Solved

HP Procurve 2 vlans (voice and data) with 1 dhcp server/nic - what port settings?

Posted on 2014-01-26
28
2,332 Views
Last Modified: 2014-05-27
Pretty standard config.  Voice vlan is 20, data is 10.  Most ports are untagged data, and tagged voice.  Phones boot up in data vlan and then have an option file that tells them to use vlan20 and reboot to get new ip address.  What are my port settings supposed to be on the DHCP server so it can communicate in both the voice and data vlan and provide IPs to the right devices etc?
Here is config.

interface 18
   name "dhcp_server"
exit
ip routing
vlan 1
   name "DEFAULT_VLAN"
   untagged A1-A2,B1
   ip address 172.16.11.2 255.255.255.0
   no untagged 1-48
   exit
vlan 10
   name "Data"
   untagged 1-2,6-8,10-43,45-47
   ip helper-address 172.16.1.52
   ip address 172.16.1.2 255.255.255.0
   exit
vlan 20
   name "VoIP"
   untagged 3-5,9
   qos priority 7
   ip helper-address 172.16.1.52
   ip address 172.16.2.2 255.255.255.0
   tagged 1-2,7-8,11-48
   voice
   exit
ip route 0.0.0.0 0.0.0.0 172.16.1.1
ip route 172.16.2.0 255.255.255.0 vlan 20
snmp-server community "public" Unrestricted
primary-vlan 10
no autorun

ProCurve 2910al-48G-PoE Switch(vlan-10)#
0
Comment
Question by:rhwimmers
  • 18
  • 9
28 Comments
 
LVL 25

Expert Comment

by:Zephyr ICT
Comment Utility
Hi, I'm not sure what you mean with port settings for the DHCP server...

In any case, I see you already have the IP-helper in place, so you're on the right track, maybe this article can get you where you want to be (if I don't misunderstand your question that is): http://technet.microsoft.com/en-us/library/dd759168.aspx
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
The dhcp server (windows box) has one data IP.  What port settings does it need to have, just untagged data (default) and tagged voice, just like the other ports?
0
 
LVL 17

Expert Comment

by:TimotiSt
Comment Utility
As the DHCP server has an IP in the subnet of vlan10, you won't need a helper address for vlan10.
As 172.16.2.0/24 is connected, you won't need that static route either.
If the default gw of the DHCP server is 172.16.1.1, it'll need a static route to 172.16.2.0/24 through the switch (172.16.2.2).
Connect the DHCP server to an untagged vlan10 port.
That should be good to go with a dhcp-relay style setup.

If you want to dual-home the DHCP server to both vlans/subnets, that'll need a fairly different setup and a VLAN-aware OS/NIC in the server itself. If this is the case, what OS are you running? VLANs are a pain with Windows...

Tamas
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
Data devices get DHCP IP just fine, but not voice.  If I static the phone to a voice IP/DG etc it works fine.
The switch lost its config but was working, so I shouldnt have to change anything on the server/phones etc - I recall the config noted the dhcp server port and am pretty sure that port had to be set differently than the others in terms of the tagging.
0
 
LVL 17

Expert Comment

by:TimotiSt
Comment Utility
Can you post a 'route print' (Windows) or 'route -n' (Linux) from the server?
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
default gateway is .2 for both voice and data (the switch) .1 is the firewall but we shouldn't be even touching that with this traffic.
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
I Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0       172.16.1.2      172.16.1.52     15
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
       172.16.1.0    255.255.255.0         On-link       172.16.1.52    266
      172.16.1.52  255.255.255.255         On-link       172.16.1.52    266
     172.16.1.255  255.255.255.255         On-link       172.16.1.52    266
    192.168.168.0    255.255.255.0         On-link     192.168.168.2    266
    192.168.168.2  255.255.255.255         On-link     192.168.168.2    266
  192.168.168.255  255.255.255.255         On-link     192.168.168.2    266
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     192.168.168.2    266
        224.0.0.0        240.0.0.0         On-link       172.16.1.52    266
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link     192.168.168.2    266
  255.255.255.255  255.255.255.255         On-link       172.16.1.52    266
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
          0.0.0.0          0.0.0.0       172.16.1.2       5
          0.0.0.0          0.0.0.0       172.16.2.2  Default
===========================================================================
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
I can ping to/from phones/pcs across vlans etc, no problems there.
0
 
LVL 17

Expert Comment

by:TimotiSt
Comment Utility
Okay, in that case it should work okay. Can you put a port in vlan20 untagged and test with a PC what do you get? Possibly record the DHCP exchange with wireshark.
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
I get a vlan 20 IP no problem with a PC.  Looks like a phone/pbx issue?
0
 
LVL 17

Expert Comment

by:TimotiSt
Comment Utility
Can you double-check the option that directs the phones to reboot using vlan20?
Is that coming from DHCP, or they would use LLDP-MED?
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
From dhcp I think.  On the phone menu it has bootserver cutom+opt66.  Custom is 160, which points to a internal url for the pbx.
The phone should boot up in data vlan and then somehow know to get to the voice but I dont see that happening or know how its supposed to work.  I can manually put vlan 20 in the phone but still dont get address via dhcp.
0
 
LVL 17

Expert Comment

by:TimotiSt
Comment Utility
Do you have option 66 configured on the DHCP server?
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
No, the phone guy said thats not used anymore, but the custom portion is (which is 160), so the phone says custom+66, the next screen says custom=160.  160 on the VOICE dhcp pool has an ipaddress:8088 for its config.  Phone guy says that is correct on the phone side.  and dhcp server hasn't changed, only thing that changed was the switch config as far as ive been told, at least.
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
opt66 used to be used in older systems and would define a tftp server but now its just the option160 deal then it gets the config (xml file) from an internal webserver (located on the voice vlan)
0
 
LVL 17

Expert Comment

by:TimotiSt
Comment Utility
If it's really only the switch that's changed, you could try to mark vlan20 as a voice vlan and enable LLDP-MED. It shouldn't mess up anything, and the phones might need it afterall.
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
How to enable lldp-med?  Phone has it enabled, it also has cdp enabled by default.
If I take a port out of tagged vlan 20 it does get a data ip address, of course it doesnt work as a phone, but interesting
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
I did a packet capture, heres a screen shot - crap load of dhcp disc, offer, request, and nack but not sure what to make of that.  I did this on a pc hooked to phone with phone not working.  PC ip is 1.120
Untitled.png
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
Is it not possible to increase the points any more?
0
 
LVL 17

Expert Comment

by:TimotiSt
Comment Utility
I'll get an example lldp-med config for you once I get home. :)
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
Thanks.  It seems that as soon as the phone gets tagged in vlan 20 it will not get an ip address.  If it's put on the phone manually, it will not get an address.  If I take no tag 20 phone will get data ip.  Still feel like something on dhcp server doesnt like vlan 20 tags for some reason.
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
Still can't get this working.  Would a packet capture help?
0
 
LVL 17

Expert Comment

by:TimotiSt
Comment Utility
Sorry for the delay; see below for the LLDP-MED config.

lldp run
lldp config all medTlvEnable network_policy
lldp config all medTlvEnable capabilities

Open in new window


If it still doesn't work, can you post exact make/model and firmware version of the phones and a firmware version of the switch?
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
Just made the config change, will update tomorrow
0
 
LVL 1

Author Comment

by:rhwimmers
Comment Utility
Still no luck
HP 2910al-48G-PoE Switch (J9148A)
W.15.13.0005, ROM W.14.06

phones polycom soundpoint IP335
revision 4.2.2.0710

When booting and it says welcome (start, setup, about) and starts to count down if I click about it says server address resolving, click next then shows ip address resolving, next shows vlan20 (so its getting that from something).  I can circle through that menu but still just stays on waiting for network to initialize.
0
 
LVL 17

Expert Comment

by:TimotiSt
Comment Utility
0
 
LVL 1

Accepted Solution

by:
rhwimmers earned 0 total points
Comment Utility
The resolution was to have the port with the dhcp server to be set to "no" on the vlan option.  No clue why, but thats what worked
0
 
LVL 1

Author Closing Comment

by:rhwimmers
Comment Utility
Solution self solved
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now