turn on vlans?

[tvanderb]

I need the commands to turn on vlans on a core HP 5308 and outlying HP 2650's. Can anyone point me in the right direction? Any hints as to what I need to include?

Also I only want one of my vlans to be able to access two of my servers. All my servers are on their own switch. Do I tag the ports for the servers with the specific vlans I want to be able to access them?

Thanks

 

[ralpheb]

Hi tvanderb -

There is a step-by-step configuration example at

http://www.hp.com/rnd/support/config_examples/5300xl_portbase.pdf.

You do not need to tag the server ports in order to limit their traffic to one VLAN. You can leave them untagged. What you need to do is to assign the appropriate VLAN-ID to those servers' Switch 5308 or 2650 ports so that their traffic is limited to the VLAN (that you want them to belong to).

Regards,
Ralph

 

[tvanderb]

Thanks for your reply. You are correct and that would work if I didn't have servers that I need to share between vlans. I went ahead and called HP support. The tech told me that in order to tag the ports for my servers that the servers must have 802.1q compatible network cards in them. Rather then spend a lot of time researching my network cards, the solution we (the tech and I) came up with was to put my restricted servers on a switch where I could deny access to a vlan on that switch rather than tagging the ports and then put the shared servers on my 5308 and allow all vlans. That could've been a problem if I hadn't run out of copper connections on my 5308 and purchased an additional HP 2650 switch to put my servers on and expand the copper capability in the building where my core switch is located. I'll find out if I understand my vlan theory properly when I get this all setup next week. If it doesn't work, I'll be calling HP tech support again and I'll let this forum know the results/problems we encounter.

 

[ralpheb]

Hello tvanderb -

In the configuration example that I referenced (see the URL I gave you), you can see that the ports on VLAN 200 are untagged. PCs attached to those untagged ports will not be accessible from VLAN 100, except through routing. So, if you are not routing (I have minimal information on your design goals and constraints), then you can configure your setup similarly and prevent access to your servers. It is not necessary that those servers' NICs be tagged.

Regards,
Ralph