HP Procurve Switching

Hi All.

Does anyone know the commands to isolate a single vlan from another on HP procurve switches?

I want to create two networks but don't want them to be able to touch one another.  However, I would like them to route out the same firewall.

Anyhelp is appreciated.

Thanks.
Lou
LouHabesAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
avcontrolConnect With a Mentor Commented:
Inter Swtiches links should be in Trunk.....
vlan 1
   name "Switch Managment"
   tagged "ports to switch A and D"
   exit
vlan 2
   name "IP cameras"
   tagged "ports to switch A and D"
your config, should looks like below:

Config t

vlan 1
   name "Switch Managment"
   ip address 192.168.1.100 255.255.255.0
   tagged 25-28
   exit
vlan 2
   name "IP cameras"
   untagged 1-12
   ip address 192.168.0.1 255.255.255.0
   tagged 25-28
   exit


This is just simplified example, you can insert your own values.
0
 
LouHabesAuthor Commented:
Right, I have a similar test config.  However I dont want them to be able to ping one another.  Thanks for your help.  


vlan 5
   name "test"
   untagged B1
   ip address 192.168.100.1 255.255.255.0
   tagged A1-A4
   exit
vlan 6
   name "Test2"
   untagged D24
   ip address 192.168.101.1 255.255.255.0
   tagged A1-A4
0
 
avcontrolCommented:
They should not be able ping each if they are not routed by L3.......
Also if you using VLAN, then difrent subnet should have diffrent ports, in your confifgs, looks like you tagging same ports twice.......
Can you post diagram and router configs?
0
 
LouHabesAuthor Commented:
I really dont have much, I am trying to get off an old intel 550 routing switch that houses the VLANs and trunkports.  I did enable routing between them thanks for pointing out

  Currently through that switch the vlans are isolated but access the net through the same router.

I guess I would just assign two seperate trunk ports from the router to each vlan once I confirm they cannot ping one another?

Thanks Again AVCONTROL.
0
 
avcontrolConnect With a Mentor Commented:
Yes, either trunk or taged with same VLAN id.
As long there is no routing for those two subnet in L3 device and both VLAN aggregated before coming int L3, they should not be able see each other.
In other word enabling routing for those two subnet you will make them see each other.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.