网络工程 - 无法从不同的 vlan 连接到 HP Procurve 2920 - 吾爱随笔录

所以这就是我遇到的问题。

我有一堆 HP Procurve 2920。

跨 vlan 路由是由单个防火墙完成的。

VLAN 10 - 10.10.10.0/25 VLAN 20 - 10.10.20.0/25

每个 10.1 和 20.1 的网关

交换机上的 Vlan 10 接口 = 10.5 Vlan 10 上的 PC1 = 10.100 Vlan 20 上的 PC2 = 20.100

从交换机到防火墙的接口被标记为 vlan 10 和 20。

所以首先测试intervlan路由是否有效。vlan 10 上的 PC1 可以与 vlan 20 上的 PC2 通信。 (10.100 <--> 20.100) PC1 交换机接口未标记 vlan 10 PC2 交换机接口未标记 vlan 20

因此，通过 L3 防火墙的 intervlan 路由再次正常工作。然而，它发生故障的地方是 vlan 20 上的 PC 无法与实际的交换机 IP 通信。(20.100 <-!-> 10.5) 不起作用。

我认为这与 HP 在标记接口上处理这些传入数据包的方式有关。我希望这里有一位 procurve 专家可以提供帮助。我需要其他 vlan 才能访问 mgmt vlan 中的交换机。

我也试过将 vlan 10 设置为“primary-vlan”并关闭“primary-vlan”

抱歉花了这么长时间发布代码，我不得不上网。

NLRC127A-DS1# sho run

Running configuration:

; J9727A Configuration Editor; Created on release #WB.15.12.0015
; Ver #05:18.41.ff.35.0d:9b

hostname "NLRC127A-DS1"
module 1 type j9727a
trunk 19-20 trk1 lacp
no telnet-server
ip default-gateway 10.10.10.1
ip routing
interface 1
   name "External from Firewall:Eth0"
   exit
interface 2
   name "WAN port to Juniper:0/0"
   exit
interface 3
   name "RSV for Switch Trunks"
   exit
interface 4
   name "RSV for Switch Trunks"
   exit
interface 5
   name "RSV for Switch Trunks"
   exit
interface 6
   name "RSV for Switch Trunks"
   exit
interface 7
   name "RSV for Switch Trunks"
   exit
interface 8
   name "RSV for Switch Trunks"
   exit
interface 9
   name "RSV for Switch Trunks"
   exit
interface 10
   name "RSV for Switch Trunks"
   exit
interface 11
   name "RSV for Switch Trunks"
   exit
interface 12
   name "RSV for Switch Trunks"
   exit
interface 23
   name "Trunk_to_NLRC127A-FW1"
   exit
interface 24
   name "Trunk_to_NLRC127A-FW2"
   exit

oobm
   ip address dhcp-bootp
   exit
vlan 1
   name "DEFAULT_VLAN"
   no untagged 1-18,21-24,Trk1
   untagged A1-A2,B1-B2
   no ip address
   forbid 1-18,21-24,Trk1
   exit
vlan 3
   name "Empty Vlan - DO NOT ROUTE"
   no ip address
   exit
vlan 5
   name "WAN_to_Juniper"
   tagged 1-2
   no ip address
   exit
vlan 10
   name "IT Mgmt-32.0/25"
   untagged 13-18
   tagged 1-12,21-24,Trk1
   ip address 10.10.10.4 255.255.255.128
   exit
vlan 15
   name "Bldg Infra-32.128/26"
   tagged 21-24,Trk1
   no ip address
   exit
vlan 20
   name "NLSC-33.0/25"
   tagged 1,10,21-24,Trk1
   no ip address
   exit
vlan 25
   name "NLSC-WHSE-33.128/25"
   tagged 21-24,Trk1
   no ip address
   exit
vlan 30
   name "NRC-34.0/24"
   tagged 10,21-24,Trk1
   no ip address
   exit
vlan 35
   name "NRC Testbed-32.192/26"
   tagged 21-24,Trk1
   no ip address
   exit
vlan 40
   name "Shared-35.0/26"
   tagged 21-24,Trk1
   no ip address
   exit
vlan 50
   name "NatAD-35.64/26"
   tagged 21-24,Trk1
   no ip address
   exit
vlan 60
   name "Wireless-36.0/24"
   tagged 21-24,Trk1
   no ip address
   exit
vlan 70
   name "DMZ"
   tagged 21-24,Trk1
   no ip address
   exit
primary-vlan 3
spanning-tree
spanning-tree Trk1 priority 4
spanning-tree mode rapid-pvst
spanning-tree vlan 5 root primary
spanning-tree vlan 10 root primary
spanning-tree vlan 20 root primary
spanning-tree vlan 30 root primary

NLRC127A-DS1#