mrtheplague
asked on
Procurve networking management
We have three procurves. (2)5406zl and a 2606 24 port 100 mbit POE.
Currently we have a 4-port trunk between the two 5406 chassis and a 2 port trunk to the 2606
My problem is that I haven't figured out a way to access the other switch management interfaces without plugging into the default_vlan (one port) on both the non-root switches. So I can access the root switch by using the default gateway IP of :10.0.3.254, butt he other 2 switches I have to physically plug into with my laptop to access. This might seem good for security, but, not so good for administration. Here's a simple ascii diagram:
5406zl(b)
|| ||
__core between flores____
|| ||
5406zl(a) == 2606
switch a is the only switch I can administer over the network, the other two have to be plugged into. Here are the two 5406zl config files
Currently we have a 4-port trunk between the two 5406 chassis and a 2 port trunk to the 2606
My problem is that I haven't figured out a way to access the other switch management interfaces without plugging into the default_vlan (one port) on both the non-root switches. So I can access the root switch by using the default gateway IP of :10.0.3.254, butt he other 2 switches I have to physically plug into with my laptop to access. This might seem good for security, but, not so good for administration. Here's a simple ascii diagram:
5406zl(b)
|| ||
__core between flores____
|| ||
5406zl(a) == 2606
switch a is the only switch I can administer over the network, the other two have to be plugged into. Here are the two 5406zl config files
Switch b config:
; J8697A Configuration Editor; Created on release #K.12.57
hostname "ProCurve Switch 5406zl"
module 1 type J8702A
module 2 type J8702A
module 3 type J8702A
module 4 type J8702A
module 5 type J8702A
trunk A1-A4 Trk1 LACP
ip routing
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
untagged A5,Trk1
ip address 10.0.3.252 255.255.255.0
no untagged A6-A24,B1-B24,C1-C24,D1-D24,E1-E24
exit
vlan 3
name "WRK_VLAN"
untagged A6-A24,B1-B24,C1-C14
tagged Trk1
no ip address
exit
vlan 4
name "VOIP_VLAN"
untagged C15-C24,D1-D24,E1-E24
tagged Trk1
no ip address
exit
spanning-tree Trk1 priority 6
Switch a config:
Running configuration:
; J8697A Configuration Editor; Created on release #K.12.57
hostname "ProCurve Switch 5406zl"
web-management ssl
module 1 type J8702A
module 2 type J8702A
module 3 type J8702A
module 4 type J8702A
module 5 type J8702A
module 6 type J8702A
trunk B1-B4 Trk1 LACP
trunk B5-B6 Trk2 LACP
ip routing
ip directed-broadcast
ip zero-broadcast
ip udp-bcast-forward
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
ip address 10.0.1.199 255.255.255.0
no untagged A1-A24,B7-B24,C1-C24,D1-D24,E1-E24,F1-F24,Trk1-Trk2
exit
vlan 2
name "SERVER_VLAN"
untagged A1-A20
ip helper-address 10.0.2.1
ip address 10.0.2.254 255.255.255.0
tagged Trk1-Trk2
exit
vlan 3
name "WRK_VLAN"
untagged D13-D24,E1-E24,F1-F24
ip helper-address 10.0.2.1
ip address 10.0.3.254 255.255.255.0
tagged Trk1-Trk2
exit
vlan 4
name "PHONE_VLAN"
untagged B7-B24,C1-C24,D1-D12
ip address 10.0.4.254 255.255.255.0
tagged Trk1-Trk2
exit
vlan 5
name "WIFI_VLAN"
untagged A21-A24
ip helper-address 10.0.2.1
ip address 10.0.5.254 255.255.255.0
tagged Trk1-Trk2
exit
vlan 6
name "EDGE_VLAN"
ip helper-address 10.0.2.1
ip address 10.0.6.254 255.255.255.0
tagged Trk1-Trk2
exit
vlan 7
name "INTERNE_VLAN"
ip helper-address 10.0.2.1
ip address 10.0.7.254 255.255.255.0
tagged Trk1-Trk2
exit
qos type-of-service diff-services
ip route 0.0.0.0 0.0.0.0 10.0.2.1
router rip
distance 25
exit
spanning-tree
spanning-tree Trk1 priority 4
spanning-tree Trk2 priority 4
spanning-tree config-name "mstp-vrrp"
spanning-tree config-revision 1
spanning-tree instance 1 vlan 1-8
spanning-tree priority 1 force-version RSTP-operation
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER