HI there,
We are experiencing some weird issues with our ProCurve network setup...
We have 2x 2910al-24G switches which form our Core network stack. These are split into 2 Port-based VLANS.
VLAN 1 = Production, Tagged P1-2, Untagged P3-16.
VLAN 2 = DMZ, Tagged P1-2, Untagged P3-16.
Port 1 and 2 are used to link the 2 switches togeather using 2 Cat5e cables.
Spanning tree is enabled on both switches.
Going into these switches are 4 Cables provided from our suppliers' upstream network. The 4 cables are split into 2 VLAN's - Prod and DMZ - and are plumbed into the switches based on the Port Based VLAN. These form 2 Subnets - Production on 10.0.0.0/255.255.224.0 and DMZ on 172.16.16.0/255.255.240.0.
Upstream of the core stack is a Virtualised Firewall which is used to control access, aswell as route between VLAN's, listening on 10.0.31.254 and 172.16.31.254.
We can plug in both DMZ 2 uplink cables and they work perfectly. We can get access to the firewall and the internet beyond.
However when we plug in the DMZ 1 uplink cables, we loose all connectivity on the DMZ 2 uplink. DMZ 1 continues to work and we can get out to the internet.
Having discussed this with our suppliers networks team, they think the issue is being caused by Spanning Tree.
They have recommended the following setup - image attached.
Does this make sense? Will it work? How easy is it to configure the necessary Trunk links and priorities?
Apologies for the long-windedness - advanced network config like this is pretty new to me...
Any info appreciated.
Cheers
Gavin
We are experiencing some weird issues with our ProCurve network setup...
We have 2x 2910al-24G switches which form our Core network stack. These are split into 2 Port-based VLANS.
VLAN 1 = Production, Tagged P1-2, Untagged P3-16.
VLAN 2 = DMZ, Tagged P1-2, Untagged P3-16.
Port 1 and 2 are used to link the 2 switches togeather using 2 Cat5e cables.
Spanning tree is enabled on both switches.
Going into these switches are 4 Cables provided from our suppliers' upstream network. The 4 cables are split into 2 VLAN's - Prod and DMZ - and are plumbed into the switches based on the Port Based VLAN. These form 2 Subnets - Production on 10.0.0.0/255.255.224.0 and DMZ on 172.16.16.0/255.255.240.0.
Upstream of the core stack is a Virtualised Firewall which is used to control access, aswell as route between VLAN's, listening on 10.0.31.254 and 172.16.31.254.
We can plug in both DMZ 2 uplink cables and they work perfectly. We can get access to the firewall and the internet beyond.
However when we plug in the DMZ 1 uplink cables, we loose all connectivity on the DMZ 2 uplink. DMZ 1 continues to work and we can get out to the internet.
Having discussed this with our suppliers networks team, they think the issue is being caused by Spanning Tree.
They have recommended the following setup - image attached.
Does this make sense? Will it work? How easy is it to configure the necessary Trunk links and priorities?
Apologies for the long-windedness - advanced network config like this is pretty new to me...
Any info appreciated.
Cheers
Gavin