Contact US

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Basic VLAN Configuration

Basic VLAN Configuration

Basic VLAN Configuration

I have a basic HP Procurve Switch setup, with 2 PC's and a Firewall connected to the switch.

The switch is configured with 2 vlans and 1 Trunk port. My expectations are that I will be able to access the Internet with this configuration. After setup, I cannot connect to the Internet.

What is the issue here?

This is how I connected the resources:

Ethernet cable from Firewall to port 48
PC1 connected to port 2 (vlan 2)
PC2 connected to port 5 (vlan 3)

This is how I configured the switch:

[vlan Configuration]
switch1# conf t
switch1(config)# vlan 2
switch1(vlan-2)# untagged 2
switch1(config)# exit

switch1(config)# vlan 3
switch1(vlan-3)# untagged 5
switch1(vlan-3)# exit

switch1(config)# write memory

[Trunk Configuration]
switch1(config)# trunk 48 Trk1 trunk

switch1(config)# vlan 2
switch1(vlan-2) tagged Trk1
switch1(vlan-2) exit

switch1(config)# vlan 3
switch1(vlan-3)# tagged Trk1
switch1(vlan-3)# exit
switch1(config)# write memory

Cannot access Internet from either PC sad

Thanks in advance!

RE: Basic VLAN Configuration

What is each devices Default Gateway? What is doing VLAN routing?
What model switch is this? If it's a L2 switch, then you'll have to use something else as your L3 device.

We used to use HP 26xx series switches as the "primary switch".
VLAN 2 (Voice) -
All user ports are Untagged (VLAN1) and TAGGED (VLAN2).
All uplink ports to other switches are TAGGED on both VLAN 1 and VLAN 2.
ALL DATA only devices are Untagged (VLAN1) and NO (VLAN2)
All Voice only device (phone sytem controller for instance) is untagged on VLAN2 and NO on VLAN1.

This 26xx series switch will be the default VLAN for each device on the network. IP routing will be enabled, And will have a ZERO statement pointing at the firewall.
The firewall would then have a simple route directing back to the Voice VLAN via

In the past few years, we've been pushing All routing function to the site's SonicWALL firewall.
In such as case, the SonicWALL will simply assume (DATA VLAN) and will have a sub-inerface X0(v2) as
The switch port connected to X0 will then be configured as Untagged (VLAN1) and TAGGED (VLAN2).
The switch will only need a management IP address, and a traditional default gateway (not IP routing).

In both examples, the respective .1 IP address will be the devices default gateway.

In your example above, I'm not sure what you're using trunks for, unless you're teaming uplinks to additional switches.

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close