Solved

VPN setup on HP 1910-8 switch

Posted on 2016-09-16
5
20 Views
Last Modified: 2016-10-09
I am having some trouble setting up some VPN's on this device.
The scenario is this.
VLAN1 is setup to access the network.
VLAN2 has a PC on it.
VLAN3 has some IP based motor controllers on them.
The whole point in doing this is so that the people on the network cannot see the controllers in any way.
Technically VLAN1 should be able to talk to VLAN2 and VLAN2 should be able to talk to VLAN3.  But VLAN1 and VLAN3 should not be able to see each other.     How do i setup this up so the config will work.

I don't have a lot of experience configuring VLAN's and that is the problem.    
Any guideance would be appreciated!
0
Comment
Question by:kevinecaldwell
  • 3
5 Comments
 
LVL 61

Expert Comment

by:gheist
ID: 41802697
It has nothing to do with VPN.
You need a router to talk between subnets, i.e a device that has access to all vlans, eventually serves DHCP on vlans needed, and acts as a router between networks that need to talk.
Expensive procurve include some routing, yours does not.
0
 
LVL 17

Accepted Solution

by:
TimotiSt earned 450 total points (awarded by participants)
ID: 41805153
The V1910 is a light L3 switch, it can do static IPv4 routing.

@kevinecaldwell: what do you currently use to route your traffic between vlans, or to route between internal and external networks? You could setup either a router/firewall or the 1910 for this, but a bit more info about your network would be needed.

The basic rundown is: you want to enable full routing between the subnets, then implement and access control list (ACL) to prevent traffic between vlan3 and any other vlans.
0
 

Author Comment

by:kevinecaldwell
ID: 41805302
The first comment mentioned the VPN.  I have no idea why I typed VPN and not VLAN.

2ND comment.  These devices are going to a customer in another state.  That is part of the issue and is that I do not know enough about the remote job site and what they have there.  Too many unknowns here I believe to make it work properly.   It would be one thing to have it at my own site, but throwing a vlan into a customers site without able to fully access it to me could be an issue.
0
 
LVL 61

Assisted Solution

by:gheist
gheist earned 50 total points (awarded by participants)
ID: 41807290
Do you have device in house to test & learn by doing?
0
 
LVL 61

Expert Comment

by:gheist
ID: 41835696
No feedback
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

I see many questions here on Experts Exchange regarding switch port configurations and trunks. This article is meant for beginners in the subject to help to get basic knowledge about Virtual Local Area Network (VLAN (http://en.wikipedia.org/wiki/Vir…
This tutorial will go through the steps required to write a script that will back up the configuration settings of a HP-ProCurve switch. You will need to get the following things to follow this tutorial: Telnet Scripting Tool e.g. TST10.exe …
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now