Solved

VLAN problem

Posted on 2014-01-06
18
492 Views
Last Modified: 2014-01-06
I'm having a VLAN problem I believe. We have a Sonicwall F/W using several sonicwall Access points for our wireless. They all sync to the firewall. We have that Firewall and 3 switches Switch A,B,and C. There is a connection from the F/W to Switch A, a connection from switch A to Switch B in the same rack. Switch C is in another part of the facility and connected via fiber. most of the Access points are plugged into switched A and B and they work. we have 3 APs plugged into switch C that I cannot get to connect. From any PC I can connect to and ping siwtch C and get into its Web login but not the AP's plugged into it. The sonicwall created a VLAN for each SSID and we have VLAN 100, 200, 300, 400. On Switch A and B its set to have ports 1-24 tagged for all those VLAN ID's so I set switch C up the same way and yet I cannot connect to them. What am I missing?
0
Comment
Question by:Axis52401
  • 9
  • 8
18 Comments
 
LVL 57

Expert Comment

by:giltjr
ID: 39760938
Were the access points connected to switch C configured correctly?  They need to tag those VLAN's also.
0
 
LVL 2

Author Comment

by:Axis52401
ID: 39760969
Yes, Switch C is a replacement so at one point they did connect. The sonicwall even shows them listed in the Sonicpoint menu, they show as offline right now.
0
 
LVL 57

Expert Comment

by:giltjr
ID: 39760973
What type of switch is switch C?  Can you hide any private info and post the config?
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 
LVL 2

Author Comment

by:Axis52401
ID: 39760987
Its a HP 1910 Switch, do you know if that config can be exported like with a cisco?
0
 
LVL 2

Author Comment

by:Axis52401
ID: 39760990
Here is a screen shot of the VLAN settings, port 9 connects to the other switch ports 1-3 to the Access points
vlan.docx
0
 
LVL 57

Expert Comment

by:giltjr
ID: 39761014
I would suggest trying to configure the ports as trunks.  I need to check and see what hybrid does on HP switches.

According to the below site there are secret CLI commands:

http://glazenbakje.wordpress.com/2012/08/21/hp-v1910-secret-commando-list-how-to-enable-it/
0
 
LVL 57

Expert Comment

by:giltjr
ID: 39761017
Just a quick warning, in trunk mode only ONE VLAN can be untagged, I just noticed that on some of the ports you have two untagged VLAN's.
0
 
LVL 57

Expert Comment

by:giltjr
ID: 39761023
What is VLAN 50 used for.  It is untagged, but you also have VLAN 1 as the PVID.  

If I understand what I have read about the HP 1910, any untagged frame will be tagged using the PVID, so all untagged traffic will be assumed to be in VLAN 1.
0
 
LVL 2

Author Comment

by:Axis52401
ID: 39761028
I'm using the WEB GUI not the command line interface. I don't know what that will do, the other switches, Switch A for example (see screen shot is setup ths way.
vlan2.docx
0
 
LVL 57

Expert Comment

by:giltjr
ID: 39761036
O.K. it looks like VLAN 50 is used to communicate with the AP's and on the ProCurve VLAN 50 is untagged on most of the ports.

It looks like you can either leave those ports as hybrid or change them to trunks.

In either case you need to make VLAN 50 as the native (PVID) VLAN.

Reading more of the HP doc, hybrid mode should only be used is special cases, so I would change those ports to trunks.
0
 
LVL 2

Author Comment

by:Axis52401
ID: 39761061
OK, so do I need to change the ports to Tagged for VLAN 50? I think we've tried that amongst a few other things today? How do I make VLAN 50 as the native (PVID) VLAN? SHould I change those ports and if so what ports 1-3 or port 9 too (port 9 in the port that connects to the other switch) to trunks.
0
 
LVL 18

Expert Comment

by:Akinsd
ID: 39761065
I will assume these are lightweight APs (LWAP) and not Autonomous.

If so, the APs need to connect to a DHCP server, (unless IP is statically assigned) then to the controller.

If that is your setup, you'll need to set the ports where the APs connect to as access ports and assign them to vlan 50.

I hope this helps
0
 
LVL 2

Author Comment

by:Axis52401
ID: 39761067
I found  setting to VLAN 50 as the native (PVID) VLAN I think (see screenshot) still no connection to the AP's
vlan3.docx
0
 
LVL 2

Author Comment

by:Axis52401
ID: 39761070
The AP's have static addresses assigned on them, how do I set the ports where the APs connect to as access ports and assign them to vlan 50.
0
 
LVL 57

Accepted Solution

by:
giltjr earned 500 total points
ID: 39761080
You need to remove VLAN 50 from being tagged.
0
 
LVL 57

Expert Comment

by:giltjr
ID: 39761084
If you look at the ProCurve setup, you will see that VLAN 50 is untagged on all ports but 4.
0
 
LVL 2

Author Comment

by:Axis52401
ID: 39761086
That did it, thanks for all your help
0
 
LVL 57

Expert Comment

by:giltjr
ID: 39761088
But leave it tagged on Ge1/0/1.  Just make it untagged only on the ports connecting to the AP's.
0

Featured Post

Secure Your Active Directory - April 20, 2017

Active Directory plays a critical role in your company’s IT infrastructure and keeping it secure in today’s hacker-infested world is a must.
Microsoft published 300+ pages of guidance, but who has the time, money, and resources to implement? Register now to find an easier way.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
Arrow Electronics was searching for a KVM  (Keyboard/Video/Mouse) switch that could display on one single monitor the current status of all units being tested on the rack.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question