HP Procurve 2610 - tagged traffic rejected by MAC OS and Linux OS clients
In a hotel environment, I'm using a Zyxel VSG-1200V2 as a gateway.
The Zyxel VSG-1200V2 has a nice functionality that allows it to identify the room number and send the internet bill directly into the PMS (Property Management System).
This functionality is called "Port Location Mapping" and it is based on the 802.1q tagging.
The hotel is using HP Procurve (2524 or 2610) switches.
My problem is that the VSG1200 v2 can receive and recognize packets with VLAN tag, but it does not support sending back packets with VLAN tags. All packets that go out from VSG1200v2 are un-tagged.
Basically in order to be able to identify the location I need to create a VLAN for each room.
If the VSG answer is not tagged I need to use the default VLAN (1) for the reverse traffic.
For the Windows clients this is working, but for the MAC OS and some Linux OS clients it is not working.
After sniffing the traffic ... as a client ... I’ve realized that the incoming packages are VLAN tagged (with VLAN 1) and rejected by the OS.
I see two solutions to my problem:
1. if the packages sent by VSG will be tagged ... the reverse traffic will use the same VLAN and the client will receive them untagged (hard to get)
2. on the Procurve switch port 1,2,... (rooms) should never forward the VLAN tagging to their clients, even if the ports are appearing as tagged
(as far as I saw the Zyxel switches allows you to do this)
The best and the most secure solution is no. 1, but as it is hard to get I'm looking for solution 2.
And here I need your help.
The configuration of the HP switch is:
- port 1 is room 101 (VLAN 101) (port 1 untagged, port 24 tagged)
- port 2 is room 102 (VLAN 102) (port 1 untagged, port 24 tagged)
- port 24 is used as uplink (connected to LAN port of the VSG).
- default VAN 1 (VLAN 1) (port 24 untagged, port 1,2,3,... tagged)
Is there a way of setting the switch not to send the VLAN tag even if it is set as tagged?
Thanks and regards,
Catalin
In a hotel environment, I'm using a Zyxel VSG-1200V2 as a gateway.
The Zyxel VSG-1200V2 has a nice functionality that allows it to identify the room number and send the internet bill directly into the PMS (Property Management System).
This functionality is called "Port Location Mapping" and it is based on the 802.1q tagging.
The hotel is using HP Procurve (2524 or 2610) switches.
My problem is that the VSG1200 v2 can receive and recognize packets with VLAN tag, but it does not support sending back packets with VLAN tags. All packets that go out from VSG1200v2 are un-tagged.
Basically in order to be able to identify the location I need to create a VLAN for each room.
If the VSG answer is not tagged I need to use the default VLAN (1) for the reverse traffic.
For the Windows clients this is working, but for the MAC OS and some Linux OS clients it is not working.
After sniffing the traffic ... as a client ... I’ve realized that the incoming packages are VLAN tagged (with VLAN 1) and rejected by the OS.
I see two solutions to my problem:
1. if the packages sent by VSG will be tagged ... the reverse traffic will use the same VLAN and the client will receive them untagged (hard to get)
2. on the Procurve switch port 1,2,... (rooms) should never forward the VLAN tagging to their clients, even if the ports are appearing as tagged
(as far as I saw the Zyxel switches allows you to do this)
The best and the most secure solution is no. 1, but as it is hard to get I'm looking for solution 2.
And here I need your help.
The configuration of the HP switch is:
- port 1 is room 101 (VLAN 101) (port 1 untagged, port 24 tagged)
- port 2 is room 102 (VLAN 102) (port 1 untagged, port 24 tagged)
- port 24 is used as uplink (connected to LAN port of the VSG).
- default VAN 1 (VLAN 1) (port 24 untagged, port 1,2,3,... tagged)
Is there a way of setting the switch not to send the VLAN tag even if it is set as tagged?
Thanks and regards,
Catalin