9

Switches strip or add tags depending on the port's settings. Your hypothetical packet tagged VLAN 10 ingressing on port 1 would have its tag stripped and when it egressed port 2 (or port 3, because both are untagged members of VLAN 10). Similarly, when a packet ingresses port 2 it will be tagged VLAN 10 before egressing port 1, as per the second part of ...


7

To quote yourself, "The stacking cost just isn't worth it at this scale". Yes, you get some better administrative options with stacking, but it's probably not worth it here. Talking about stacking in general, with just 2 switches, only one stacking cable is necessary. Once you get to 3 switches or more, a ring is best because then any one switch could fail ...


6

Spanning Tree is not an option. The Network contains Switches from different Vendors and Spanning Tree is not compatible enough. If your switches don't at least support MST which has been around for almost 10 years now, replace that garbage. Disabling spanning tree is the most incorrect solution to the problem.


5

The only way to force traffic through a router is make a bunch of /30 subnets (usually with each on their own vlan) and put a single PC and a single router interface on each one. You can also go 802.1QinQ but that's normally used for metro area networks and comes with its own set of complexities, and then you still have to set up /30's with router ...


5

With DAC cables, I usually let the switch dictate compatibility. Go with what is known-good on the switch and work from there. The other part of this is your balking at prices. Part of working in this field is vendor management and establishing vendor relationships. There's almost always a better pricing option; especially with HP equipment. Try some of ...


5

No, there is no equivalent on Procurve gear. If you baulk at HP prices, your best option is probably to look for a third-party supplier that will sell compatible parts with the SFP+'s coded as HP.


5

A tag is only applied to a frame as the frame is carried across the medium between two network devices. The tag is added as it is sent out an interface and stripped when received by the second device. The tag is only needed when received to identify where the traffic should be processed. It is not preserved while being processed (routed/switched) by the ...


5

Does my question itself indicate I am missing some key concept here? Yes. You are dealing with a switch: it's not a router. You can use a L2 which for a private network a public network both, using VLANs. A L3 switch like HP Procurve 8212 is additionally capable to route between private networks route between public networks. But you can't use it as a ...


4

Just use a few links between the two switches in a LAG. it'll be cheaper you'll be easily able to increase bandwidth between the two switches by adding a port should that become necessary you can always upgrade to stacking modules later


4

According to this page, your UPS series is of the "line interactive" type. This designation means that it isn't constantly converting the utility power to DC and back to mains level again. Rather, it's just sitting there monitoring the power and keeping its batteries charged. Input power is passed straight through, although it may be passed though a few ...


3

Converting my comment to an answer: (Thanks for the update, user19039!) If I take a stab in the dark if you can currently ping between hosts on vlans 1 and 3 but not 1 and 4 then hosts on vlan 1 either have static routes back to the HP switch IP of 192.168.4.6 for the ip range 192.168.7.0/24, or the WAN router at 192.168.4.10 has a static route pointing to ...


3

It's simpler than you think, basically any packet hitting the switch in stripped of any tags and put on the right VLAN (unless it's tagged with a VLAN not carried by that port anyway). So in your scenario a packet comes in on port 1 tagged with VLAN 10, is stripped of that tag and placed onto VLAN 10. The CAM table states that the destination MAC is on port ...


3

Product recommendation is off-topic on the stack exchange network, as it attracts spammers and quickly gets outdated. That being said - You're mixing up termonologies. You need L2 to isolate the network between customers (VLAN) and L3 to route it (IP). For a 1gbps WAN link you need something that can push this kind of traffic without falling over. The ...


3

Sure... set an IP on each VLAN interface on the HP ProCurve Enable routing with the "ip routing" command. Make sure the there are routes using the switch VLAN interface IPs as gateways or that the devices use the switch's IP as their gateways.


3

I had a firewall policy rule that was causing the pingability, ICMP echo permission hidden in a group service list and restricted to certain hosts and I didn't see it. :-0 Also had an issue getting VLAN 2 connectivity to a port on the Netgear that is tagged with that VLAN ID, but that appeared to resolve with a restart of that device. (Which wasn't clear in ...


3

On page 9-10 of the manual it states that: This implies that the mac address limit will be reached, and will be remembered until flushed out manually. A port in Static learn mode (learn-mode static) retains a learned MAC address even if you later reboot the switch or disableport security for that port: From documentation: You can authorize specific ...


3

My initial and immediate thoughts are along the lines of what you're contemplating. If these blips are occurring independent of any self-test schedules you have set up on the UPS (if the blips happen some percentage of the time while ON a self-test, then you have either a UPS/transformer/load problem), I'd do exactly what you're suggesting. Move a couple of ...


3

A 2910 with activated ip routing routes from and to any VLAN that it has an IP address assigned in. So, if a node can't reach one VLAN subnet from another it's likely not in the correct VLAN. ip route 10.12.2.0/24 10.12.3.254 can't work since 10.12.2.0/24 is already connected locally and 10.12.3.254 is the switch itself - you can't tell it to route back to ...


3

You may not have correctly reset the device the procedure is Simultaneously press the Reset and Clear buttons on the front of the switch with a paperclip. Continue to hold the Clear button while releasing the Reset button. When the Self Test LED begins to blink, release the Clear button. There is no default password. HP Procurve Switch 2650 ...


2

Not all switches support private VLAN's. I don't believe the 2524 provides full private VLAN support. Some of the later firmware versions did introduce port isolation, but there are some significant limitations when using port isolation like: Port Isolation is intended only for networks that do not use VLAN tagging. (The switch must be in the default VLAN ...


2

Old question, but looks like you never found the answer. I had an old filter config from before I created some trunks. The filter rules contained ports that were now in the trunk groups, and this was causing trouble for the switch. Switch51(config)# show config ; J9773A Configuration Editor; Created on release #YA.15.12.0007 hostname "Switch51" trunk 23-24 ...


2

I'm an old ASE and haven't done anything Procurve or switch related since nearly 8 years and starting to forget everything, so bear with me if I'm talking nonsense. That filter list tells me that you should remove the ports from the filters, not the other way.


2

After some trial and error, I came to the solution below and it works as designed. Thanks to all that helped. ip access-list extended "100" 10 permit ip 192.168.100.0 0.0.0.63 10.220.1.10 0.0.0.0 20 deny ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 Vlan 300 ip access-group 100 in something strange I noticed I can ping source 192.168....


2

So it looks from your setup that you're using the HP 2920 as a router. In order to do this you will need to add static routes on the 2920 to allow for communication between the vlans. If you add the following to your config it should fix it. Put the route to the outside world as your default route- I put it as 1.1.1.1 for the sake of illustration, replace ...


2

I had solved the Problem by follow the hint from richardb. How i have done this: Set Broadcast Limit to 30% Setting up loop-protect for all Ports All loops are detected from now.


2

You can't remove configuration rules that set values with the [no] syntax; the way to remove them is to set them back to their default value, which may involve RTFM. So if you have the two rules DarkMoon gives: aaa port-access mac-based 9 aaa port-access mac-based 9 addr-limit 32 they are disabled with: no aaa port-access mac-based 9 aaa port-access mac-...


2

If a firmware update doesn't help running the command "show tech" will give you more information than you could ever imagine. You will want to use a program like putty and turn on logging open it in notepad and do a find for error or just scan through it and see if anything catches your eye.. Hope this helps. I have had great luck with HP procurve tech ...


2

If the VLANs are trunked to the other closets, you only need ip routing on the core switch.


2

What is the specific model of the router provided from your internet provider? Do you get a few static ip's with your internet package or just dynamic? I am using a CISCO ASA series to do a very similar configuration. [We divide bandwidth based on branch offices] Your HP device is a switch it would be better to setup two routers behind the providers ...


2

With the info you just added in the edit it is pretty clear. 2 possible causes come to mind: 1) The UPS when it is actually needing to do the work slightly drops it's output voltage and the rate of change is steep enough to make the switch think it has a low power condition. I have seen that happen with UPS units before. The only remedy is to take some ...


Only top voted, non community-wiki answers of a minimum length are eligible