Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1681
  • Last Modified:

HP Procurve msm765zl and 5406zl vlan configuration

we have x2 5406zl core switches linked with 10b links (trunked) and msm765zl wireless controller and need to change ip addressing from 10.10.1.0/16 to 10.10.1.0/24, 10.10.2.0/24 for example. we would like each subnet to be on its own vlans as at present everything is in one broadcast domain (including the wifi) to do this we need to
-create dhcp scopes for each subnet on the dhcp server
-add ip helper lines to each vlan config (pointing to dhcp server)
-enable ip routing on the core switches
-tag all core switch ports with vlans which will require access and tag the trunks to the outer switches with any vlans which will be used
- the main issue is how do i change the wifi controller to tunnel access point traffic directly to it rather than simply authenticating users and giving them direct access to the network on whichever switch the wifi point is connected.
- i would like to have for example 1 ssid which is employess (with access to say vlan10,20) and another ssid which is guest with only access to say vlan10). in capture1.png you can see the authentication option is selected but not the access control, effectively when that is selected the traffic is tunnelled to the controller. i need to know
A- how to setup the dhcp relay so that it will give the access points an ip address and the clients connected the correct ip based on vlan
B- how to handle the traffic when it reaches the controller, i believe this is the VSC egress settings??

please ask if i need to make anything clearer or if you need more info
Capture1.PNG
0
active8it
Asked:
active8it
  • 2
1 Solution
 
RKinspCommented:
Ok, start out by adding a VLAN in Controller-> Network -> Ports. For a VLAN to be valid for egress, it needs to have an IP address.

On your VSC, select "ACCESS CONTROL", this will force the traffic to go to the controller - note that this is not recommended for voice video. You might want to have some users on non-access controlled vcs.

You can then set your egress VLAN/network on the VSC setup page (see image).

According to the manual, you can also "A separate DHCP relay agent can be enabled on each VSC to provide custom addressing to users.", however i'm not sure where this setting is. I believe you have to have DHCP relay agent on global then set it on the VSC. Please note that the default VSC will always use the main DHCP relay agent.

Please note that for each VSC/VLAN, the IP address for that VLAN will be what the device sending to your DHCP server.

Does this cover your questions?

Good luck,
RK
egress-vlan.jpg
0
 
RKinspCommented:
Oh, and DHCP relay is global from Controller->Network -> address allocation
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now