Solved

Procurve networking management

Posted on 2009-03-31
2
739 Views
Last Modified: 2012-05-06
We have three procurves. (2)5406zl and a 2606 24 port 100 mbit POE.

Currently we have a 4-port trunk between the two 5406 chassis and a 2 port trunk to the 2606

My problem is that I haven't figured out a way to access the other switch management interfaces without plugging into the default_vlan (one port) on both the non-root switches.  So I can access the root switch by using the default gateway IP of :10.0.3.254, butt he other 2 switches I have  to physically plug into with my laptop to access.  This might seem good for security, but, not so good for administration.  Here's a simple ascii diagram:

            5406zl(b)
                || ||
__core between flores____
                || ||
            5406zl(a)  == 2606

switch a is the only switch I can administer over the network, the other two have to be plugged into.  Here are the two 5406zl config files
Switch b config:
 

; J8697A Configuration Editor; Created on release #K.12.57
 

hostname "ProCurve Switch 5406zl" 

module 1 type J8702A 

module 2 type J8702A 

module 3 type J8702A 

module 4 type J8702A 

module 5 type J8702A 

trunk A1-A4 Trk1 LACP 

ip routing 

snmp-server community "public" Unrestricted 

vlan 1 

   name "DEFAULT_VLAN" 

   untagged A5,Trk1 

   ip address 10.0.3.252 255.255.255.0 

   no untagged A6-A24,B1-B24,C1-C24,D1-D24,E1-E24 

   exit 

vlan 3 

   name "WRK_VLAN" 

   untagged A6-A24,B1-B24,C1-C14 

   tagged Trk1 

   no ip address 

   exit 

vlan 4 

   name "VOIP_VLAN" 

   untagged C15-C24,D1-D24,E1-E24 

   tagged Trk1 

   no ip address 

   exit 

spanning-tree Trk1 priority 6
 

Switch a config:
 

Running configuration:
 

; J8697A Configuration Editor; Created on release #K.12.57
 

hostname "ProCurve Switch 5406zl" 

web-management ssl 

module 1 type J8702A 

module 2 type J8702A 

module 3 type J8702A 

module 4 type J8702A 

module 5 type J8702A 

module 6 type J8702A 

trunk B1-B4 Trk1 LACP 

trunk B5-B6 Trk2 LACP 

ip routing 

ip directed-broadcast 

ip zero-broadcast 

ip udp-bcast-forward 

snmp-server community "public" Unrestricted 

vlan 1 

   name "DEFAULT_VLAN" 

   ip address 10.0.1.199 255.255.255.0 

   no untagged A1-A24,B7-B24,C1-C24,D1-D24,E1-E24,F1-F24,Trk1-Trk2 

   exit 

vlan 2 

   name "SERVER_VLAN" 

   untagged A1-A20 

   ip helper-address 10.0.2.1 

   ip address 10.0.2.254 255.255.255.0 

   tagged Trk1-Trk2 

   exit 

vlan 3 

   name "WRK_VLAN" 

   untagged D13-D24,E1-E24,F1-F24 

   ip helper-address 10.0.2.1 

   ip address 10.0.3.254 255.255.255.0 

   tagged Trk1-Trk2 

   exit 

vlan 4 

   name "PHONE_VLAN" 

   untagged B7-B24,C1-C24,D1-D12 

   ip address 10.0.4.254 255.255.255.0 

   tagged Trk1-Trk2 

   exit 

vlan 5 

   name "WIFI_VLAN" 

   untagged A21-A24 

   ip helper-address 10.0.2.1 

   ip address 10.0.5.254 255.255.255.0 

   tagged Trk1-Trk2 

   exit 

vlan 6 

   name "EDGE_VLAN" 

   ip helper-address 10.0.2.1 

   ip address 10.0.6.254 255.255.255.0 

   tagged Trk1-Trk2 

   exit 

vlan 7 

   name "INTERNE_VLAN" 

   ip helper-address 10.0.2.1 

   ip address 10.0.7.254 255.255.255.0 

   tagged Trk1-Trk2 

   exit 

qos type-of-service diff-services 

ip route 0.0.0.0 0.0.0.0 10.0.2.1

router rip

   distance 25

   exit

spanning-tree

spanning-tree Trk1 priority 4

spanning-tree Trk2 priority 4

spanning-tree config-name "mstp-vrrp"

spanning-tree config-revision 1

spanning-tree instance 1 vlan 1-8

spanning-tree priority 1 force-version RSTP-operation

Open in new window

0
Comment
Question by:mrtheplague
2 Comments
 
LVL 17

Accepted Solution

by:
jburgaard earned 500 total points
Comment Utility
You run the a-sw as a routing sw. (layer3-sw) , meaning all vlans with an IP on this switch will participate in routing BETWEEN the vlan's. Fine.

L2 sw.'s:
The b-Sw only has (and prob. only should have) an IP in vlan 1.
On b-sw. change
from  'IP Routing'   to:
IP Default-gateway 10.0.1.199

To communicate WITHIN vlan 1 all sw.'s should have IP's in same network,
10.0.1.0 255.255.255.0:
such as
ip address 10.0.1.252   255.255.255.0
(not 10.0.3.252   255.255.255.0)

HTH
0
 

Author Closing Comment

by:mrtheplague
Comment Utility
All I had to do was add a static management ip to the b switch for vlans 2 and 3.
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

Suggested Solutions

Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now