• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 686
  • Last Modified:

Implementing VLANs

I noticed some months ago that I had a few devices on the network that were rather chatty and affecting network performance.  Unfortunately there is nothing I can do with these devices to shut them up except isolate them.  Up until now I have had a seven switch flat network.  After talking with my vendor I decided that maybe it is time to implement VLANs.  After all VLANs are not just for the massive enterprises.  So I purchased a Layer 3 switch and so began my woes.

Here is what I have gotten done so far.  My FireWALL/Router is a SonicWALL NSA240.  My HP Procurve 2510G switches are all configured the same and the config for one of my 48 port switches is attached.  I have 3 48 port and 4 24 port.  With some help from my vendor I have the Layer 3 switch, a Brocade ICX6450-48 configured which will replace one of the HP 2510-48 switches.  I have the DHCP scopes for each VLAN configured.

Here is my problem.  One I am in need of a little education as to how to move devices into a VLAN as I have noticed the Brocade and the HP are using different terminology, similar but different.  Second DHCP is not issuing IP addresses on the new VLANs.  I can not ping the addresses of the VLANs which leads me to believe they are not being routed.  Currently I have one of the new scopes activated for testing.

I made my vendor aware that I need this up and running by Wednesday.
bachman-machine-brocade.txt
BMC-SW-Main1.txt
dhcp.csv
0
BMCISAdmin
Asked:
BMCISAdmin
  • 2
  • 2
1 Solution
 
BMCISAdminAuthor Commented:
Right now my test is setup as follows:

Main1 (pt48) tagged on all but VLAN1 <-> Trailer (pt24) tagged on all but VLAN1

Brocade (pt48) tagged on all but VLAN1<-> Trailer (pt16) tagged on all but VLAN1

Test Machine (Trailer (pt11)

I am not getting an IP on the test machine
0
 
jburgaardCommented:
I have no experience with Brocade and on my Procurves I do nor run gvrp.
-so here are my 2cent:
I guess there are some different configs on the connecting ports.
On HP a port in vlan 1 is untagged but on Brocade tagged

I would try in HP config to have the uplink-port TAGged in every vlan  on this port and make a few accessports in other vlans (asume port 47=uplink to brocade):
vlan 1
tag 47
untag 1
exit

vlan 2
untag 2
tag 47
exit

vlan 3
untag 3
tag 47
exit
....
connect PC to untagged port to test vlan

If you want gvrp to work, I asume you have to set it up on Brocade also.
0
 
jburgaardCommented:
Where are DHCP-server and router?? they should be on an untagged port (in vlan 1 if in 172.16.0.x 255.255.255.0)

When basic connectivity is in place, time to look at routing, including DefaultGateWay in DHCP.
I would suppose the L3-switch was to do the inter-vlan routing.
- client-dgw should point to IP of vlan 172.16.x.253 (not to 172.16.x.254)
vlan 1   172.16.0.253   255.255.255.0

Also on your next hop router 172.16.0.254 (firewall?) there should be routes-back to networks needing internet. Like 172.16.1.0   255.255.255.0  172.16.0.253

HTH
0
 
BMCISAdminAuthor Commented:
This along with a consultant got me on the right track.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now