- HP Support Forum Home
- >
- Other HP Products
- >
- Other Products
- >
- Re: HELP Configuring VLANs on ProCurve 2910al Switch
HP Support Forums
Join in the conversation.
- Subscribe
- Mark Topic as New
- Mark Topic as Read
- Float this Topic to the Top
- Bookmark
- Subscribe
- Printer Friendly Page
HELP Configurin g VLANs on ProCurve 2910al Switch
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report Inappropriate Content
05-01-2012 07:23 AM
I need some urgent help with my VLAN configuration. This is my first time working with Procurve switches, but from what I know everything appears to be configured properly. Inter-VLAN routing works, as I can ping all the VLAN IPs and Clients on each VLAN, but I cannot get out to the internet on VLANs 1 & 20. VLAN 10 has no issues - it is also the original subnet that was configured on my FW.
I have static routes in place on my FW (Fortinet 100A) for both VLANs 1 & 20. From the FW, I can ping all of the VLAN Gateways and anything on VLAN 10, but cannot ping a Client PC on VLAN 20 and the PC cannot ping the FW (192.168.10.1). The Fortinet 100A's FW policy is set to let any traffic out originating from any subnet.
Because I also tried this setup with a different FW\Router, I get the feeling that I'm missing something in the VLAN setup. Below is my switch Config and my FW routing table. Any help would be greatly appreciated.
Thanks!
Running configuration:
; J9148A Configuration Editor; Created on release #W.14.38
hostname "SW1"
module 1 type J9148A
module 2 type J9149A
ip routing
vlan 1
name "DEFAULT_VLAN"
untagged 47-48,A1-A2
ip address 192.168.5.254 255.255.255.0
no untagged 1-46
exit
vlan 10
name "SERVERS"
untagged 1-24
ip address 192.168.10.254 255.255.255.0
exit
vlan 20
name "CLIENTS"
untagged 25-46
ip helper-address 192.168.10.10
ip address 192.168.20.254 255.255.255.0
exit
ip route 0.0.0.0 0.0.0.0 192.168.10.1
snmp-server community "public" unrestricted
spanning-tree
password manager
password operator
SW1(config)#
FORTINET 100A STATIC ROUTE CONFIG:
OCGFG100A # show router static
config router static
edit 8
set device "dmz2"
set dst 192.168.5.0 255.255.255.0
set weight 50
next
edit 7
set device "dmz2"
set dst 192.168.20.0 255.255.255.0
set weight 50
next
end
Re: HELP Configurin g VLANs on ProCurve 2910al Switch
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report Inappropriate Content
05-01-2012 09:17 AM
Re: HELP Configurin g VLANs on ProCurve 2910al Switch
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report Inappropriate Content
05-01-2012 09:41 AM
I figured it out with help from another forum. I simply changed the routes on the FW for 192.168.5.0/24 and 192.168.20.0/24 to point to 192.168.10.254.
Routing is not my strongest area and I had thought about changing them, but figured since I could ping the 192.168.5.254 and 192.168.20.254 from the router, that the issue must have been in the VLAN config. Guess I was very wrong....
