NetInstall across vlans

I've just migrated from 10.7 to 10.8 Server. While mosrt of the services are running well NetInstall is being a pain in the neck..
In 10.7 the server had a static address assigned to the Ethernet pot and also had a VLAN with a static address. With this setup I was able to NetInstall any mac on that VLAN.
I've done the same with 10.8 but I can't NetInstall any Macs that are on the VLAN. Also the NetInstall Service only lists Ethernet as the avalible interface.
Has anyone managed to get NetInstall working across VLANs?
Thanks

We have this working just fine at my company. What we had to do was politely ask the Network Admins to add the IP of our server to the Helper Address list on the switches and routers. It only needs to be added to the first network device that is subneting the network that the client is on. (could be switch or router, most likely not a hub)
The Helper Address list is used for various discovery protocols, DHCP being one of them.
What this does is when the client is looking for the server, the switch/router takes that request and knows that at xxx.xxx.xxx.xxx (the server) there might be a device to help the client and passes that request on to the server on the other part of the network. So for every subnet of computers that needs access to the server you must add the IP of the server to the first device that divides that subnet.
sidenote DO NOT add the IP of the server to the Helper list for the subnet it is actually on, only for subnets that the server is NOT ON. This one drove me crazy for diskless booting. The server ends up getting the request from the client twice. Network guy got overly excited when he was helping us.

Similar Messages

NetBoot & NetInstall across subnets

I've recently begun deployment of our NetBoot servers within our organization. Everything is working as expected, but I'd like to be able to NetInstall across subnets without having to add a helper address to the routers. Basically we're in a large organization and getting rules added to the routers is a lengthy and unlikely scenario. That said, I've seen a few articles regarding the ability to NetBoot across subnets using OF or EFI.
http://www.bombich.com/software/nbas.html
I've verified NetBoot is working on the same subnet, but I've encountered an issue when NetBooting from different subnets. I've tested three systems (iBook G4, PowerMac G4, & Intel MacBook), but only the Intel system is able to communicate. If I look at the server logs, the MacBook is able to consistently communicate, but there are no log entries for any of the PPC attempts. Thus, PPC systems time out when attempting to access the server.
I'm not using any NetBoot, DHCP, or MAC address filtering, so I'm not sure what the problem is. I'm pretty much using an out-of-box configuration with all the larest updates (10.4.7). As far as the client, I've used the NBAS tool, as well as manually configured the systems using Terminal (sudo nvram boot-device="enet:10.x.x.x").
Anybody have any additional input regarding the ability to NetBoot across subnets? Any idea why an Intel system would NetBoot, but PPC would not? Again, filtering has not been enabled.

Yes, each system points to the appropriate image based on architecture (PPC, Intel). The problem is that the server never seems to acknowledge the PPC systems. If I boot an Intel system, I can see the communication data in the server logs. The PPC systems never even register an entry in the logs. It appears as though they never commmunicate at all. Even if a PPC image is specified and an Intel systems boots to the NetBoot server, the commmunication is still logged.
I need to run some additional tests, as well as a packet capture. Perhaps a packet capture will yield some useful information.

SGE Series - Multicast Across VLANs

Does anyone know if the SGE series switches support multicast across VLANs?
If so, how do you configure it?
I have IGMP snooping enabled globally and for each VLAN.
Bridge multicast filtering is enabled as well.

Yes, the sg300 can, and yours probably can too. It's either the settings or the application. What are you trying to accomplish with the multicast over vlan? I had a situation where I was trying to get a DNLA tv to find a DNLA media server (Dnla uses multicast broadcasts for discovery) on a different vlan/subnet. While multicast across vlan worked, the Samsung tv would only look for media servers on its own subnet, regardless of the multicast. You may be facing some limitation of your application, rather than the switch. How about you post some screenshots of the multicast config, then generate some multicast traffic on one vlan and use wireshark to see if you can see it on the other.
Best,
David
Sent from Cisco Technical Support iPad App
Please rate helpful posts.

Airprint across VLANs

I have a WLC 5508 controller in my environment. I'm trying to use AirPrint to attach and print to a Xerox device on a different subnet. If I statically assign an IP address to the Xerox device on my WiFi subnet, I can print to it. How should I configure the WLC and/or my Catalyst 4500/6500 switches to allow AirPrint across VLANs?

Refer the guide :
http://www.cisco.com/c/en/us/td/docs/wireless/technology/bonjour/Bonjour74/Printer_Services.html

Remote Management across VLANs

I can remote manage fine on my VLAN. The workstation on another VLAN did
register its IP address under the Network Address. However, when I try to
remote manage across VLANs it does not get past Authentication.

Hgrossman,
It appears that in the past few days you have not received a response to your posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at http://support.novell.com in both the "free product support" and "paid product support" drop down boxes.
- You could also try posting your message again. Make sure it is posted in the correct newsgroup. (http://support.novell.com/forums)
If this is a reply to a duplicate posting, please ignore and accept our apologies and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Bonjour multicast across vlans?

We have Linksys SRW2048s and i'm wondering if anyone here has any experience configuring the Multicast options to allow iTunes sharing across VLANs.
Thanks,
Joel

You are asking the wrong question. Bonjour is how iTunes advertises it availability (daap.tcp) on the local LAN. However, even if you managed to see those advertisement on a remote LAN, iTunes also is programmed NOT to service any requests originating from outside of it local LAN (otherwise people could share their music across the Internet.) So, Bonjour advertisements is only half the story.
If you really wanted to accomplish this you'd need to:
1) have a proxy on the local LAN with iTunes to access the iTunes daap share.
2) simulate the Bonjour advertisement on the remote LAN to point to that proxy.
I made this work once with router port forwarding and a program called Rendezvous Proxy -- because my home network used to have the wireless on a separate VLAN for security. However, the hassle of separate segments with Bonjour, etc., eventually just led me to flatten out my network into a single broadcast domain.

Unable to communicate with time clock across VLANS

I have a situation where i am installing SGE2000Ps to replace my old switches and configuring VLANS. The time clock will not communicate across the VLANS. If I unplug the network cable and plug it back in I will get two successful pings. If i use a PC configured with the same network settings as the time clock and plug it into the port for the time clock it communcates fine. Have any one come across this problem?

Hi Wayne,
Thank you for contacting Cisco Small Business forum.
I am sorry that you experience this issue.
I have a question for you. What is providing clocking on your network?
The switch operates only as an SNTP client, and cannot provide time services to other systems. So, you can configure it time manually by going:
System > System Management > Time > System Time;
To avoid any issues on your network. I would suggest to use one common SNTP server for all of your network devices. On the switch you can configure it here:
System > System Management > Time > SNTP Settings. If you do not have SNTP server on your network, you can use publicly available one.
Let me know if that helped.
Sincerely,
Alena Patterson
Cisco Small Business Engineer
CCNA

How to configure netboot across vlans/DHCP when already a windows bootp server in the mix?

Hi All,
We just moved to multiple VLAN's for our Mac's in a mostly WIndows environment. DHCP option 66 points to a Windows Deployment Server & option 67 to the WDS file.
I've tried "sudo bless –netboot –server bsdp://10.2.0.1" on a client but get "Netboot scheme bspd not supported on EFI systems".
I can get changes to the DHCP scopes if needed -except for the boot server, so I was thinking using something like using DHCP Vendor Class Identifier to specify a different bootp server but have no clues how...
Any ideas?
Cheers
Steve

You might check out the "How to boot across subnets" page at <http://afp548.com/mactips/>. It has a bunch of info.

Bonjour across VLANS

I have a segmented network with Multiple VLANs. I would like to configure the network in such a way as to have the Macbooks on VLAN 1 autodiscover services on the Macbooks, airports, and timecapsules on VLAN 2.
So I found the www.dns-sd.org site, and I added the following to our dns zone:
; Add PTR records telling clients that they can browse and register here
b.dns-sd.udp IN PTR @
lb.dns-sd.udp IN PTR @
r.dns-sd.udp IN PTR @
I then set each client to have the correct search domain.
With these in place, I still can not get the Bonjour devices to scan each other across the VLANS.
This is not an IP issue, since I can still manually add the hosts, but I need assistance with the autodiscover features. Any suggestions?

You are asking the wrong question. Bonjour is how iTunes advertises it availability (daap.tcp) on the local LAN. However, even if you managed to see those advertisement on a remote LAN, iTunes also is programmed NOT to service any requests originating from outside of it local LAN (otherwise people could share their music across the Internet.) So, Bonjour advertisements is only half the story.
If you really wanted to accomplish this you'd need to:
1) have a proxy on the local LAN with iTunes to access the iTunes daap share.
2) simulate the Bonjour advertisement on the remote LAN to point to that proxy.
I made this work once with router port forwarding and a program called Rendezvous Proxy -- because my home network used to have the wireless on a separate VLAN for security. However, the hassle of separate segments with Bonjour, etc., eventually just led me to flatten out my network into a single broadcast domain.

Netinstalling across Campuses

I'm fairly new to this OSX server stuff--- so here is the deal
I'm running OSX Server 10.4 Tiger at a corporate campus, I have successfully created a netinstall volume and am able to utilize ARD 2.2 and control machines locally to change startup disk to Audio Image Volume and thus Installing the new image on the computers. GREAT!! So far so good.
However
Now I am wanting to do this ACROSS CAMPUSES (6). (far away) We have a communication through put of like 3mb across campuses (weak i know). But can I use ARD and still Netinstall these machines across campus? (just super slow). OR do I need to have OSX Server at each Individual Campus location?
We are backed by a Windows Server 2003 at each campus.
Do I need an Xserve or more Servers at each campus or could I use VNC or what???
HELP!
G5 1.6 Mac OS X (10.4.6) OSX SERVER 10.4 and ARD

thank you.. its very much appreciated!
So I should be able to utilize ARD for Administration and Software installs, (but no Netbooting across subnets.)(or across campuses....)
So would I need OSX Server at each Campus then?... OR could I just send the image in the SP0 folder to a computer at another campus via ARD, and then as far as NetInstalling locally at the other campuses (OSX Server 10.4 is only at 1 campus), I would have to use 3rd party stuff or what?!? I would like to NetInstall as much as possible is the thing. Maybe NetRestore at the others or something!! Arrrgh...
does this make sense.
oh I didnt see a check box in sharing, system prefs. for enabling ARD on one of our labs, it was running Jaguar>?!? apple file sharing should be check boxed or what?
thanks
G5 1.6 Mac OS X (10.4.6)
G5 1.6 Mac OS X (10.4.6)

RV320 Bonjour Discovery across VLANs?

Hi
I have a network consisting of 2 VLANs - one for the "main" network and one for a "guest" network setup using an RV320 router. I have a couple of Apple TVs and a Sony smart TV setup on the main network VLAN. I would like these devices to be discoverable and usable on the guest VLAN as well. After reading various articles about Bonjour, it seems that this is not easily done.
Can anyone confirm whether or not it is possible to provide this functionality on the RV320 router? Any advice would be most appreciated.
Regards.

Hi Richard,
My name is Andrew and I am a content developer for the Cisco knowledge base.
There is bonjour discovery on the RV320. According to the admin guide, page 61, under the System Management tab. " When this feature is enabled, the device
periodically multicasts Bonjour service records to the LAN to advertise its
existence." According to the photo I provided, it does allow you to enable bonjour on different VLANs.
From there, you can enable or disable bonjour for specific VLANs.
It seems like your configuration would be similar to this topology below,
Where the RV320 can route traffic across different VLANs (with bonjour enabled). You might want to check your Port Management tab if inter-vlan routing is enabled.
I hope this answers your question.

Dhcp offers leaking across vlans

I have a 2960 poe switch connecting a number of voip phones and an Egdemark voip router on access ports on a dedicated voice vlan. It also connects several trunked access points. The 2960 is trunked to an upstream 3560 that provides ip routing for data vlans.
The Edgemark acts as dhcp server for the voip phones. I'm seeing bootps broadcasts from the Edgemark leak onto the data vlans.
Why is this happening? I fixed this by applying on the 3560 an inbound acl denying bootps originating from 2960.
Appreciate any insight

Hi there,
I´m not sure what the Edgemark voip router does, please attach a link or something so I can have a look :-)
In short
Your 3560 will probably have the vlan and ip configuration. Have you specified "ip helper address" that directs dhcp requests to the edgemark?
The requests are not bound to any vlan and can traverse many networks to get to the destination and back. Depending on you size and design of the nework, the requests can take odd paths to reach the dhcp. Anyway, if you specify the helper address the router will send the request the best way to reach the dhcp. At least, they should not "leak" to any other network that is not specified in the helper address command
If the edgemark is placed locally on the same vlan it will catch the requests anyway so you do not have to do this if the phones are just local as well.
Not sure if that answered your question, but that´s how it works.

Mapping across VLANs

We had part of one building burn early Tuesday morning. We are relocating the departments that were affected. 3 people need to be able to map to a particular server on vlan 10. Currently they can map to another server on vlan 10, but not this one. Does anyone have any suggestions as to what could be wrong? Any help would be appreciated. Laruie Coles

Hello CHJamey,
I just saw your post and I'd like to try to help.
As long as all the VLAN's are known objects in the vSphere, the VIN shouldn't have any issues with mapping out which VMs are communicating with other VMs.
You mentioned applications, could you perhaps be a little more specific? Did you mean Automatic Applications, Manual Applications, or the applications running inside the VMs?
-Michael.

Can viruses cut across VLANs?

I have one VLAN with email-enabled workstations and one VLAN with non-email workstation running on the same physical network. The VLANs can't see each other. So can a virus still cross over VLANs? Thanks in advance

hi
a virus can spread itself to other computers using a network communication, such as a tcp session between two computers, in your case the VLANs can t see each other it s okay but it still can communicate with each other using a layer 3 device if configured to do so.
so if two computers from two differents vlan in your network communicate with each other using a L3 device so there is a communication and the virus can cross from one computer in vlan x to another computer in vlan y, if the virus is designed to do so.
HTH
do rate if it does help

RV220W Printer Sharing Across VLANs

We have 2 VLANs configured to keep 2 groups of PCs apart. Is it possible to allow both VLANs to access the same printer without allowing other traffic between these VLANs ?
Any advice would be much appreciated.
Sent from Cisco Technical Support iPhone App

Thanks for the reply Simon.
Should I place the printer in a third VLAN (as opposed to one of the exclusive VLANs containing the PCs)? If so, will it be enough to enable"Inter VLAN Routing" on this third 3rd VLAN only?
Sent from Cisco Technical Support iPhone App

NetInstall across vlans

Similar Messages

Maybe you are looking for