Solved

HP 2920 with layer 3 vlans

Posted on 2013-12-22
5
2,552 Views
Last Modified: 2013-12-23
Dear Experts,

I have to configure a switch system to my company which is consist of two HP switches 2920 stacked to each other represent a core switch and six HP switches 1910 for each floor and a firewall for internet access, I want to do the following:

First configure a 12 VLANs on all the switches all vlans must not communicate with each others except the servers vlan can communicate with all the vlans using layer 3 routing.

Second all vlans must have internet connection via the connected firewall.

Third trunk connection using dynamic LACP one up-link to each 2920 switch for high availability.

Thanks,
0
Comment
Question by:husseinhammoud
  • 3
  • 2
5 Comments
 
LVL 45

Accepted Solution

by:
Craig Beck earned 500 total points
Comment Utility
Well the config depends on how the switches at the core actually stack.  Will you be using the dedicated stacking module in each 2920, or will you be linking them together via the existing RJ45 ports or SFPs?
0
 
LVL 10

Expert Comment

by:convergint
Comment Utility
You would use access control lists to protect your VLANs.  Here's a sample config I made up.  I don't have access to a switch to ensure that my syntax is all correct but hopefully you can understand the concepts.  Like Craigbeck mentioned above, not sure how you are stacking the switches but it is really simple to enable dynamic LACP.  It's just "interface 23-24 lacp active" for example to enable port 23 and 24 for lacp.  You only need to do it on one side as typically all the ports are set for passive by default.

max-vlans 100
ip routing
ip access-list standard "VLANs-Servers"
   1 remark "Servers Subnet"
   2 permit 192.168.1.0 0.0.0.255
ip access-list standard "VLANs-Out"
   1 remark "All Subnets"
   2 permit 0.0.0.0 255.255.255.255
interface 1
   name "1910SwitchFloor1"       
interface 2
   name "1910SwitchFloor2"
interface 3
   name "1910SwitchFloor3"
interface 4
   name "1910SwitchFloor4"
interface 5
   name "1910SwitchFloor5"
interface 6
   name "1910SwitchFloor6"
interface 7
   name "Server"
interface 8
   name "Firewall"
vlan 1
   name "DEFAULT_VLAN"
   untagged 8-24
   no untagged 1-7
   exit
vlan 100
   name "Server VLAN"
   ip address 192.168.1.1 255.255.255.0
   untagged 7-8
   tagged 1-6
   exit
vlan 2
   name "VLAN2"
   ip address 192.168.2.1 255.255.255.0
   tagged 1-6
   ip access-group VLANs-Servers in
   ip access-group VLANs-Out out
   exit
vlan 3
   name "VLAN3"
   ip address 192.168.3.1 255.255.255.0
   ip access-group VLANs-Servers in
   ip access-group VLANs-Out out
   tagged 1-6
   exit
vlan 4
{continue as above for rest of vlans}
0
 
LVL 45

Expert Comment

by:Craig Beck
Comment Utility
Third trunk connection using dynamic LACP one up-link to each 2920 switch for high availability.
Just bear in mind that if you stack using SFPs (uplinks) not stack modules, you can't do this, even with the great example above.

You would have to use STP and no trunk for this.  This is really why it's important to know how you intend to make the stack.
0
 
LVL 10

Expert Comment

by:convergint
Comment Utility
If my example was useful to you and correct, I would appreciate some points awarded to my solution.  If not, I can help you with the configuration to get it working.

Thanks.
0
 
LVL 45

Expert Comment

by:Craig Beck
Comment Utility
@convergint - I agree.  If anything, your comment was actually a more complete solution and would likely do what the OP is asking.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

I see many questions here on Experts Exchange regarding switch port configurations and trunks. This article is meant for beginners in the subject to help to get basic knowledge about Virtual Local Area Network (VLAN (http://en.wikipedia.org/wiki/Vir…
I eventually solved a perplexing problem setting up telnet for a new switch.  I installed a new Cisco WS-03560X-24P switch connected to an existing Cisco 4506 running a WS-X4013-10GE Sup II-Plus. After configuring vlans and trunking,  I could no…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now