Simple VLAN on HP 2824

[smurfhell]

I've read through the manuals, numerous Google results, and plenty of these forums, but I still can't figure out what I'm doing.

I have a 2824 that I want to have 2 VLANs.

VLAN1 = the default VLAN
VLAN2 = SAN VLAN

Let's say that VLAN1 will be ports 1-20 and VLAN2 will be 21-24. Ports 19-20 need to be in both VLANs. My network is using 172.16.0.0/16 with a gateway of 172.16.1.2.

I create both VLANs through the web GUI: ports 1-20 are untagged in VLAN1, ports 19-20 are tagged in VLAN2, and ports 21-24 are untagged in VLAN2.

VLAN1 has an IP of 172.16.1.250 255.255.0.0. I have not set an IP for VLAN2 because I'm not sure what to set it as.

So the questions are:
What do I set VLAN2 as?
Do I need to reconfigure the network settings of the devices in ports 19-24?
Do I need to setup any routes on the switch so that ports 19-20 can participate in both VLANs?

Any help and commands are greatly appreciated, as I need to have this figured out by this weekend. Thanks in advance.

 

[brianinms]

You are confused, a port is either in a vlan or its a trunk port. If you need the vlans to talk to each other you need a router or a layer 3 switch.

 

[smurfhell]

From what I've read, the HP 2824 is a layer 3 switch capable of IP routing. I'm just not sure what commands I need to run to get the switch to route to the VLANs correctly. I'm also not sure if I have to change settings on my clients to match the gateway of the VLAN.

 

[brianinms]

Oh okay, I use nothing but Cisco so I am not familiar with their product numbers.

ftp://ftp.hp.com/pub/networking/software/Mgmt-Oct2005-59906023-Chap08.pdf

 

[smurfhell]

Thanks for the link, I'll read through the whole thing after I post this. I've seen similar information in other HP manuals (I've downloaded 4 different manuals for this device now)

I guess my main question is on what addresses/subnets to use.
I'm currently using 172.16.0.0/16 for my entire network. How would I break this up into 2 subnets?
Say I have a 3-port switch.

Port 1-client-IP: 172.16.4.1 GW: 172.16.1.2
Port 2-server-IP: 172.16.2.1 GW: 172.16.1.2
Port 3-SAN -IP: 172.16.2.50 GW:172.16.1.2

I want the client to have access only to the server. I want the server to have access to both the client and the SAN. So I create 2 VLANs.

VLAN1-IP: 172.16.1.50 GW:172.16.1.2 - port 1 and 2 untagged
VLAN2-IP: ? GW: ? - port 2 tagged, port 3 untagged
What should my settings for VLAN2 be and do I need to configure the network settings on my SAN to be different than what they are?
It seems like I'm making this harder than what it is, but I don't really know anything about routing - I'm being forced to learn it, and I'm given 1 day.

 

[brianinms]

No, each vlan should have its own gateway.

172.16.4.X 255.255.255.0 GW 172.16.4.1

You then you access-lists to restrict traffic

 

[smurfhell]

So say that my SAN is 172.16.2.X, my server is 172.16.3.X, and my client is 172.16.4.X.

In the OS, do I set the gateway to be 172.16.X.1 depending on which subnet the device is in?

Do I have to set static routes between server-SAN and server-client?

 

[burtsbees]

No static routes---the HP switch knows how to route it since the link is directly connected. Whatever IP address you use for the SVI's on the switch will be each default gateway for each separate vlan.

Burt