Security between VLANS

Unanswered Question
Jun 26th, 2007

Guys, I just need very simple security... I setup a router which has a 4-port switch and port 1 is VLAN 2 and port 2 is VLAN 3

I Have 2 different networks running on each vlan and all works great. However, hosts on both VLANS can ping and see each other. I need to have each vlan to be totally independent and private from each other.

So I need to block hosts from one VLAN from seeing hosts on the other VLAN

Can anyone help?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
jaffer_sathik2010 Wed, 06/27/2007 - 01:07

I had configured vlan in my career on the dedicated switch but not on switch built in with router.

Until unless you configured inter vlan routing on the router,two vlans will not ping each other.

Have you configured inter valn routing? (that means have you created any subinterfaces on the router?).

Or else can you provide the config of Vlan part of the router ?


Jon Marshall Wed, 06/27/2007 - 09:58


If you want to stop the 2 vlans talking to each other eg.

vlan 1 =

vlan 2 =

access-list vlan1_in deny ip

access-list vlan1_in permit ip any

interface vlan 1

ip access-group vlan1_in in

access-list vlan2_in deny ip

access-list vlan2_in permit any

interface vlan 2

ip access-group vlan2_in in

The above access-lists will block traffic between the 2 vlans but allow each vlan to communicate with any other network.



insccisco Wed, 06/27/2007 - 10:52

Jon that is exactly what I was looking for.

You are the greatest

thank you


This Discussion