[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Setup Management IPs on HP Procurve Switches

Posted on 2012-08-11
6
Medium Priority
?
1,201 Views
Last Modified: 2012-08-28
Have 3 models of HP switches deployed on the network - 2510, 2910 and 3800 - and want to setup a "management VLAN" on all of them that I can use to access the switches for configuration and use as the source IP for reporting information (i.e. SNMP and SFLOW).

I don't want to do anything that could be become overcomplicated and I have read that you can run into issues if you use the official procurve management setup.  All I need is to be able to place an IP address on the switch that can be accessed from machines on the other vlans on the network and use that IP address as the address for reporting.

What is the best way to do this?
0
Comment
Question by:AutomatedIT
  • 3
  • 2
6 Comments
 
LVL 17

Expert Comment

by:TimotiSt
ID: 38285180
The 2510 is a layer2 switch, so only one vlan can have an IP address. The 2910 and 3800 series are layer3 switches so configuration would depend on your current config.
What does your current setup look like?

Tamas
0
 
LVL 1

Author Comment

by:AutomatedIT
ID: 38287961
We have about 7 different VLANs with vlan 50 "designated" as our management VLAN.  Would like to put an ip for that VLAN on each switch - ex. 10.10.50.10 on the 3800 and then maybe 10.10.50.15 on the 2510.  

How can I do this and be able to route to those IPs from the other VLANs?
0
 
LVL 17

Expert Comment

by:TimotiSt
ID: 38288137
What is doing the routing between VLANs now? One of the layer3 switches, or a separate router?
0
Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

 
LVL 1

Author Comment

by:AutomatedIT
ID: 38288231
We have the 3800 handling layer 3.
0
 
LVL 17

Accepted Solution

by:
TimotiSt earned 2000 total points
ID: 38288289
In that case it's pretty simple:
Set up vlan 50 on all switches, on the 2510 and 2910 switches only set up an IP address for that vlan.
Set up the IP of vlan 50 on the 3800 as the default gw on all other switches.
You might want to implement an access list on the 3800 to make sure regular users can't access your management subnet.
0
 
LVL 17

Expert Comment

by:jburgaard
ID: 38289437
As you say youself you should not use management-vlan statement if you want routing to take place, but otherwise good info is in:
http://www.hp.com/rnd/pdfs/Hardening_ProCurve_Switches_White_Paper.pdf
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, WatchGuard's Director of Security Strategy and Research Teri Radichel, takes a look at insider threats, the risk they can pose to your organization, and the best ways to defend against them.
How to fix a SonicWall Gateway Anti-Virus firewall blocking automatic updates to apps like Windows, Adobe, Symantec, etc.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

873 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question