Messages

i have one of these -

https://h20195.www2.hpe.com/v2/getpdf.aspx/4aa3-0717enw.pdf

hi all,


i have a HPE switch and i have telneted in and i want to know the command(s) to block access to a network, so all other networks cant access this network


all my networks on the switch are VLANS and each VLAN has its own gateway ip so each VLAN can talk to eachother via the gateway ip


the easiest solution would be on the network that i want to be private is to put in no gateway ip but i need to have this as i want it to talk to the other networks but not other networks to talk to it


cheers,


rob

hi all,

i have this switch and wireless access controller -

https://whostheman.files.wordpress.com/2011/01/h3c_wireless_technical_overview.pdf

im having great difficulty configuring it, here is what i have done so far configuring it wise and i want to ask a couple questions -

heres my switch config -


[sw7510-GigabitEthernet0/0/1]display vlan all


VLAN ID: 1
VLAN Type: static
Route Interface: configured
Description: old_staff
Name: VLAN 0001
Tagged Ports:
GigabitEthernet11/0/1
Ten-GigabitEthernet2/0/1
Untagged Ports:
GigabitEthernet0/0/2 GigabitEthernet0/0/3 GigabitEthernet0/0/4
GigabitEthernet0/0/5 GigabitEthernet0/0/6 GigabitEthernet0/0/7
GigabitEthernet0/0/8 GigabitEthernet0/0/9 GigabitEthernet0/0/10
GigabitEthernet0/0/11 GigabitEthernet0/0/12 GigabitEthernet0/0/13
GigabitEthernet0/0/14 GigabitEthernet0/0/15 GigabitEthernet0/0/16
GigabitEthernet0/0/17 GigabitEthernet0/0/18 GigabitEthernet0/0/20
GigabitEthernet0/0/21 GigabitEthernet0/0/22 GigabitEthernet0/0/24
GigabitEthernet0/0/25 GigabitEthernet0/0/26 GigabitEthernet0/0/27
GigabitEthernet0/0/28 GigabitEthernet0/0/29 GigabitEthernet0/0/30
GigabitEthernet0/0/31 GigabitEthernet0/0/32 GigabitEthernet0/0/33
GigabitEthernet0/0/35 GigabitEthernet0/0/36 GigabitEthernet0/0/37
GigabitEthernet0/0/38 GigabitEthernet0/0/39 GigabitEthernet0/0/40
GigabitEthernet0/0/41 GigabitEthernet0/0/42 GigabitEthernet0/0/43
GigabitEthernet0/0/44 GigabitEthernet0/0/46 GigabitEthernet11/0/2
GigabitEthernet11/0/3 GigabitEthernet11/0/4 GigabitEthernet11/0/5
GigabitEthernet11/0/6 GigabitEthernet11/0/7 GigabitEthernet11/0/8
GigabitEthernet11/0/10 GigabitEthernet11/0/11 GigabitEthernet11/0/12
GigabitEthernet11/0/13 GigabitEthernet11/0/14 GigabitEthernet11/0/15
GigabitEthernet11/0/16 GigabitEthernet11/0/17 GigabitEthernet11/0/18
GigabitEthernet11/0/19 GigabitEthernet11/0/20 GigabitEthernet11/0/21
GigabitEthernet11/0/22 GigabitEthernet11/0/23 GigabitEthernet11/0/25
GigabitEthernet11/0/26 GigabitEthernet11/0/27 GigabitEthernet11/0/28
GigabitEthernet11/0/29 GigabitEthernet11/0/30 GigabitEthernet11/0/31
GigabitEthernet11/0/32 GigabitEthernet11/0/33 GigabitEthernet11/0/34
GigabitEthernet11/0/35 GigabitEthernet11/0/36 GigabitEthernet11/0/37
GigabitEthernet11/0/38 GigabitEthernet11/0/39 GigabitEthernet11/0/40
GigabitEthernet11/0/41 GigabitEthernet11/0/42 GigabitEthernet11/0/43
GigabitEthernet11/0/44 GigabitEthernet11/0/45 GigabitEthernet11/0/46
GigabitEthernet11/0/47 GigabitEthernet11/0/48
Ten-GigabitEthernet2/0/2

VLAN ID: 2
VLAN Type: static
Route Interface: not configured
Description: staff
Name: VLAN 0002
Tagged Ports:
GigabitEthernet11/0/1
Ten-GigabitEthernet2/0/1
Untagged Ports: none

VLAN ID: 8
VLAN Type: static
Route Interface: configured
IP Address: 172.16.27.220
Subnet Mask: 255.255.255.0
Description: manage
Name: VLAN 0008
Tagged Ports:
GigabitEthernet11/0/1
Ten-GigabitEthernet2/0/1
Untagged Ports:
GigabitEthernet0/0/47

VLAN ID: 12
VLAN Type: static
Route Interface: not configured
Description: clients
Name: VLAN 0012
Tagged Ports:
GigabitEthernet11/0/1
Ten-GigabitEthernet2/0/1
Untagged Ports: none

VLAN ID: 16
VLAN Type: static
Route Interface: not configured
Description: phones
Name: VLAN 0016
Tagged Ports:
GigabitEthernet11/0/1
Ten-GigabitEthernet2/0/1
Untagged Ports: none

VLAN ID: 2100
VLAN Type: static
Route Interface: not configured
Description: radio
Name: VLAN 2100
Tagged Ports:
GigabitEthernet11/0/1
Untagged Ports:
GigabitEthernet0/0/1
Ten-GigabitEthernet2/0/1
and heres my wireless module config -
[WlanAC1-Ten-GigabitEthernet1/0/1]display vlan all
VLAN ID: 1
VLAN Type: static
Route Interface: configured
Description: old_staff
Name: VLAN 0001
Tagged Ports:
Ten-GigabitEthernet1/0/1
Untagged Ports:
WLAN-ESS1 WLAN-ESS2 WLAN-ESS5
WLAN-ESS6 WLAN-ESS7 WLAN-ESS8
WLAN-ESS10 WLAN-ESS11 WLAN-ESS12

VLAN ID: 2
VLAN Type: static
Route Interface: configured
Description: staff
Name: VLAN 0002
Tagged Ports:
Ten-GigabitEthernet1/0/1
Untagged Ports: none

VLAN ID: 8
VLAN Type: static
Route Interface: configured
IP Address: 172.16.27.221
Subnet Mask: 255.255.255.0
Description: manage
Name: VLAN 0008
Tagged Ports:
Ten-GigabitEthernet1/0/1
Untagged Ports: none

VLAN ID: 12
VLAN Type: static
Route Interface: configured
Description: clients
Name: VLAN 0012
Tagged Ports:
Ten-GigabitEthernet1/0/1
Untagged Ports: none

VLAN ID: 16
VLAN Type: static
Route Interface: configured
Description: phones
Name: VLAN 0016
Tagged Ports:
Ten-GigabitEthernet1/0/1
Untagged Ports: none

VLAN ID: 2100
VLAN Type: static
Route Interface: not configured
Description: radio
Name: VLAN 2100
Tagged Ports: none
Untagged Ports:
Ten-GigabitEthernet1/0/1


couple of questions -


why are all the wlan-ess all under vlan 1?


i have made them all a trunk and given them the same vlans and also added the pvid to vlan 2100 to each but why does it appear untagged under vlan 2100 and not the others?


also when i connect my wireless access points to my switch, do i make the port there plugged into untagged, tagged and what vlan do i put them on?


many thanks,


rob