Comware

From time to time we'r testing some applications which are webbased.

I would like to configure our Procurve 2848 configure(for example port 27 as vlan) and make a route between this port and our network.

it's actualy a separate network

Original Network on Default vlan:
192.168.1.0 255.255.255.0

default gateway: 192.168.1.1

Test network on vlan 2 port 27:
192.168.2.1 255.255.255.0

Q1: How to assign a IP address to this vlan port.

Q2: How to route this port to default vlan.


all machines on vlan 2 on port 27 must be able to access internet.


Rene

hi Rane

I make config for your test

yess..

primary setup on switch enable ip routing

whit this command

config)#ip routing

and assign ip address vlan 1

config-vlan1)#ip address 192.168.1.1/24

and you can create new vlan 2

config)#vlan 2

and assign ip address

config-vlan2)#ip address 192.168.2.1/24

after assign vlan 2 member port on switch (all port default member vlan 1)

for example interface 27

config-vlan2)#untagged 27

and write static routig command on switch for internet connection

0.0.0.0 0.0.0.0 192.168.1.10 (1.10 ip internet router lan ip )

and you can must be write on internet router static ip command

192.168.1.0 255.255.255.0 192.168.1.1
192.168.2.0 255.255.255.0 192.168.1.1

ok..... at the present time connect pc on switch

pc 1 vlan1 member pc

ip address 192.168.1.20
subnet mask 255.255.255.0
default gateway 192.168.1.1


pc 2 vlan 2 member pc

ip address 192.168.2.20
subnet mask 255.255.255.0
default gateway 192.168.2.1

good luck

Thanks for your quick responce.

The switch is already configured.

All ports are member of default vlan.

i have configured port 27 throug hp management tool as vlan 2. without ip address.

now i can't delete this port anymore.

First i need to aasign a ip address to this port.
Then i need to make the route between these two vlan's.

Hi rene

fristly
you can create vlan 2 on switch and assign ip address vlan 2

192.168.2.1/24

and you can must be int 27 untagged member vlan 2

imposible assign ip address on port
ip address assign on vlan interface

when i try to set ip addres i receive the message that the ip address exists.

How can i check that.

Thanks for your support

Ok,

I have now the following configured:

Default_Vlan: 192.168.1.10
Vlan 2: 192.168.2.1

Default gateway for both vlan's is : 192.168.1.1

Ip route is enabled.

So far so good.

But how can i access Default_vlan and internet?

please look attach file

Thanks for the attached file.

Now i can ping other pc's, but the pc's on the send vlan can not internet.

These are the results of my sho ip:

VLAN: VLAN_2
IP CONFIG: Manual
IP ADDRESS: 192.168.2.10
SUBNET MASK: 255.255.0.0
PROXY ARP: NO

All the same ...

change your ip address my configuration
and you make test

cenk

sory soryy

please send me sh run print now

We have modified the ip and the subnet.

Default_Vlan: IP: 172.27.1.10
Subnet: 255.255.0.0
Ip range: 172.27.0.0
Default gateway: 172.27.0.254
Reserverd ports: 1-26 28-48

RESVMH_VLAN: 172.28.1.10
Subnet: 255.255.0.0
IP Range: 172.28.0.0
Reserved port: 27

Must used default gateway 172.27.0.254

Computers on 172.28.0.0 must communicate with 172.27.0.0 and internet.

Thanks for your support.

Hi,
you just need a route at your default gateway
(172.27.0.254) back to the switch.
something like
172.28.0.0 255.255.0.0 172.27.1.10

and than everthing should work fine.
alex

you can write on internet router static route command

172.27.0.0 255.255.0.0 172.27.1.10
172.28.0.0 255.255.0.0 172.27.1.10

cenk

When i type the following command:

ip route 172.28.0.0 255.255.0.0 172.27.1.10

i receive this massage:

172.27.1.10 can not be switch ip address and route gateway at the same time.

My default gateway is 172.27.0.254

Rene

****************************************************
switch on only have one routing

0.0.0.0 0.0.0.0 172.27.0.254
****************************************************




*****************************************************
on internet router routing command

172.27.0.0 255.255.0.0 172.27.1.10
172.28.0.0 255.255.0.0 172.27.1.10
*****************************************************

Ok,

Why i receive this message:

172.27.1.10 can not be switch ip address and route gateway at the same time.

I think i must delet all route and recreate the new one.

For your information, the ip route print screen.

hi,
now you have added the route to the wrong device. you need to add the route at your default gateway and not!! the HP Switch.
alex

Ok,

Did you red the previous recomendation of cenk sasmaztin.

If i type ip route 172.27.1.0 255.255.0.0 172.27.0.254 i receive this message:

172.27.1.0/16 inconsistent address and mask

172.27.1.0 is a host ip from your subnet 172.27.0.0/16. because of this you can't add the route.
but why and where do you want to add that route.
the sh run from your jpg previosly was just fine. you simply need to add the route
172.28.0.0 255.255.0.0 172.27.1.10 to your gateway and everthing is fine.
you con try this with a client in 172.27.0.0 and change the default gateway from that client to 172.27.1.10
Now you should be able to ping that client from your new vlan. this means that then everthings is fine on the Switch. than add the route to the gateway and you can get to the internet or whatever is behind that gateway.
alex

:D

you can write on internet router below routing command

172.27.0.0 255.255.0.0 172.27.1.10
172.28.0.0 255.255.0.0 172.27.1.10
**************************************************

Thanks,

i'll try tomorrow.

i'll also add this network to our ISA server.

I have created a network on our ISA.

From my pc (172.28.1.5) which is connected to the vlan 2 port 27 i can not ping the network on vlan 1. and i can not internet.

I have attached the latest screenshot of my Procurve config.

Hi Rene,
you don't need those last two routes.
just remove them and try again.
alex

I want cry Rene

please you read be carefull

Rene

****************************************************
SWICH ONLY HAVE ONE ROUTING COMMAND
0.0.0.0 0.0.0.0 172.27.0.254
****************************************************




*****************************************************
YOU CAN WRITE THIS COMMAND ONLY INTERNET ROUTER

172.27.0.0 255.255.0.0 172.27.1.10
172.28.0.0 255.255.0.0 172.27.1.10
*****************************************************


*****************************************************
So you can use isa server on system

isa server connect vlan 1 untag port and assign ip address
vlan 1 subnet 172.27.3.x

and delete all routing command ......

and you can write
ip default gateway 172.27.3.x (isa lan ip address)

good luck

Please don/t cry :-)

Now i can ping the gateway. (ISA: 172.27.0.254)
From ISA i can also ping the 172.28.1.0 subnet.

On the ISa i have added this route:

172.28.0.0 255.255.0.0 172.27.1.10

I haven't still no access to the internet.

The client ipconfig:

IP: 172.28.1.6
NetMask: 255.255.0.0
GW: 172.28.1.10

DNS1: 172.27.0.11
DNS2: 172.27.0.12

hi Rene please send me

last sh run print and network map

please..:)

Hi,

Thanks for the quick response:

Hi Rene,
your switch config is fine. no need to change anything there!
first i would try to ping the dns servers and make a nslookup for some url.
then there might be some firewall rules on your isa server not allowing your new vlan to reach the internet. but with isa servers i am out. don't know how to configure it.
good luck
alex