Wired Intelligent Edge

Hello there! I finally had the chance to try out my new HP ProCurve 2910al switch but unfortunately I didn’t get the results I wanted to.
First, I set up my VLAN with their corresponding IP and then I enabled the GVRP and routing. Afterwards I linked it to an HP Procurve 2810 tagging all the newly created VLANs onto the 2910 linking port (port 48).
As a result, the dynamic VLANs were visible in the procurve 2810 as well, but whenever I tried to ping from the 2810 one of the management IP (for example 10.20.64.254) I had allocated to the 2910 VLANs, I couldn’t do it and I kept getting the error message “Target did not respond”.

Where am I wrong? If I’ve been too generic just ask!
Thanks a lot!


Hereby the configuration used:
****************************************
HP Procurve 2910 AL
****************************************
Running configuration:

; J9147A Configuration Editor; Created on release #W.14.38

hostname "NTLN013"
module 1 type J9147A
interface 1
unknown-vlans Block
exit
interface 2
unknown-vlans Block
exit
interface 3
unknown-vlans Block
exit

[…]

interface 45
unknown-vlans Block
exit
interface 46
unknown-vlans Block
exit
interface 47
unknown-vlans Block
exit
ip routing
no ip source-route
vlan 1
name "DEFAULT_VLAN"
untagged 48
tagged 1-2
no untagged 3-47
exit
vlan 2
name "User Wired"
ip helper-address 10.20.64.11
ip helper-address 10.20.64.7
ip address 10.20.0.254 255.255.248.0
tagged 1-2,48
exit
vlan 3
name "User Wireless"
ip address 10.20.8.254 255.255.248.0
tagged 1-2,48
exit
vlan 9
name "Guest"
ip helper-address 10.20.64.11
ip helper-address 10.20.64.7
ip address 10.20.35.254 255.255.255.0
tagged 1-2,48
exit
vlan 15
name "Data Center"
untagged 1-2
ip helper-address 10.20.64.11
ip helper-address 10.20.64.7
ip address 10.20.64.254 255.255.255.0
tagged 48
exit
gvrp
dhcp-snooping authorized-server 10.20.64.7
dhcp-snooping authorized-server 10.20.64.11
radius-server host 10.20.64.7
radius-server host 10.20.64.11
ip dns server-address priority 1 10.20.64.7
ip dns server-address priority 2 10.20.64.11
interface 1
dhcp-snooping trust
exit
interface 2
dhcp-snooping trust
exit
aaa authentication port-access eap-radius
aaa port-access authenticator 1-47
aaa port-access authenticator 1 control authorized
aaa port-access authenticator 1 auth-vid 15
aaa port-access authenticator 1 client-limit 8
aaa port-access authenticator 2 control authorized
aaa port-access authenticator 2 auth-vid 15
aaa port-access authenticator 2 client-limit 8
aaa port-access authenticator 3 client-limit 8
[…]
aaa port-access authenticator 46 client-limit 8
aaa port-access authenticator 47 client-limit 8
aaa port-access authenticator active
spanning-tree
no autorun
password manager




****************************************
HP PROCURVE 2810
****************************************


; J9022A Configuration Editor; Created on release #N.11.15

hostname "test-1"
max-vlans 48
web-management ssl
no telnet-server
no qos dscp-map 101110
vlan 1
name "DEFAULT_VLAN"
untagged 1-48
ip address 10.20.0.221 255.255.128.0
exit
gvrp
aaa authentication port-access eap-radius
radius-server host 10.20.64.11
radius-server host 10.20.64.7
spanning-tree
ip ssh
password manager

 

 

P.S. This thread has been moevd from Switches, Hubs, Modems (Legacy ITRC forum) to ProCurve / ProVision-Based. - Hp Forum Moderator

I'm reading your config a little quickly but it looks like you have a bad subnet mask on the 2810.

Thatâ s weirdâ ¦
I changed the default VLAN configuration as follows. Pinging was possible among VLAN 1 IP addresses.

********************************
HP 2910 al
********************************

vlan 1
name "DEFAULT_VLAN"
untagged 1-48
ip address 192.168.0.1 255.255.255.0
exit
name "Data Center"
untagged 1-2
ip helper-address 10.20.64.11
ip helper-address 10.20.64.7
ip address 10.20.64.254 255.255.255.0
tagged 48
exit
gvrp
ip routing
no ip source-route


********************************
HP 2810
********************************
vlan 1
name "DEFAULT_VLAN"
untagged 1-48
ip address 192.168.0.1 255.255.255.0
exit
gvrp

The problem is that even if VLANs are spread and routing is active, itâ s not possible to ping the IP address of another VLAN from the 2810 anymore.

ProCurve Switch 2810-48G(config)# ping 192.168.0.1
192.168.0.1 is alive, time = 1 ms
ProCurve Switch 2810-48G(config)# ping 10.20.64.254
Ping failed: Network is unreachable on this VLAN.

At this stage I wasnâ t sure and so I tried to set the VLAN 15 up in the Procurve 2810 as well, as follows:

name "Data Center"
untagged 1-2
ip helper-address 10.20.64.11
ip helper-address 10.20.64.7
ip address 10.20.64.254 255.255.255.0
tagged 48
exit

Afterwards, I tried to physically ping a host linked into the 2910 and belonging to VLAN 15; it turned out that it was possible.

Now it looks like a problem linked to GVRP.


Where am I wrong? Why isnâ t the routing among VLANs happening?
Thanks again!