VPN setup on HP 1910-8 switch

I am having some trouble setting up some VPN's on this device.
The scenario is this.
VLAN1 is setup to access the network.
VLAN2 has a PC on it.
VLAN3 has some IP based motor controllers on them.
The whole point in doing this is so that the people on the network cannot see the controllers in any way.
Technically VLAN1 should be able to talk to VLAN2 and VLAN2 should be able to talk to VLAN3.  But VLAN1 and VLAN3 should not be able to see each other.     How do i setup this up so the config will work.

I don't have a lot of experience configuring VLAN's and that is the problem.    
Any guideance would be appreciated!
Kevin CaldwellOwner of RUseeingRed Tech SolutionsAsked:
Who is Participating?
 
TimotiStConnect With a Mentor Datacenter TechnicianCommented:
The V1910 is a light L3 switch, it can do static IPv4 routing.

@kevinecaldwell: what do you currently use to route your traffic between vlans, or to route between internal and external networks? You could setup either a router/firewall or the 1910 for this, but a bit more info about your network would be needed.

The basic rundown is: you want to enable full routing between the subnets, then implement and access control list (ACL) to prevent traffic between vlan3 and any other vlans.
0
 
gheistCommented:
It has nothing to do with VPN.
You need a router to talk between subnets, i.e a device that has access to all vlans, eventually serves DHCP on vlans needed, and acts as a router between networks that need to talk.
Expensive procurve include some routing, yours does not.
0
 
Kevin CaldwellOwner of RUseeingRed Tech SolutionsAuthor Commented:
The first comment mentioned the VPN.  I have no idea why I typed VPN and not VLAN.

2ND comment.  These devices are going to a customer in another state.  That is part of the issue and is that I do not know enough about the remote job site and what they have there.  Too many unknowns here I believe to make it work properly.   It would be one thing to have it at my own site, but throwing a vlan into a customers site without able to fully access it to me could be an issue.
0
 
gheistConnect With a Mentor Commented:
Do you have device in house to test & learn by doing?
0
 
gheistCommented:
No feedback
0
All Courses

From novice to tech pro — start learning today.