Wired Intelligent Edge (Campus Switching and Routing)

Reply
Highlighted
New Contributor

Aruba 2930M 24G --> VLAN tagging

Hello all,

 

Completely new to aruba switches here, trying to make some sense!

We have recently purchased a number of 2930M switches .

 

Their desired function is to provide connectivity to a number of servers to the rest of our network.

 

servers >> aruba 2930M >> gateway router

 

For redundancy , we are using 2 uplink ports leading to different gateway routers (ports 22 & 23)

 

Each router must operate two VLANs  (100, 200) in order to support two different services.

 

Currently, the router has default vlan 1 in all ports.

 

we have about 10 servers for each switch, half require connectivity on vlan 100 (ports 1-5) , the other on vlan 200 (ports 6-10)

 

The desired situation is that each server port is configured with the desired vlan , but the uplink ports (22 &23) must have both vlans.

 

As i understand, i have to define both VLANs

switch# configure
switch(config)# vlan 100
switch(vlan-100)# tag 1-5 , 22-23

---------
switch# configure
switch(config)# vlan 200
switch(vlan-200)# tag 6-10 , 22-23

this way, uplink ports (22,33) are tagged in both vlans, but each server port is tagged with only the vlan of the service that is required.

 

Each server is configured with the relevant IP/mask/gateway .

 

Am i missing something in my idea of how the configuration should be?

 

Any remarks are welcomed!

Re: Aruba 2930M 24G --> VLAN tagging

Congratulations and welcome to the Aruba familly. In the above configuration you also tag vlans to the servers. Are you sure this is needed? If not you probably need to untag the server ports in the needed VLAN. Uplink ports are tag correctly. The switch will not do any routing is this correct? Regards Dobias

Frequent Contributor II

Re: Aruba 2930M 24G --> VLAN tagging

if you tag your uplink ports with vlan100 and 200 you need to have vlans/subinterfaces on the routers too.

 

if your router has only vlan1 configured it will not work with switch uplinks configured for tagged 100+200

New Contributor

Re: Aruba 2930M 24G --> VLAN tagging

Hello & thank you for the warm welcome!

 

Correct, the aruba switch will not have to do any routing.

each server is configured with the relevant default gateway for each vlan , and the gateway router is also configured with both vlans (100  & 200) .

 

I am not sure of anything where the aruba configuration is needed!

If i understood your comment correctly,  i should "untag" all my server ports (as say input ports) and "tag" only the uplink port. (which i assume places the VLAN tag so the gateway router knows this info)

 

basically,

1)for device ports i should untag the relvant vlans (100, 200)

2)for the uplink ports i should tag relevant vlans (100,200)

3)for the uplink ports i should also untag default VLAN 1 ?

 

Many thanks again for the response!

 

 

Re: Aruba 2930M 24G --> VLAN tagging

You're quick learner 8-). This is correct. If you need VLAN 1 also on the uplinks than you can leave it as untag or tagged it. If you don't need VLAN 1 I would remove it from the ports. 

New Contributor

Re: Aruba 2930M 24G --> VLAN tagging

I was finally able to test the config in production - everything works great!

 

Many thanks again for all the help !

Re: Aruba 2930M 24G --> VLAN tagging

Thank you for this feedback. Great to hear that everything works!!

Occasional Contributor I

Re: Aruba 2930M 24G --> VLAN tagging

OK, I am confused. We DO NOT tag the interface the computer is connected to? I have a computer connected on port 13. I want it to be in vlan 10 and get an IP address from a dhcp server in that vlan. How does the dhcp server (which has 2 dhcp scopes Vlan1/vlan10 - vlan 1 works all day) offer IP's per vlan unless the port it is connected to knows of both vlans? I also want to ping my ASA that has a sub interface Ethernet1.10 in vlan 10 with an IP from that same vlan assigned. The interface is up. I cannot ping thru. 

 

Vlan 10-------------
ASA Port 1 untagged or untagged?

Workstation Port 13 tagged or untagged?

Uplink port (lets say 20 on this switch and 20 on the other switch) tagged or untagged?

Dhcp server connected to another switch (has 2 dhcp scopes, for vlans 1 and 10) tagged or untagged?

 

Vlan 1-------------
ASA Port 1 untagged or untagged?

Workstation Port 13 tagged or untagged?

Uplink port (lets say 20 on this switch and 20 on the other switch) tagged or untagged?

Dhcp server connected to another switch (has 2 dhcp scopes, for vlans 1 and 10) tagged or untagged?

 

Thanks,

 

Jroy

 

 

Occasional Contributor I

Re: Aruba 2930M 24G --> VLAN tagging

Annotation 2020-01-16 210037.pngOh, almost forgot, do I tag or untag Trk's that have 2 or more interfaces (these are also uplinks)

MVP Guru Elite

Re: Aruba 2930M 24G --> VLAN tagging


@jerryroy1 wrote:

OK, I am confused. We DO NOT tag the interface the computer is connected to? I have a computer connected on port 13. I want it to be in vlan 10 and get an IP address from a dhcp server in that vlan. How does the dhcp server (which has 2 dhcp scopes Vlan1/vlan10 - vlan 1 works all day) offer IP's per vlan unless the port it is connected to knows of both vlans? I also want to ping my ASA that has a sub interface Ethernet1.10 in vlan 10 with an IP from that same vlan assigned. The interface is up. I cannot ping thru. 

 

Vlan 10-------------
ASA Port 1 untagged or untagged?

Workstation Port 13 tagged or untagged?

Uplink port (lets say 20 on this switch and 20 on the other switch) tagged or untagged?

Dhcp server connected to another switch (has 2 dhcp scopes, for vlans 1 and 10) tagged or untagged?

 

Vlan 1-------------
ASA Port 1 untagged or untagged?

Workstation Port 13 tagged or untagged?

Uplink port (lets say 20 on this switch and 20 on the other switch) tagged or untagged?

Dhcp server connected to another switch (has 2 dhcp scopes, for vlans 1 and 10) tagged or untagged?

 

Thanks,

 

Jroy

 

 


It will be better to open a new topic

 

and about DHCP, you need to use DHCP Relay



PowerArubaSW: Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP... More info

PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...) More info

PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)

PowerArubaIAP: Powershell Module to use Aruba Instant AP

PowerArubaMC: Powershell Module to use Mobility Controller / Master


ACMP 6.4 / ACMX #107 / ACCP 6.5 / ACSP
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: