HP 1950 24 help with static route

[Rony_BR]

I got 9 switches and i´m tryin to work with vlan.

I configured four vlans:

vlan10 (1-8 ports), 192.168.10.1 dhcp on 192.168.10.0 / 255.255.255.0 GW 192.168.10.1, all access

vlan20 (9-16),192.168.20.1 dhcp on 192.168.20.0 / 255.255.255.0 GW 192.168.20.1  all access

vlan30 (17-20), 192.168.30.1 dhcp on 192.168.30.0 / 255.255.255.0 GW 192.168.30.1 all access

vlan40 (21-24),192.168.40.1 dhcp on 192.168.40.0 / 255.255.255.0 GW 192.168.40.1 21 access othes trunk

port 24 has the internet router on

Also, configured a static route:  ip route-static 0.0.0.0 0.0.0.0 192.168.77.1

ping between vlans working, internet is not!!! what can i do to make internet work in all vlans? please.. help!!!

[Ivan_B]

Hi @Rony_BR !

You say that port 24 is in VLAN40, but you have a router connected to that port. Are you sure that your router should be member of VLAN40? Does your router have IP in 192.168.40.0/24 subnet? Because your static route pushes all outgoing traffic destined to external networks to IP 192.168.77.1 which seems to be your router, I suppose. So either you by mistake included port 24 to VLAN 40 or your router's IP cannot be 192.168.77.1 as it is outside VLAN40 subnet.

If port 24 is really facing the router with IP 192.168.77.1, then you need to create a separate VLAN, for example VLAN77, make port 24 a member of that VLAN, assign it an IP from the subnet 192.168.77.0/24 (here I assume /24 is valid subnet mask, but you need to check your router's subnet mask to be sure) and then your static route will work. At this time it doesn't work, because your switch doesn't know how to reach 192.168.77.1 as it doesn't have any VLAN in that subnet.

[Rony_BR]

Thank you for your quick response and also thank you for HPE providing a good after sales service to your customers, I really appreciate it, but it is not working, the vlans are communicating, but there is no communication with my router. Based in what you said, i changed some configs and I´m sending some images from the config of my switch, maybe i did something wrong, if could you see i´ll be gratefull

OneDrive images 

[Ivan_B · Accepted solution]

Now it looks better, but there is one strange configuration decision that is not understandable - why did you configure port 23 as trunk? Having PVID 70 should send traffic untagged in that VLAN, but there is one catch here - all broadcast, unknown unicast and multicast in VLANs 1-100 will be reaching your router over the port 23. It's not very optimal decision. I advise you to change the port to Access in VLAN70.

Could you ping following IPs from one of your PCs in VLANs 10-40:

ping 192.168.70.1
ping 192.168.70.10

Let's see if your PCs can reach the router. BTW, keep in mind that your router also needs a static route to subnets of VLANs 10-40, otherwise how would it know where to send ping responces? A static route for destination 192.168.0.0/16 (255.255.0.0) over 192.168.70.1 set in your router should provide it a route to your VLANs. Also, you need to verify if your router will provide NAT service for subnets outside its local 192.168.70.0/24. Some routers don't do it by default and provide NAT only to local (from the router's point of view) subnets. 

Summarizing:

1. Check the router for the static route towards VLANs 10-40
2. If a PC in VLAN 10 (for example) can successfuly ping 192.168.70.1, but not 192.168.70.10, there is an issue with static route in the router
3. If both 192.168.70.1 and 192.168.70.10 are reachable, but 1.1.1.1 or 8.8.8.8 are not reachable - check NAT and Firewall in your router
4. If 1.1.1.1 is reachable, 8.8.8.8 is reachable, but domain name resolution doesn't work, then check DNS settings in PC

[Rony_BR]

Hi man, one more time i want to thank you for you attention, i discovered tha my router is not good enough and i need a new one.

My network has 9 switches HP where 5 are JG961A 48G and 4 JG960A 24G, 6 access point Ubiquiti Unifi Lite (wi-fi) and  4 diferent internets (ISP). could you indicate a good router?

[Ivan_B]

I would go with one of MSR95x - https://h20195.www2.hpe.com/v2/getdocument.aspx?docname=c04843038 The exact model depends on your needs, some models have ADSL, others have 3G, but in overall it's a good router for smaller networks. If you need something bigger, then you need to look at MSRs with 4-digit product numbers - 2xxx, 3xxx, 4xxx:

HPE FlexNetwork MSR2000 Router Series - https://h20195.www2.hpe.com/v2/getdocument.aspx?docname=c04123120
HPE FlexNetwork MSR3000 Router Series  - https://h20195.www2.hpe.com/v2/getdocument.aspx?docname=c04123140
HPE FlexNetwork MSR4000 Router Series  - https://h20195.www2.hpe.com/v2/getdocument.aspx?docname=c04315129