This HP Community is for Customer to Customer Product Support. First Time Here? Check Out Videos on How to Search, Register, Post and More.

Re: HELP Configuring VLANs on ProCurve 2910al Switch (1995 Views)
Reply
Student
bstrac77
Posts: 3
Registered: ‎05-01-2012
Message 1 of 3 (2,003 Views)

HELP Configuring VLANs on ProCurve 2910al Switch

I need some urgent help with my VLAN configuration. This is my first time working with Procurve switches, but from what I know everything appears to be configured properly. Inter-VLAN routing works, as I can ping all the VLAN IPs and Clients on each VLAN, but I cannot get out to the internet on VLANs 1 & 20. VLAN 10 has no issues - it is also the original subnet that was configured on my FW. 

 

I have static routes in place on my FW (Fortinet 100A) for both VLANs 1 & 20. From the FW, I can ping all of the VLAN Gateways and anything on VLAN 10, but cannot ping a Client PC on VLAN 20 and the PC cannot ping the FW (192.168.10.1). The Fortinet 100A's FW policy is set to let any traffic out originating from any subnet. 

 

Because I also tried this setup with a different FW\Router, I get the feeling that I'm missing something in the VLAN setup. Below is my switch Config and my FW routing table. Any help would be greatly appreciated. 

 

Thanks! 

 

 

 

Running configuration:

 

; J9148A Configuration Editor; Created on release #W.14.38

 

hostname "SW1"

module 1 type J9148A

module 2 type J9149A

ip routing

vlan 1

   name "DEFAULT_VLAN"

   untagged 47-48,A1-A2

   ip address 192.168.5.254 255.255.255.0

   no untagged 1-46

   exit

vlan 10

   name "SERVERS"

   untagged 1-24

   ip address 192.168.10.254 255.255.255.0

   exit

vlan 20

   name "CLIENTS"

   untagged 25-46

   ip helper-address 192.168.10.10

   ip address 192.168.20.254 255.255.255.0

   exit

ip route 0.0.0.0 0.0.0.0 192.168.10.1

snmp-server community "public" unrestricted

spanning-tree

password manager

password operator

 

SW1(config)#

 

 

FORTINET 100A STATIC ROUTE CONFIG:

 

OCGFG100A # show router static

config router static

    edit 8

        set device "dmz2"

        set dst 192.168.5.0 255.255.255.0

       set weight 50

    next

    edit 7

        set device "dmz2"

        set dst 192.168.20.0 255.255.255.0

        set weight 50

    next

end

 

 

 

Please use plain text.
Student
bstrac77
Posts: 3
Registered: ‎05-01-2012
Message 2 of 3 (1,995 Views)

Re: HELP Configuring VLANs on ProCurve 2910al Switch

Bump...Someone must have an idea as to what I'm doing wrong here. Any assistance would be greatly appreciated.
Please use plain text.
Student
bstrac77
Posts: 3
Registered: ‎05-01-2012
Message 3 of 3 (1,994 Views)

Re: HELP Configuring VLANs on ProCurve 2910al Switch

I figured it out with help from another forum. I simply changed the routes on the FW for 192.168.5.0/24 and 192.168.20.0/24 to point to 192.168.10.254.

 

Routing is not my strongest area and I had thought about changing them, but figured since I could ping the 192.168.5.254 and 192.168.20.254 from the router, that the issue must have been in the VLAN config. Guess I was very wrong....

Please use plain text.