cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
535
Views
5
Helpful
4
Replies

Security between VLANS

insccisco
Level 1
Level 1

Guys, I just need very simple security... I setup a router which has a 4-port switch and port 1 is VLAN 2 and port 2 is VLAN 3

I Have 2 different networks running on each vlan and all works great. However, hosts on both VLANS can ping and see each other. I need to have each vlan to be totally independent and private from each other.

So I need to block hosts from one VLAN from seeing hosts on the other VLAN

Can anyone help?

4 Replies 4

I had configured vlan in my career on the dedicated switch but not on switch built in with router.

Until unless you configured inter vlan routing on the router,two vlans will not ping each other.

Have you configured inter valn routing? (that means have you created any subinterfaces on the router?).

Or else can you provide the config of Vlan part of the router ?

--Jaffer

Jon Marshall
Hall of Fame
Hall of Fame

Hi

If you want to stop the 2 vlans talking to each other eg.

vlan 1 = 192.168.1.0 255.255.255.0

vlan 2 = 192.168.2.0 255.255.255.0

access-list vlan1_in deny ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255.0

access-list vlan1_in permit ip 192.168.1.0 255.255.255.0 any

interface vlan 1

ip access-group vlan1_in in

access-list vlan2_in deny ip 192.168.2.0 255.255.255.0 192.168.1.0 255.255.255.0

access-list vlan2_in permit 192.168.2.0 255.255.255.0 any

interface vlan 2

ip access-group vlan2_in in

The above access-lists will block traffic between the 2 vlans but allow each vlan to communicate with any other network.

HTH

Jon

Jon that is exactly what I was looking for.

You are the greatest

thank you

Hi

Glad to have helped and appreciate the rating.

Jon

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: