0.0 172.27.0.254
****************************************************




*****************************************************
on internet router routing command

172.27.0.0 255.255.0.0 172.27.1.10
172.28.0.0 255.255.0.0 172.27.1.10
*****************************************************

[Anakonda]

Ok,

Why i receive this message:

172.27.1.10 can not be switch ip address and route gateway at the same time.

I think i must delet all route and recreate the new one.

[Anakonda]

For your information, the ip route print screen.

[EckerA]

hi,
now you have added the route to the wrong device. you need to add the route at your default gateway and not!! the HP Switch.
alex

[Anakonda]

Ok,

Did you red the previous recomendation of cenk sasmaztin.

If i type ip route 172.27.1.0 255.255.0.0 172.27.0.254 i receive this message:

172.27.1.0/16 inconsistent address and mask

[EckerA]

172.27.1.0 is a host ip from your subnet 172.27.0.0/16. because of this you can't add the route.
but why and where do you want to add that route.
the sh run from your jpg previosly was just fine. you simply need to add the route
172.28.0.0 255.255.0.0 172.27.1.10 to your gateway and everthing is fine.
you con try this with a client in 172.27.0.0 and change the default gateway from that client to 172.27.1.10
Now you should be able to ping that client from your new vlan. this means that then everthings is fine on the Switch. than add the route to the gateway and you can get to the internet or whatever is behind that gateway.
alex

[cenk sasmaztin]

:D

you can write on internet router below routing command

172.27.0.0 255.255.0.0 172.27.1.10
172.28.0.0 255.255.0.0 172.27.1.10
**************************************************

[Anakonda]

Thanks,

i'll try tomorrow.

i'll also add this network to our ISA server.

[Anakonda]

I have created a network on our ISA.

From my pc (172.28.1.5) which is connected to the vlan 2 port 27 i can not ping the network on vlan 1. and i can not internet.

I have attached the latest screenshot of my Procurve config.

[EckerA]

Hi Rene,
you don't need those last two routes.
just remove them and try again.
alex

[cenk sasmaztin]

I want cry Rene

please you read be carefull

Rene

****************************************************
SWICH ONLY HAVE ONE ROUTING COMMAND
0.0.0.0 0.0.0.0 172.27.0.254
****************************************************




*****************************************************
YOU CAN WRITE THIS COMMAND ONLY INTERNET ROUTER

172.27.0.0 255.255.0.0 172.27.1.10
172.28.0.0 255.255.0.0 172.27.1.10
*****************************************************


*****************************************************
So you can use isa server on system

isa server connect vlan 1 untag port and assign ip address
vlan 1 subnet 172.27.3.x

and delete all routing command ......

and you can write
ip default gateway 172.27.3.x (isa lan ip address)

good luck