Solved

Default VLAN untagged Procurve HP

Posted on 2012-03-27
23
957 Views
Last Modified: 2012-04-18
Hello,

I have 3 running networks on a HP Procurve Switch 2 privates (172.16.1.0/24 and 192.168.0.0/16) and a public network. I don't loose traffic on pvt 172.16 and also on public. On the 192.168 I keep loosing packets and btw this is separated by default vlan (untagged) this could be the problem?
0
Comment
Question by:goncalogirao
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 11
  • 8
  • 4
23 Comments
 
LVL 6

Expert Comment

by:RKinsp
ID: 37774643
Hello, the untagged vlan separation should not be a problem. You are loosing packets from where to where? Can you send your config and version?

If you are routing between vlans, make sure you have ip routing enable. I've seen procurve's route some packets but not all when routing is disabled.

-RK
0
 

Author Comment

by:goncalogirao
ID: 37775518
I'm loosing packets between my ISP's Router and fibre optics equipment. This is very strange, on my local network (i ping the gateway->ips's router and don't loose anything), but if I ping a public address (the one on the public side of the router I keep loosing.

What config do you need, the Switch?
  Port   DEFAULT_VLAN   VLAN-pbWY    VLAN-pvtL4S
  ---- + ------------  ------------  ------------
  11   | Untagged      No            No    
  12   | Untagged      No            No    
  13   | Untagged      No            No
  14   | Untagged      No            No
  15   | Untagged      No            No
  16   | Untagged      No            No
  17   | Untagged      No            No
  18   | Untagged      No            No
  19   | Untagged      No            No
  20   | Untagged      No            No
  21   | Untagged      No            No
  22   | Untagged      Tagged        Tagged

 Actions->   Cancel     Edit     Save     Help
0
 
LVL 6

Expert Comment

by:RKinsp
ID: 37776830
It sounds more like your router does not have routes to all your internal VLANs. When you say you loose pings, is it like if you ping from VLAN X you loose all pings or you loose one or two pings and three make it through?

Does your ISP router have firewall active? Can you send a diagram of your network showing which pings you are loosing and which ones you are not?

A stateful firewall could block some packets but not all depending on the connection.
0
NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

 

Author Comment

by:goncalogirao
ID: 37777118
When I say I loose pings, I don't loose all. Sometimes the network is ok.

Yes, the router's ISP has a firewall (but I think is manual configured). But like I said sometimes happen, not always, just when everybody is connected. Can be a machine generating bad traffic?
0
 
LVL 11

Expert Comment

by:Khandakar Ashfaqur Rahman
ID: 37777455
This is might be the problem of routing or firewall.This isn't the VLAN issue at all.
You need to check your routers interface statistics,memory and CPU usage and firewall settings.However these features depend on your routers model and brand.

Also please check router's interface.Is it configured Auto,Half Duplex or Full Duplex?
0
 

Author Comment

by:goncalogirao
ID: 37777488
I have access to stats (memory, cpu, sessions and policies below 40%) It is configured 100 FDx.

the firewall settings is what keeps me confused.
0
 
LVL 11

Expert Comment

by:Khandakar Ashfaqur Rahman
ID: 37777648
Did you try with restarting the interface or reboot the router?
0
 

Author Comment

by:goncalogirao
ID: 37777658
several times. We have changed the private lan interface also 0/3 to 0/0.

I'm considering change the router.
0
 
LVL 6

Expert Comment

by:RKinsp
ID: 37777677
can you see if there are any errors on the Router/Firewall interface? what model equipment is it?
0
 
LVL 11

Expert Comment

by:Khandakar Ashfaqur Rahman
ID: 37777732
It could be the firewall issue.
Did you try ping from WAN side when you encounter problem??

If it is your border router you could try from looking glass sites:
http://lg.level3.net/ping/ping.cgi               

You can use 99 packet count to check if there's any drop.
0
 

Author Comment

by:goncalogirao
ID: 37777749
Great tip! Pinging from outside....
0
 
LVL 11

Expert Comment

by:Khandakar Ashfaqur Rahman
ID: 37779325
So, it could be your router feature specially firewall.
0
 

Author Comment

by:goncalogirao
ID: 37779343
now its late night here, and no one at office. Tomorrow give feedback
TY
0
 

Author Comment

by:goncalogirao
ID: 37780755
Today tested the ping from outside, no problems at all. The router is a Cisco Juniper
0
 
LVL 11

Expert Comment

by:Khandakar Ashfaqur Rahman
ID: 37780766
Could you please disable your firewall (for test only) ?
0
 

Author Comment

by:goncalogirao
ID: 37796939
I Cannot disable FW because its not configured manually. I'm considering config a LACP for better performance.
0
 
LVL 11

Expert Comment

by:Khandakar Ashfaqur Rahman
ID: 37797055
That would be good.Just go ahead.
0
 

Author Comment

by:goncalogirao
ID: 37797515
I've found "A device on port 21 is transmitting packets shorter than 64 bytes or longer than 1518 bytes (longer than 1522 bytes if tagged), with valid CRCs." And many other ports on one switch. Already upgraded the nics driver with no luck. How can I prevent it?

I have about 4000 Rx errors on 8 ports...
0
 
LVL 6

Expert Comment

by:RKinsp
ID: 37797544
Can you capture the packet to see if it is a valid packet? You might have to enable Jumbo Frames if it is valid (bigger packets, up to 9000 bytes).

-RK
0
 
LVL 11

Expert Comment

by:Khandakar Ashfaqur Rahman
ID: 37797569
Check MTU settings of your devices.
0
 

Author Comment

by:goncalogirao
ID: 37800193
All errors come from Realtek PCIe Gigabit Family NICs (about 8). Today I asked my collaborators to use wireless instead of cable to check network performance.
0
 

Author Comment

by:goncalogirao
ID: 37805245
I enabled jumbo frames on that clan, but was no good. I think i lost even more performance. I'm going to check mtu on devices, they should be at 1500?

You are great with your help!
0
 
LVL 11

Accepted Solution

by:
Khandakar Ashfaqur Rahman earned 500 total points
ID: 37805445
Hello,

MTU vaies based on media.Please check the following link and MTU Table of common media:
http://en.wikipedia.org/wiki/Maximum_transmission_unit
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When replacing some switches recently I started playing with the idea of having admins authenticate with their domain accounts instead of having local users on all switches all over the place. Since I allready had an w2k8R2 NPS running for my acc…
This tutorial will go through the steps required to write a script that will back up the configuration settings of a HP-ProCurve switch. You will need to get the following things to follow this tutorial: Telnet Scripting Tool e.g. TST10.exe …
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Suggested Courses

628 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question