Link to home
Start Free TrialLog in
Avatar of mrtheplague
mrtheplagueFlag for Afghanistan

asked on

Procurve networking management

We have three procurves. (2)5406zl and a 2606 24 port 100 mbit POE.

Currently we have a 4-port trunk between the two 5406 chassis and a 2 port trunk to the 2606

My problem is that I haven't figured out a way to access the other switch management interfaces without plugging into the default_vlan (one port) on both the non-root switches.  So I can access the root switch by using the default gateway IP of :10.0.3.254, butt he other 2 switches I have  to physically plug into with my laptop to access.  This might seem good for security, but, not so good for administration.  Here's a simple ascii diagram:

            5406zl(b)
                || ||
__core between flores____
                || ||
            5406zl(a)  == 2606

switch a is the only switch I can administer over the network, the other two have to be plugged into.  Here are the two 5406zl config files
Switch b config:
 
; J8697A Configuration Editor; Created on release #K.12.57
 
hostname "ProCurve Switch 5406zl" 
module 1 type J8702A 
module 2 type J8702A 
module 3 type J8702A 
module 4 type J8702A 
module 5 type J8702A 
trunk A1-A4 Trk1 LACP 
ip routing 
snmp-server community "public" Unrestricted 
vlan 1 
   name "DEFAULT_VLAN" 
   untagged A5,Trk1 
   ip address 10.0.3.252 255.255.255.0 
   no untagged A6-A24,B1-B24,C1-C24,D1-D24,E1-E24 
   exit 
vlan 3 
   name "WRK_VLAN" 
   untagged A6-A24,B1-B24,C1-C14 
   tagged Trk1 
   no ip address 
   exit 
vlan 4 
   name "VOIP_VLAN" 
   untagged C15-C24,D1-D24,E1-E24 
   tagged Trk1 
   no ip address 
   exit 
spanning-tree Trk1 priority 6
 
Switch a config:
 
Running configuration:
 
; J8697A Configuration Editor; Created on release #K.12.57
 
hostname "ProCurve Switch 5406zl" 
web-management ssl 
module 1 type J8702A 
module 2 type J8702A 
module 3 type J8702A 
module 4 type J8702A 
module 5 type J8702A 
module 6 type J8702A 
trunk B1-B4 Trk1 LACP 
trunk B5-B6 Trk2 LACP 
ip routing 
ip directed-broadcast 
ip zero-broadcast 
ip udp-bcast-forward 
snmp-server community "public" Unrestricted 
vlan 1 
   name "DEFAULT_VLAN" 
   ip address 10.0.1.199 255.255.255.0 
   no untagged A1-A24,B7-B24,C1-C24,D1-D24,E1-E24,F1-F24,Trk1-Trk2 
   exit 
vlan 2 
   name "SERVER_VLAN" 
   untagged A1-A20 
   ip helper-address 10.0.2.1 
   ip address 10.0.2.254 255.255.255.0 
   tagged Trk1-Trk2 
   exit 
vlan 3 
   name "WRK_VLAN" 
   untagged D13-D24,E1-E24,F1-F24 
   ip helper-address 10.0.2.1 
   ip address 10.0.3.254 255.255.255.0 
   tagged Trk1-Trk2 
   exit 
vlan 4 
   name "PHONE_VLAN" 
   untagged B7-B24,C1-C24,D1-D12 
   ip address 10.0.4.254 255.255.255.0 
   tagged Trk1-Trk2 
   exit 
vlan 5 
   name "WIFI_VLAN" 
   untagged A21-A24 
   ip helper-address 10.0.2.1 
   ip address 10.0.5.254 255.255.255.0 
   tagged Trk1-Trk2 
   exit 
vlan 6 
   name "EDGE_VLAN" 
   ip helper-address 10.0.2.1 
   ip address 10.0.6.254 255.255.255.0 
   tagged Trk1-Trk2 
   exit 
vlan 7 
   name "INTERNE_VLAN" 
   ip helper-address 10.0.2.1 
   ip address 10.0.7.254 255.255.255.0 
   tagged Trk1-Trk2 
   exit 
qos type-of-service diff-services 
ip route 0.0.0.0 0.0.0.0 10.0.2.1
router rip
   distance 25
   exit
spanning-tree
spanning-tree Trk1 priority 4
spanning-tree Trk2 priority 4
spanning-tree config-name "mstp-vrrp"
spanning-tree config-revision 1
spanning-tree instance 1 vlan 1-8
spanning-tree priority 1 force-version RSTP-operation

Open in new window

ASKER CERTIFIED SOLUTION
Avatar of jburgaard
jburgaard

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of mrtheplague

ASKER

All I had to do was add a static management ip to the b switch for vlans 2 and 3.