HP Procurve msm765zl and 5406zl vlan configuration

we have x2 5406zl core switches linked with 10b links (trunked) and msm765zl wireless controller and need to change ip addressing from 10.10.1.0/16 to 10.10.1.0/24, 10.10.2.0/24 for example. we would like each subnet to be on its own vlans as at present everything is in one broadcast domain (including the wifi) to do this we need to
-create dhcp scopes for each subnet on the dhcp server
-add ip helper lines to each vlan config (pointing to dhcp server)
-enable ip routing on the core switches
-tag all core switch ports with vlans which will require access and tag the trunks to the outer switches with any vlans which will be used
- the main issue is how do i change the wifi controller to tunnel access point traffic directly to it rather than simply authenticating users and giving them direct access to the network on whichever switch the wifi point is connected.
- i would like to have for example 1 ssid which is employess (with access to say vlan10,20) and another ssid which is guest with only access to say vlan10). in capture1.png you can see the authentication option is selected but not the access control, effectively when that is selected the traffic is tunnelled to the controller. i need to know
A- how to setup the dhcp relay so that it will give the access points an ip address and the clients connected the correct ip based on vlan
B- how to handle the traffic when it reaches the controller, i believe this is the VSC egress settings??

please ask if i need to make anything clearer or if you need more info
Capture1.PNG
LVL 2
active8itAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

RKinspCommented:
Ok, start out by adding a VLAN in Controller-> Network -> Ports. For a VLAN to be valid for egress, it needs to have an IP address.

On your VSC, select "ACCESS CONTROL", this will force the traffic to go to the controller - note that this is not recommended for voice video. You might want to have some users on non-access controlled vcs.

You can then set your egress VLAN/network on the VSC setup page (see image).

According to the manual, you can also "A separate DHCP relay agent can be enabled on each VSC to provide custom addressing to users.", however i'm not sure where this setting is. I believe you have to have DHCP relay agent on global then set it on the VSC. Please note that the default VSC will always use the main DHCP relay agent.

Please note that for each VSC/VLAN, the IP address for that VLAN will be what the device sending to your DHCP server.

Does this cover your questions?

Good luck,
RK
egress-vlan.jpg

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
RKinspCommented:
Oh, and DHCP relay is global from Controller->Network -> address allocation
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.