Solved

Implementing VLANs

Posted on 2013-06-10
4
667 Views
Last Modified: 2013-07-31
I noticed some months ago that I had a few devices on the network that were rather chatty and affecting network performance.  Unfortunately there is nothing I can do with these devices to shut them up except isolate them.  Up until now I have had a seven switch flat network.  After talking with my vendor I decided that maybe it is time to implement VLANs.  After all VLANs are not just for the massive enterprises.  So I purchased a Layer 3 switch and so began my woes.

Here is what I have gotten done so far.  My FireWALL/Router is a SonicWALL NSA240.  My HP Procurve 2510G switches are all configured the same and the config for one of my 48 port switches is attached.  I have 3 48 port and 4 24 port.  With some help from my vendor I have the Layer 3 switch, a Brocade ICX6450-48 configured which will replace one of the HP 2510-48 switches.  I have the DHCP scopes for each VLAN configured.

Here is my problem.  One I am in need of a little education as to how to move devices into a VLAN as I have noticed the Brocade and the HP are using different terminology, similar but different.  Second DHCP is not issuing IP addresses on the new VLANs.  I can not ping the addresses of the VLANs which leads me to believe they are not being routed.  Currently I have one of the new scopes activated for testing.

I made my vendor aware that I need this up and running by Wednesday.
bachman-machine-brocade.txt
BMC-SW-Main1.txt
dhcp.csv
0
Comment
Question by:BMCISAdmin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 

Author Comment

by:BMCISAdmin
ID: 39235069
Right now my test is setup as follows:

Main1 (pt48) tagged on all but VLAN1 <-> Trailer (pt24) tagged on all but VLAN1

Brocade (pt48) tagged on all but VLAN1<-> Trailer (pt16) tagged on all but VLAN1

Test Machine (Trailer (pt11)

I am not getting an IP on the test machine
0
 
LVL 17

Expert Comment

by:jburgaard
ID: 39235096
I have no experience with Brocade and on my Procurves I do nor run gvrp.
-so here are my 2cent:
I guess there are some different configs on the connecting ports.
On HP a port in vlan 1 is untagged but on Brocade tagged

I would try in HP config to have the uplink-port TAGged in every vlan  on this port and make a few accessports in other vlans (asume port 47=uplink to brocade):
vlan 1
tag 47
untag 1
exit

vlan 2
untag 2
tag 47
exit

vlan 3
untag 3
tag 47
exit
....
connect PC to untagged port to test vlan

If you want gvrp to work, I asume you have to set it up on Brocade also.
0
 
LVL 17

Accepted Solution

by:
jburgaard earned 500 total points
ID: 39235532
Where are DHCP-server and router?? they should be on an untagged port (in vlan 1 if in 172.16.0.x 255.255.255.0)

When basic connectivity is in place, time to look at routing, including DefaultGateWay in DHCP.
I would suppose the L3-switch was to do the inter-vlan routing.
- client-dgw should point to IP of vlan 172.16.x.253 (not to 172.16.x.254)
vlan 1   172.16.0.253   255.255.255.0

Also on your next hop router 172.16.0.254 (firewall?) there should be routes-back to networks needing internet. Like 172.16.1.0   255.255.255.0  172.16.0.253

HTH
0
 

Author Closing Comment

by:BMCISAdmin
ID: 39370374
This along with a consultant got me on the right track.
0

Featured Post

When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
Arrow Electronics was searching for a KVM  (Keyboard/Video/Mouse) switch that could display on one single monitor the current status of all units being tested on the rack.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question