Wired

hello and thanks for reading

I have 5 companies sharing the same building, each company has its own hyper-v network including seperate dns/dhcp servers and are set up on their own Vlans, I have 4x 2930F in a VSf ring distributing all  of the various networing around the building, the main problem i am having is that when I set up routing in the stack i get locked out and was having to resort to using console to get back in. each Vlan has its own gateway pointing at the switch, the switch points then to a Sophos XG310 as its own gateway which in turn points to the router for intenet access, what am I doing wrong please.

regards Adrian

------------------------------
adrian dunbar
------------------------------

Hello Adrian,

it all depends on the topology and design you are trying to achieve. 

"the main problem i am having is that when I set up routing in the stack i get locked out and was having to resort to using console to get back in."
It looks like when you change the routing settings your laptop/client can no longer reach the switch stack. You can set up a management vlan to access the stack and all other devices in the network. It's a special vlan whose traffic is separated from the other data vlans and it won't be routed to them. Or if you have such a vlan in the network you should add the Aruba stack to it.

As for the routing question if you mean setting up inter-vlan routing the 2930F is capable of it. It can be enabled with the "ip routing" command. You can use this to route between your 5 vlans with an additional static default route to point to the Sophos FW which can be used for communication to the internet or other networks you have. However if these 5 vlans belong to different companies maybe their users shouldn't be able to communicate with each other?

------------------------------
Toni Andreev
------------------------------

Original Message:
Sent: Apr 09, 2022 03:44 PM
From: adrian dunbar
Subject: 2930F VSF stack Vlans and routing

hello and thanks for reading

I have 5 companies sharing the same building, each company has its own hyper-v network including seperate dns/dhcp servers and are set up on their own Vlans, I have 4x 2930F in a VSf ring distributing all  of the various networing around the building, the main problem i am having is that when I set up routing in the stack i get locked out and was having to resort to using console to get back in. each Vlan has its own gateway pointing at the switch, the switch points then to a Sophos XG310 as its own gateway which in turn points to the router for intenet access, what am I doing wrong please.

regards Adrian

------------------------------
adrian dunbar
------------------------------

Hi Toni

I missed the management thing thats easy, as to the other network issues, if I set up six Vlans (not forgetting the managerment one) ,

Vlan 202 hyper-1 172.17.189.1  255.255.255.0
Vlan 203 hyper-2 172.17.190.1  255.255.255.0
Vlan 204 hyper-3 172.17.191.1  255.255.255.0
Vlan 205 hyper-4 172.17.192.1  255.255.255.0
Vlan 206 hyper-5 172.17.193.1  255.255.255.0
Vlan 207 hyper-6 172.17.194.1  255.255.255.0

1/ Can I set up so that each network is its own domain, and each domain uses a gateway address of 172.17.189.61, 172.17.190.61....194.61 ?
2/ Do i need to tag the port that links to the sophos box?

------------------------------
adrian dunbar
------------------------------

Original Message:
Sent: May 06, 2022 04:59 AM
From: Toni Andreev
Subject: 2930F VSF stack Vlans and routing

Hello Adrian,

it all depends on the topology and design you are trying to achieve. 

"the main problem i am having is that when I set up routing in the stack i get locked out and was having to resort to using console to get back in."
It looks like when you change the routing settings your laptop/client can no longer reach the switch stack. You can set up a management vlan to access the stack and all other devices in the network. It's a special vlan whose traffic is separated from the other data vlans and it won't be routed to them. Or if you have such a vlan in the network you should add the Aruba stack to it.

As for the routing question if you mean setting up inter-vlan routing the 2930F is capable of it. It can be enabled with the "ip routing" command. You can use this to route between your 5 vlans with an additional static default route to point to the Sophos FW which can be used for communication to the internet or other networks you have. However if these 5 vlans belong to different companies maybe their users shouldn't be able to communicate with each other?

------------------------------
Toni Andreev

Original Message:
Sent: Apr 09, 2022 03:44 PM
From: adrian dunbar
Subject: 2930F VSF stack Vlans and routing

hello and thanks for reading

I have 5 companies sharing the same building, each company has its own hyper-v network including seperate dns/dhcp servers and are set up on their own Vlans, I have 4x 2930F in a VSf ring distributing all  of the various networing around the building, the main problem i am having is that when I set up routing in the stack i get locked out and was having to resort to using console to get back in. each Vlan has its own gateway pointing at the switch, the switch points then to a Sophos XG310 as its own gateway which in turn points to the router for intenet access, what am I doing wrong please.

regards Adrian

------------------------------
adrian dunbar
------------------------------