Interconnect Cisco 2960 and HP 5412

We are working on a Pix removal project.  Time to retire the old pix and move to the hosted ASA at my ISP.

We are having an interconnect issue between the HP and the Cisco.  My ISP is trying to  hand me 2 ports on the 2960 (DMZ and Private)

We are connecting VLAN 2 (DMZ port L23) to port 6 on the Cisco with no problems.

We cannot get the VLAN3 (Private port L21) to port 5 on the Cisco to link. Starts amber 30 seconds, green for about 8 then back to amber.  The light blinks like it is passing traffic but it is not.  The HP is green and thinks it is up.

Vlan 2 DMZ on the HP side has no routes, just a simple class c with 5 devices.
VLAN 3 is routed and also has a seperate subnet on it.  Internal routes stay up the entire time.

We have tried all the easy stuff.  Patch cables, speeds, duplex, different ports, Different Cisco, Flow control, Spanning tree. Reboot, Clear Arps

These are not trunk ports.  Untagged traffic only on both sides.  If we hard IP a laptop and connect it to either port (Cisco or HP) it will talk to the network it is connected to.  Link the HP and Cisco and nada.


Running configuration:  (Ports are coded 100 full below since we are back on the old pix.)

; J8698A Configuration Editor; Created on release #K.14.60

hostname "ProCurve Switch 5412zl"
time timezone -300
time daylight-time-rule Continental-US-and-Canada
ip access-list extended "management"
   10 permit ip 10.126.1.50 0.0.0.0 10.1.252.0 0.0.0.255
   15 permit ip 10.1.252.0 0.0.0.255 10.1.252.0 0.0.0.255
   20 deny ip 10.126.0.0 0.0.255.255 10.1.252.0 0.0.0.255
   30 deny ip 10.128.0.0 0.0.255.255 10.1.252.0 0.0.0.255
   exit
module 1 type J8702A
module 2 type J8706A
module 3 type J8702A
module 4 type J8702A
module 9 type J8702A
module 11 type J9307A
module 12 type J8702A
interface B1
   name "SPED"
exit
interface B5
   name "ANNEX"
   flow-control
   speed-duplex 1000-full
exit
interface B9
   name "HIGHBAY"
   flow-control
   speed-duplex 1000-full
exit
interface B13
   name "IT IDF"
   flow-control
   speed-duplex 1000-full
exit
interface B17
   name "BAT IDF"
   flow-control
   speed-duplex 1000-full
exit
interface B20
   name "CAD IDF"
   flow-control
   speed-duplex 1000-full
exit
interface B21
   name "EE IDF"
   flow-control
   speed-duplex 1000-full
exit
interface B24
   name "Admin Office"
   flow-control
   speed-duplex 1000-full
exit
interface A1
   speed-duplex 100-half
exit
interface L19
   name "8e6 reply"
exit
interface L20
   name "8e6"
exit
interface L21
   name "Firewall Inside"
   speed-duplex 100-full
exit
interface L22
   name "8e6 Mobile"
exit
interface L23
   name "DMZ Firewall"
   speed-duplex 100-full
exit
interface L24
   name "VLAN1 MGMT"
exit
ip default-gateway 10.126.0.1
ip routing
vlan 1
   name "Management"
   untagged B1-B24,D1-D24,L24
   ip address 10.1.252.5 255.255.255.0
   no untagged A1-A24,C1-C24,I1-I24,K1-K24,L1-L23
   ip access-group "management" out
   exit
vlan 2
   name "DMZ"
   untagged A23,L12-L13,L22-L23
   tagged B9,B13,B24
   no ip address
   exit
vlan 3
   name "Private"
   untagged A1-A22,A24,C1-C22,C24,I1-I24,K1-K24,L1-L11,L19-L21
   ip address 10.126.1.3 255.255.0.0
   tagged B1,B5,B9,B13,B17,B20-B21,B24
   ip igmp
   exit
vlan 4
   name "HeadStart"
   ip address 10.128.0.1 255.255.0.0
   tagged B5,B13
   ip igmp
   exit
vlan 5
   name "Video"
   untagged L14-L18
   tagged B1,B5,B9,B17,B24
   no ip address
   exit
vlan 6
   name "Sobeske"
   untagged C23
   tagged B13
   no ip address
   ip igmp
   exit
mirror 1 port L19
timesync sntp
sntp unicast
sntp server priority 1 10.126.1.101 3
ip authorized-managers 10.126.1.50 255.255.255.255 access manager
ip authorized-managers 10.126.1.51 255.255.255.255 access manager
ip authorized-managers 10.126.1.16 255.255.255.255 access manager
ip timep manual 10.126.1.25
ip route 0.0.0.0 0.0.0.0 10.126.0.1
ip route 10.129.0.0 255.255.0.0 10.126.0.1
ip route 172.31.252.0 255.255.255.0 10.126.0.1
interface L21
   monitor all both mirror 1
   exit
spanning-tree
no autorun
password manager