Ethernet LAN Help configuring VLANs on HP Procurve 2824 switch

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Help configuring VLANs on HP Procurve 2824 switch Bertram Chan 05-24-07
Posted by Bertram Chan on May 24, 2007, 3:06 pm
Please log in for more thread options



Our ISP is going to provide us with the following over one physical
ethernet wire:

1. Internet access on VLAN 3854
2. Private network to our branch location on VLAN 1024

I have a HP Procurve 2824 switch which we're using for gigabit
connections between our servers.

How do I configure the 2824 switch to take the connection from our ISP
and send the Internet connection to our firewall and the private
network connection to another one of our switches?

On the switch, under VLAN configuration there is a DEFAULT_VLAN
(primary) with VLAN ID 1. I've added two more: Internet (VLAN ID 3854)
and Private (VLAN ID 1024).

I then Tagged port 2 (which is what I connected the Ethernet wire from
our ISP into) for both VLAN IDs 3854 and 1024. I also tagged port 3
with VLAN ID 3854 and connected a wire from that port into our
firewall. Lastly I tagged port 4 with VLAN ID 1024 and connected that
to a computer with a static IP.

I was hoping that would work but it doesn't. Can anyone give me some
guidance? Thanks.

Posted by Daniel J McDonald on May 24, 2007, 6:49 pm
Please log in for more thread options


Bertram Chan <bertram.chan.scfg.ca> wrote:
>
>Our ISP is going to provide us with the following over one physical
>ethernet wire:
>
>1. Internet access on VLAN 3854
>2. Private network to our branch location on VLAN 1024
>
>I have a HP Procurve 2824 switch which we're using for gigabit
>connections between our servers.
>
>How do I configure the 2824 switch to take the connection from our ISP
>and send the Internet connection to our firewall and the private
>network connection to another one of our switches?
>
>On the switch, under VLAN configuration there is a DEFAULT_VLAN
>(primary) with VLAN ID 1. I've added two more: Internet (VLAN ID 3854)
>and Private (VLAN ID 1024).
>
>I then Tagged port 2 (which is what I connected the Ethernet wire from
>our ISP into) for both VLAN IDs 3854 and 1024.

Good.

>I also tagged port 3
>with VLAN ID 3854 and connected a wire from that port into our
>firewall. Lastly I tagged port 4 with VLAN ID 1024 and connected that
>to a computer with a static IP.

ports 3 and 4 should not be tagged, as your firewall and server don't
understand tagged packets. Just assign them to the appropriate vlan as a
member port (not a tagged port)

>
>I was hoping that would work but it doesn't. Can anyone give me some
>guidance? Thanks.


--
Daniel J McDonald CCIE # 2495, CNX
Visit my website: http://www.austinnetworkdesign.com

Posted by Bertram Chan on May 25, 2007, 11:29 am
Please log in for more thread options



Thanks for the help but I'm not sure how to assign ports 3 and 4 to
the appropriate vlan as a member port.

Right now VLAN ID 807 and VLAN ID 1024 both have Port 2 tagged. All
the other ports are untagged.

On Thu, 24 May 2007 17:49:14 -0500, djmcdona@fnord.io.com (Daniel J
McDonald) wrote:

>Bertram Chan <bertram.chan.scfg.ca> wrote:
>>
>>Our ISP is going to provide us with the following over one physical
>>ethernet wire:
>>
>>1. Internet access on VLAN 3854
>>2. Private network to our branch location on VLAN 1024
>>
>>I have a HP Procurve 2824 switch which we're using for gigabit
>>connections between our servers.
>>
>>How do I configure the 2824 switch to take the connection from our ISP
>>and send the Internet connection to our firewall and the private
>>network connection to another one of our switches?
>>
>>On the switch, under VLAN configuration there is a DEFAULT_VLAN
>>(primary) with VLAN ID 1. I've added two more: Internet (VLAN ID 3854)
>>and Private (VLAN ID 1024).
>>
>>I then Tagged port 2 (which is what I connected the Ethernet wire from
>>our ISP into) for both VLAN IDs 3854 and 1024.
>
>Good.
>
>>I also tagged port 3
>>with VLAN ID 3854 and connected a wire from that port into our
>>firewall. Lastly I tagged port 4 with VLAN ID 1024 and connected that
>>to a computer with a static IP.
>
>ports 3 and 4 should not be tagged, as your firewall and server don't
>understand tagged packets. Just assign them to the appropriate vlan as a
>member port (not a tagged port)
>
>>
>>I was hoping that would work but it doesn't. Can anyone give me some
>>guidance? Thanks.


Posted by Daniel J McDonald on May 25, 2007, 6:52 pm
Please log in for more thread options


Bertram Chan <bertram.chan.scfg.ca> wrote:
>
>Thanks for the help but I'm not sure how to assign ports 3 and 4 to
>the appropriate vlan as a member port.
>
>Right now VLAN ID 807 and VLAN ID 1024 both have Port 2 tagged. All
>the other ports are untagged.
3 and 4 should be untagged, but associated with the appropriate vlan.
--
Daniel J McDonald CCIE # 2495, CNX
Visit my website: http://www.austinnetworkdesign.com

Similar ThreadsPosted
Help configuring VLANs on HP Procurve 2824 switch May 24, 2007, 3:06 pm
procurve 2824 noise level June 17, 2006, 9:55 am
Procurve 2824 and 2650 with IBM Cabling system (ICS) November 17, 2004, 6:56 am
Bridging VLANs on an HP ProCurve 2626 August 31, 2005, 7:27 pm
HP ProCurve Switch Gigabiit Stackiing Kit (J4116A) September 12, 2004, 4:24 pm
HP Procurve 2512 switch have multiple trunks? March 9, 2005, 5:12 pm
Routing between VLANs using a Layer 3 Switch March 24, 2005, 11:39 am
Configure VLANs on D-Link switch.. May 9, 2006, 6:57 am
Intra-switch VLANs Netgear September 6, 2006, 1:46 pm
Allied Telesyn switch VLANS May 14, 2007, 3:36 am
Foundry vs HP Procurve July 5, 2005, 6:25 pm
HP Procurve switches July 28, 2004, 11:48 pm
Procurve and redundancy. February 22, 2006, 3:28 pm
Traffic filtering on HP Procurve November 22, 2007, 10:54 am
Connect cat 2950SX to Procurve 3400cl January 12, 2007, 2:58 am