Link to home
Start Free TrialLog in
Avatar of Yashy
YashyFlag for United Kingdom of Great Britain and Northern Ireland

asked on

Trying to set up a VLAN with port range. When I connect laptop outside of that port range, can still ping that network I set up?!

Hi guys,

I've got an HP procurve. I put in the following commands:

ProCurve Switch 2810-48G# conf t
ProCurve Switch 2810-48G(config)# vlan1 name VLAN1
ProCurve Switch 2810-48G(config)# vlan1
ProCurve Switch 2810-48G(vlan-1)# untagged 1-11
ProCurve Switch 2810-48G(vlan-1)# ip address 192.168.13.1 255.255.255.0
ProCurve Switch 2810-48G# wr mem


I assume I have to set it up as untagged, as I will not be having one port with more than one VLAN or tagged traffic.

SO I have set up VLAN1 to be on ports 1-11. However, when I plug a laptop with the same network range as 192.168.13.0 onto let's say port number 20...it can still ping 192.168.13.1. What gives? Should that be possible?

I thought my configuration says that ports 1-11 are only configured for the network 192.168.13.0/24 and anything outside of that range is vanilla and not configured?

Thanks for helping guys
Yashy
SOLUTION
Avatar of Lee Ingalls
Lee Ingalls
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of David Johnson, CD
David Johnson, CD
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
There's no sign of a second VLAN anywhere on the switch. And unless you had assigned ports to a different VLAN, what Pete Long had mentioned is what will hold true.
Avatar of Yashy

ASKER

Hey guys,

Thank you all for your input and help here. I appreciate it.

So basically, if I reconfigure those ports 1-11 to be on VLAN10 with the same IP 192.168.13.1/24, then in theory, if I plug in my laptop with the IP address say 192.168.13.100 to port 20 (outside of my VLAN10 range), I should not be able to ping the gateway 192.168.13.1 right?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Yashy

ASKER

Yeah, i will use VLAN10. So there wont be a VLAN1:)
Avatar of Yashy

ASKER

Pete Long, that worked. I cleared the switch first. I went in again and configured it all but just created a VLAN2 with vlan ID 2. I assigned untagged ports 1-11 to it, set the IP address 192.168.13.1/24 to those ports. Saved it. Now, when I connect my laptop with a static IP to let's say port 12 or anything above, I can't connect to the 192.168.13.1 IP. Perfect.

Thanks a lot for everyone's input.
ThanQ