Comware

Hi,

Im currently working on "HPE Comware Software, Version 7.1.064, Release 0707P12"

I am trying to get a trunk port and NAT to work in a router-on-a-stick like configuration, however i couldn't get it configured in one go so i took a step back and i am now just configuring the vlans and DHCP server on each of them. I am however new to HPE syntax (always used cisco before this) and i can't even get this to work. This is my (shortened) config:

=====

version 7.1.064, Release 0707P12
#
sysname TWA-Router
#
nat address-group 1
port-range 1024 65535
address interface GigabitEthernet0/1
#
dhcp enable
dhcp server always-broadcast
#
dns proxy enable
#
password-recovery enable
#
vlan 1
name Default
#
vlan 2
name Internet
#
vlan 3
name Management
#
dhcp server ip-pool default
gateway-list 192.168.1.1
network 192.168.1.0 mask 255.255.255.0
address range 192.168.1.10 192.168.1.12
dns-list 151.248.48.1 151.248.49.1
#
dhcp server ip-pool internet
gateway-list 192.168.2.1
network 192.168.2.0 mask 255.255.255.0
address range 192.168.2.10 192.168.2.50
dns-list 151.248.48.1 151.248.49.1
#
dhcp server ip-pool management
gateway-list 192.168.3.1
network 192.168.3.0 mask 255.255.255.0
address range 192.168.3.10 192.168.3.50
dns-list 151.248.48.1 151.248.49.1
domain-name TWAntwerpenManagement
#
interface Vlan-interface1
ip address 192.168.1.1 255.255.255.0
dhcp server apply ip-pool default
#
interface Vlan-interface2
ip address 192.168.2.1 255.255.255.0
dhcp server apply ip-pool internet
#
interface Vlan-interface3
ip address 192.168.3.1 255.255.255.0
dhcp server apply ip-pool management
#
interface GigabitEthernet0/1
port link-mode route
ip address dhcp-alloc
undo dhcp select server
# ^ no clue what this does it was here by default
#
interface GigabitEthernet0/0
port link-mode bridge
port access vlan 3

=====

I tried making a trunk, hybrid port, access port, but whatever i do, my test devices don't get an IP.

What am i missing?

Thanks!

Hi,

It seems the issue is not clear here, the iss ue is with DHCP or Inter vlan routing?

Could you please explain more in detail?

Thanks!

Hi,

Neither is working at the moment with this configuration, the clients don't get an ip through DHCP (ipconfig /renew on windows does not work) and even if the ip's (and default gateway) are set manually it is impossible to ping.

Thank you for your time.

Okay i really can't get this to work, this is the entire config should you need it:

#
 version 7.1.064, Release 0707P12
#
 sysname TWA-Router
#
nat address-group 1
 port-range 1024 65535
 address interface GigabitEthernet0/1
#
 dhcp enable
 dhcp server always-broadcast
#
 dns proxy enable
#
 password-recovery enable
#
vlan 1
 name Default
#
vlan 2
 name Internet
#
vlan 3
 name Management
#
dhcp server ip-pool default
 gateway-list 192.168.1.1
 network 192.168.1.0 mask 255.255.255.0
 address range 192.168.1.10 192.168.1.12
 dns-list 151.248.48.1 151.248.49.1
#
dhcp server ip-pool internet
 gateway-list 192.168.2.1
 network 192.168.2.0 mask 255.255.255.0
 address range 192.168.2.10 192.168.2.50
 dns-list 151.248.48.1 151.248.49.1
#
dhcp server ip-pool management
 gateway-list 192.168.3.1
 network 192.168.3.0 mask 255.255.255.0
 address range 192.168.3.10 192.168.3.50
 dns-list 151.248.48.1 151.248.49.1
 domain-name TWAntwerpenManagement
#
controller Cellular0/0
#
interface Aux0
#
interface NULL0
#
interface Vlan-interface1
 ip address 192.168.1.1 255.255.255.0
 dhcp server apply ip-pool default
#
interface Vlan-interface2
 dhcp server apply ip-pool internet
#
interface Vlan-interface3
 ip address 192.168.3.1 255.255.255.0
 dhcp server apply ip-pool management
#
interface GigabitEthernet0/1
 port link-mode route
 description Multiple_Line
 ip address dhcp-alloc
 tcp mss 1280
 nat outbound
 undo dhcp select server
#
interface GigabitEthernet0/0
 port link-mode bridge
 port access vlan 3
#
 scheduler logfile size 16
#
line class aux
 user-role network-admin
#
line class tty
 user-role network-operator
#
line class vty
 user-role network-operator
#
line aux 0
 user-role network-admin
#
line vty 0 63
 authentication-mode scheme
 user-role network-operator
#
 password-control enable
 undo password-control aging enable
 undo password-control history enable
 password-control length 6
 password-control login-attempt 3 exceed lock-time 10
 password-control update-interval 0
 password-control login idle-time 0
 password-control complexity user-name check
#
domain system
#
 domain default enable system
#
role name level-0
 description Predefined level-0 role
#
role name level-1
 description Predefined level-1 role
#
role name level-2
 description Predefined level-2 role
#
role name level-3
 description Predefined level-3 role
#
role name level-4
 description Predefined level-4 role
#
role name level-5
 description Predefined level-5 role
#
role name level-6
 description Predefined level-6 role
#
role name level-7
 description Predefined level-7 role
#
role name level-8
 description Predefined level-8 role
#
role name level-9
 description Predefined level-9 role
#
role name level-10
 description Predefined level-10 role
#
role name level-11
 description Predefined level-11 role
#
role name level-12
 description Predefined level-12 role
#
role name level-13
 description Predefined level-13 role
#
role name level-14
 description Predefined level-14 role
#
user-group system
#
local-user admin class manage
 service-type telnet http
 authorization-attribute user-role network-admin
#
cwmp
 cwmp enable
#
 ip http enable
#
return

Were you perhaps able to fix this issue? i got exactly the same problem with my MSR2003 ..... Config is similar... If you could post your config when it is working now.... would be great

Hi,

Yes my issue was solved, i got in touch with HPE support and they were able to tell me that the vlan interfaces are not supported on MSR2003 instead you need to use subinterfaces and assign those to the VLAN's. Then everything started working.

Thanks!! Got it now working also

Sorry to warm up this old topic. However, I am in a quite similar situation and it would be awesome great if someone (maybe @LeviG) can provide here a short Comware config example. Thanks!

I am especially interested in the “you need to use sub-interfaces and assign those to the VLAN' point. (I had also no luck with the vlan interfaces.)

And of course, a happy new year to all!

Config example:

interface GigabitEthernet0/0
 port link-mode route
 ip address 192.168.1.1 255.255.255.0
 tcp mss 1280
 dhcp server apply ip-pool default
#
interface GigabitEthernet0/0.2
 ip address 192.168.2.1 255.255.255.0
 vlan-type dot1q vid 2
 dhcp server apply ip-pool pool2
#
interface GigabitEthernet0/0.3
 ip address 192.168.3.1 255.255.255.0
 vlan-type dot1q vid 3
 dhcp server apply ip-pool pool3
#
interface GigabitEthernet0/0.10
 ip address 10.255.255.1 255.255.255.252
 vlan-type dot1q vid 10
#
interface GigabitEthernet0/0.11
 ip address 192.168.11.1 255.255.255.0
 vlan-type dot1q vid 11
 dhcp server apply ip-pool pool11
#

Does this help?

Friendly regards,

Thanks LeviG for that example. Unfortunately my config looks almost the same.

Is an additional static route present? (A static route which makes it possible for the range 192.168.2.x to reach 192.168.1.x.)

In my case, I can ping from the 192.168.2.x VLAN up to 192.168.1.12 (various network devices). But I cannot ping all the computers in the 192.168.1.x VLAN.

The same is true for the 192.168.1.x VLAN were I can ping the VoIP Server in the 192.168.2.x VLAN but not the guest computer at 192.168.2.21.

I am currently on a Comware 5 based MSR router, - but that shouldn’t have here any impact. Well, I have opened another thread regarding my situation. (https://community.hpe.com/t5/Comware-Based/Inter-vlan-routing-and-or-static-routing/td-p/7115683#.X_MQBBIxm70)

Maybe someone will give me another input. Again thanks for your help!

interface GigabitEthernet2/0
 port link-mode route
 ip address 192.168.1.1 255.255.255.0
 rip version 2 multicast
 dhcp server apply ip-pool vlan1
#              
interface GigabitEthernet2/0.2
 vlan-type dot1q vid 2
 ip address 192.168.2.1 255.255.255.0
 dhcp server apply ip-pool vlan2
#              
interface GigabitEthernet2/0.3
 vlan-type dot1q vid 3
 firewall packet-filter 3333 inbound
 ip address 192.168.3.1 255.255.255.0
 dhcp server apply ip-pool vlan3