Saturday, April 21, 2018

Unable to traverse VLANs

Huge networking noob here. I've mainly been a SysAdmin most of my career but have recently had to run double duty so would appreciate any help/guidance you can provide for a novice.

I have an Aruba 5406R as my aggregation switch, which was recently replaced. Since then I'm unable to traverse VLANs or reach my default gateway (Fortigate firewall @ 10.3.0.10) from any VLAN other than VLAN 1.

This was recently refreshed Procurve 5406 ZL to Aruba 5406 ZL2. The only thing thing that changed in the hardware replacement was the config. The IP of the switch & router ID changed from 10.3.0.3 to 10.3.1.1 to clean up some sloppy IP management. Here's a snippet of my config. I'm at a complete loss as to why VLAN4 can't reach VLAN 1.

*trunk B21-B22 trk1 lacp

*trunk B23-B24 trk2 lacp

*trunk D21-D22 trk3 lacp

*trunk D19-D20 trk4 lacp

*trunk B19-B20 trk5 lacp

*logging facility syslog

*logging severity warning

*include-credentials

*timesync sntp

*time timezone -300

*no web-management

*ip default-gateway 10.3.0.10

*ip route 0.0.0.0 0.0.0.0 10.3.0.10 distance 250

*ip router-id 10.3.1.1

*ip routing

*router ospf

*area backbone

*redistribute connected

*enable

*exit

*vlan 1

*name "Admin"

*no untagged A1-A24,B1-B18,D1-D5,D17

*untagged D6-D16,D18,D23-D24,Trk1-Trk5

*ip address 10.3.1.1 255.255.252.0

*ip ospf 10.3.1.1 area backbone

*exit

*vlan 4 *name "Academic"

*untagged A1-A24,B1,B3,B5,B7,B9,B11,B15,B17-B18

*tagged Trk1-Trk5

*ip address 10.3.4.1 255.255.252.0

*ip helper-address 10.3.2.1

*ip helper-address 10.3.2.21

*ip forward-protocol udp 10.3.2.21 4011

*ip forward-protocol udp 10.3.2.21 tftp

*ip ospf 10.3.4.1 area backbone

*exit

*vlan 10

*name "Voice"

*untagged D1-D5

*tagged A1-A24,B1-B18,D6-D18,D23-D24,Trk1-Trk5

*no ip address

*voice

*exit



No comments:

Post a Comment