routing on HP Procurve 4208vl

[Nguyen Quang Tien]

Hi All,

I cannot routing between vlans on HP Procurve 4208vl. My show running-config is below.

ProCurve Switch 4208vl# show running-config

Running configuration:

; J8773A Configuration Editor; Created on release #L.11.20

hostname "ProCurve Switch 4208vl"
flow-control
module 1 type J8768A
module 3 type J8768A
module 2 type J9033A
trunk A1 Trk1 Trunk
trunk A2 Trk2 Trunk
ip routing
ip irdp
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
untagged A3,A5-A24,B1-B24,C1-C24,Trk1-Trk2
ip address 192.168.170.3 255.255.255.0
no untagged A4
ip irdp
exit
vlan 2
name "ITD_VLAN"
no ip address
exit
vlan 3
name "HRD_VLAN"
no ip address
exit
vlan 4
name "VoIP"
untagged A4
ip address 192.168.171.15 255.255.255.0
exit
gvrp
management-vlan 1
spanning-tree Trk1 priority 4
spanning-tree Trk2 priority 4

I cannot ping 192.168.171.15 from my computer. My computer have IP 192.168.170.177 and default-gateway 192.168.170.3.

Please help me,
Thank a lot.

[Michael_Breuer · Accepted solution]

Hi,

you have configured VLAN 1 as management VLANs. That means that you cannot route into VLAN 1. It is also not possible to access other VLANs from VLAN 1. That means that your config works as expected ;-)
To route between VLAN 1 and VLAN 3 you have to remove the management vlan.

Cheers,

Michael

[Nguyen Quang Tien]

Thank Michael Breuer very much,

I have removed management-vlan and I can ping vlan 4 (192.168.171.15).
However, I cannot ping computer on vlan 4 (192.168.171.18) from my computer (192.168.170.177), although I can ping 192.168.171.18 from Procurve switch.
Computer 192.168.171.18 has default-gateway 192.168.171.15

Please help me again,
Thank a lot.

[Michael_Breuer]

Hi,

hard to tell whats going on. The config of the Procurve is looking fine. Are you using IRDP for assigning the default gw? You should check routing table and arp table on both hosts.

Cheers,

Michael

[Nguyen Quang Tien]

Hi Michael,

My computer (192.168.170.177) has default-gateway 192.168.170.3

Computer on Vlan-4 (192.168.171.18) has default-gateway 192.168.171.15

I don't understand "using IRDP for assigning the default gw", please explain to me.

Thank a lot,
Nguyen Quang Tien.

[Michael_Breuer]

Hi Ngyuen,

you enabled IDRP on VLAN1. Any reason for this? Basically you can use this protocol to find the default gateway. Please run the following test from CLI of the 4200:

ping 192.168.171.15
ping 192.168.170.177
sh arp
sh mac
sh ip
sh ip route

Cheers,

Michael

[Nguyen Quang Tien]

Hi Michael,

Please open attachment file to see commands as your request. I have removed idrp, but vlans cannot routing.

Thank you,
Nguyen Quang Tien.

[Michael_Breuer]

Hi,

the output is looking fine. For me it seemes to be a problem on the end nodes. Did you check routing table and arp cache on the PCs?
# netstat -rn
# arp -a

Cheers,

Michael

[Nguyen Quang Tien]

Hi Michael,

Result of the commands on 2 computer as your request in file attachment, please help me.

Thank you,
Nguyen Quang Tien.

[Nguyen Quang Tien]

Sorry, I forget attach file

[Michael_Breuer]

Hi,

the PC is looking fine except that the ARP cache is empty for the PC in the VOICE VLAN. But you told that you can ping the default gateway on both PCs, right? Please doublechek.
Then it might be a problem with the firewall on the PC. Turn them off, to be sure that this is not a problem. Otherwise I have no idea. The switch config is looking fine for me.

Cheers,

Michael

[Nguyen Quang Tien]

Michael,

Computer 192.168.170.177 can ping 192.168.171.15, but it cannot ping 192.168.171.18

Computer 192.168.171.18 can ping 192.168.170.3, but cannot ping 192.168.170.177

Switch Procurve can ping 2 computers.

I think switch Procurve have a problem about routing.

Thank you,
Nguyen Quang Tien.