HP ProCurve switches

HP ProCurve switches only support 802.1q trunking, so no configuration is needed for encapsulation. First, ssh or telnet into the switch and bring up the management menu.

Enable VLAN Support

First, VLAN support needs to be enabled on the switch if it is not already:

1. Choose Switch configuration
2. Choose Advanced Features
3. Choose VLAN Menu. . .
4. Choose VLAN Support
5. Set Enable VLANs to Yes if it is not already, and choose a number of VLANs. Each time this value is changed the switch must be restarted, so ensure it is large enough to support as many VLANs as necessary.
6. Restart the switch to apply the changes.

Create VLANs

Before the VLANs can be assigned to ports, The VLANs must be created. At the switch configuration menu:

1. Choose Switch configuration
2. Choose Advanced Features
3. Choose VLAN Menu. . .
4. Choose VLAN Names
5. Choose Add
6. Enter the VLAN ID, 10
7. Enter the name, DMZ
8. Choose Save
9. Repeat the steps from Add to Save for any remaining VLANs

Assigning Trunk Ports to VLANs

Next, configure the trunk port for the firewall as well as any trunk ports going to other switches containing multiple VLANs.

1. Choose Switch configuration
2. Choose VLAN Menu. . .
3. Choose VLAN Port Assignment
4. Choose Edit
5. Find the port to assign
6. Press space on Default VLAN until it shows No
7. Move over to the column for each of the VLANs on this trunk port, and Press space until it shows Tagged. Every VLAN in use must be tagged on the trunk port.

Assigning Access Ports to VLANs

1. Choose Switch configuration
2. Choose VLAN Menu. . .
3. Choose VLAN Port Assignment
4. Choose Edit
5. Find the port to assign
6. Press space on Default VLAN until it shows No
7. Move over to the column for the VLAN to which this port will be assigned
8. Press space until it shows Untagged.