Link to home
Start Free TrialLog in
Avatar of rhwimmers
rhwimmersFlag for United States of America

asked on

HP Procurve 2 vlans (voice and data) with 1 dhcp server/nic - what port settings?

Pretty standard config.  Voice vlan is 20, data is 10.  Most ports are untagged data, and tagged voice.  Phones boot up in data vlan and then have an option file that tells them to use vlan20 and reboot to get new ip address.  What are my port settings supposed to be on the DHCP server so it can communicate in both the voice and data vlan and provide IPs to the right devices etc?
Here is config.

interface 18
   name "dhcp_server"
exit
ip routing
vlan 1
   name "DEFAULT_VLAN"
   untagged A1-A2,B1
   ip address 172.16.11.2 255.255.255.0
   no untagged 1-48
   exit
vlan 10
   name "Data"
   untagged 1-2,6-8,10-43,45-47
   ip helper-address 172.16.1.52
   ip address 172.16.1.2 255.255.255.0
   exit
vlan 20
   name "VoIP"
   untagged 3-5,9
   qos priority 7
   ip helper-address 172.16.1.52
   ip address 172.16.2.2 255.255.255.0
   tagged 1-2,7-8,11-48
   voice
   exit
ip route 0.0.0.0 0.0.0.0 172.16.1.1
ip route 172.16.2.0 255.255.255.0 vlan 20
snmp-server community "public" Unrestricted
primary-vlan 10
no autorun

ProCurve 2910al-48G-PoE Switch(vlan-10)#
Avatar of Zephyr ICT
Zephyr ICT
Flag of Belgium image

Hi, I'm not sure what you mean with port settings for the DHCP server...

In any case, I see you already have the IP-helper in place, so you're on the right track, maybe this article can get you where you want to be (if I don't misunderstand your question that is): http://technet.microsoft.com/en-us/library/dd759168.aspx
Avatar of rhwimmers

ASKER

The dhcp server (windows box) has one data IP.  What port settings does it need to have, just untagged data (default) and tagged voice, just like the other ports?
Avatar of TimotiSt
As the DHCP server has an IP in the subnet of vlan10, you won't need a helper address for vlan10.
As 172.16.2.0/24 is connected, you won't need that static route either.
If the default gw of the DHCP server is 172.16.1.1, it'll need a static route to 172.16.2.0/24 through the switch (172.16.2.2).
Connect the DHCP server to an untagged vlan10 port.
That should be good to go with a dhcp-relay style setup.

If you want to dual-home the DHCP server to both vlans/subnets, that'll need a fairly different setup and a VLAN-aware OS/NIC in the server itself. If this is the case, what OS are you running? VLANs are a pain with Windows...

Tamas
Data devices get DHCP IP just fine, but not voice.  If I static the phone to a voice IP/DG etc it works fine.
The switch lost its config but was working, so I shouldnt have to change anything on the server/phones etc - I recall the config noted the dhcp server port and am pretty sure that port had to be set differently than the others in terms of the tagging.
Can you post a 'route print' (Windows) or 'route -n' (Linux) from the server?
default gateway is .2 for both voice and data (the switch) .1 is the firewall but we shouldn't be even touching that with this traffic.
I Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0       172.16.1.2      172.16.1.52     15
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
       172.16.1.0    255.255.255.0         On-link       172.16.1.52    266
      172.16.1.52  255.255.255.255         On-link       172.16.1.52    266
     172.16.1.255  255.255.255.255         On-link       172.16.1.52    266
    192.168.168.0    255.255.255.0         On-link     192.168.168.2    266
    192.168.168.2  255.255.255.255         On-link     192.168.168.2    266
  192.168.168.255  255.255.255.255         On-link     192.168.168.2    266
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     192.168.168.2    266
        224.0.0.0        240.0.0.0         On-link       172.16.1.52    266
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link     192.168.168.2    266
  255.255.255.255  255.255.255.255         On-link       172.16.1.52    266
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
          0.0.0.0          0.0.0.0       172.16.1.2       5
          0.0.0.0          0.0.0.0       172.16.2.2  Default
===========================================================================
I can ping to/from phones/pcs across vlans etc, no problems there.
Okay, in that case it should work okay. Can you put a port in vlan20 untagged and test with a PC what do you get? Possibly record the DHCP exchange with wireshark.
I get a vlan 20 IP no problem with a PC.  Looks like a phone/pbx issue?
Can you double-check the option that directs the phones to reboot using vlan20?
Is that coming from DHCP, or they would use LLDP-MED?
From dhcp I think.  On the phone menu it has bootserver cutom+opt66.  Custom is 160, which points to a internal url for the pbx.
The phone should boot up in data vlan and then somehow know to get to the voice but I dont see that happening or know how its supposed to work.  I can manually put vlan 20 in the phone but still dont get address via dhcp.
Do you have option 66 configured on the DHCP server?
No, the phone guy said thats not used anymore, but the custom portion is (which is 160), so the phone says custom+66, the next screen says custom=160.  160 on the VOICE dhcp pool has an ipaddress:8088 for its config.  Phone guy says that is correct on the phone side.  and dhcp server hasn't changed, only thing that changed was the switch config as far as ive been told, at least.
opt66 used to be used in older systems and would define a tftp server but now its just the option160 deal then it gets the config (xml file) from an internal webserver (located on the voice vlan)
If it's really only the switch that's changed, you could try to mark vlan20 as a voice vlan and enable LLDP-MED. It shouldn't mess up anything, and the phones might need it afterall.
How to enable lldp-med?  Phone has it enabled, it also has cdp enabled by default.
If I take a port out of tagged vlan 20 it does get a data ip address, of course it doesnt work as a phone, but interesting
I did a packet capture, heres a screen shot - crap load of dhcp disc, offer, request, and nack but not sure what to make of that.  I did this on a pc hooked to phone with phone not working.  PC ip is 1.120
Untitled.png
Is it not possible to increase the points any more?
I'll get an example lldp-med config for you once I get home. :)
Thanks.  It seems that as soon as the phone gets tagged in vlan 20 it will not get an ip address.  If it's put on the phone manually, it will not get an address.  If I take no tag 20 phone will get data ip.  Still feel like something on dhcp server doesnt like vlan 20 tags for some reason.
Still can't get this working.  Would a packet capture help?
Sorry for the delay; see below for the LLDP-MED config.

lldp run
lldp config all medTlvEnable network_policy
lldp config all medTlvEnable capabilities

Open in new window


If it still doesn't work, can you post exact make/model and firmware version of the phones and a firmware version of the switch?
Just made the config change, will update tomorrow
Still no luck
HP 2910al-48G-PoE Switch (J9148A)
W.15.13.0005, ROM W.14.06

phones polycom soundpoint IP335
revision 4.2.2.0710

When booting and it says welcome (start, setup, about) and starts to count down if I click about it says server address resolving, click next then shows ip address resolving, next shows vlan20 (so its getting that from something).  I can circle through that menu but still just stays on waiting for network to initialize.
ASKER CERTIFIED SOLUTION
Avatar of rhwimmers
rhwimmers
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Solution self solved