Solved

HP Procurve Switching

Posted on 2013-01-31
5
210 Views
Last Modified: 2013-01-31
Hi All.

Does anyone know the commands to isolate a single vlan from another on HP procurve switches?

I want to create two networks but don't want them to be able to touch one another.  However, I would like them to route out the same firewall.

Anyhelp is appreciated.

Thanks.
Lou
0
Comment
Question by:LouHabes
  • 3
  • 2
5 Comments
 
LVL 7

Accepted Solution

by:
avcontrol earned 500 total points
ID: 38840162
Inter Swtiches links should be in Trunk.....
vlan 1
   name "Switch Managment"
   tagged "ports to switch A and D"
   exit
vlan 2
   name "IP cameras"
   tagged "ports to switch A and D"
your config, should looks like below:

Config t

vlan 1
   name "Switch Managment"
   ip address 192.168.1.100 255.255.255.0
   tagged 25-28
   exit
vlan 2
   name "IP cameras"
   untagged 1-12
   ip address 192.168.0.1 255.255.255.0
   tagged 25-28
   exit


This is just simplified example, you can insert your own values.
0
 

Author Comment

by:LouHabes
ID: 38840264
Right, I have a similar test config.  However I dont want them to be able to ping one another.  Thanks for your help.  


vlan 5
   name "test"
   untagged B1
   ip address 192.168.100.1 255.255.255.0
   tagged A1-A4
   exit
vlan 6
   name "Test2"
   untagged D24
   ip address 192.168.101.1 255.255.255.0
   tagged A1-A4
0
 
LVL 7

Expert Comment

by:avcontrol
ID: 38840294
They should not be able ping each if they are not routed by L3.......
Also if you using VLAN, then difrent subnet should have diffrent ports, in your confifgs, looks like you tagging same ports twice.......
Can you post diagram and router configs?
0
 

Author Comment

by:LouHabes
ID: 38841120
I really dont have much, I am trying to get off an old intel 550 routing switch that houses the VLANs and trunkports.  I did enable routing between them thanks for pointing out

  Currently through that switch the vlans are isolated but access the net through the same router.

I guess I would just assign two seperate trunk ports from the router to each vlan once I confirm they cannot ping one another?

Thanks Again AVCONTROL.
0
 
LVL 7

Assisted Solution

by:avcontrol
avcontrol earned 500 total points
ID: 38841175
Yes, either trunk or taged with same VLAN id.
As long there is no routing for those two subnet in L3 device and both VLAN aggregated before coming int L3, they should not be able see each other.
In other word enabling routing for those two subnet you will make them see each other.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

The worst thing when starting a new job is when the previous Network Administrator left behind no documentation. How do you get into the devices? If you've been in this situation or just accidently mistyped your password, this article will hopefully…
This tutorial will go through the steps required to write a script that will back up the configuration settings of a HP-ProCurve switch. You will need to get the following things to follow this tutorial: Telnet Scripting Tool e.g. TST10.exe …
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now