Buy or Renew
Buy or Renew
Cisco + Splunk: It’s a new day for your data. Learn more.
 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
377
Views
0
Helpful
3
Replies

Accessing a Directly Connected Network

cco
Level 1
Level 1

‎11-05-2007 05:14 AM - edited ‎03-03-2019 05:40 AM

Is it possible to exclude a directly connected network on a router from the routing table? In other words; lets suppose that a router has an interface in network X, is it possible to prevent access to network X from any other network without using ACLs? For example, by making network X not routable (removing it from the routing table). Is that practically possible?

Thanks

Labels:
0 Helpful
3 Replies 3

Kevin Dorrell
Level 10
Level 10

‎11-05-2007 05:23 AM

I am not entirely clear why you would want to do this, but normally you could do it with an access-list.

You could shut down the router interface on that network, but I guess thta is not what you are after.

If you are talking about a layer-3 switch, then simply delete the VLAN interface. That will leave you with the layer-2 still working, but with no routing into or out of it. That is, hosts on the VLAN could still communicate with each other, but not with any other VLAN.

Is it that you want the router just to act as a host on that network? If that is the case, then I cannot thonk of a way of doing it. What I usually do in that case is to find a layer-3 switch on my network that is only operating in layer-2 mode, i.e. with routing disabled, and configure a VLAN interface on that.

Kevin Dorrell

Luxembourg

0 Helpful

cco
Level 1
Level 1
In response to Kevin Dorrell

‎11-05-2007 05:29 AM

Thanks Kevin, well yes am talking about a layer3 switch that has vlan interfaces configured. The idea is that one of these VLAN interfaces is going to be used to manage the switch (Telnet or SSH). I want to be able to manage the switch from within the same management VLAN while denying management access from any other network. I was wondering if it's possible to do that without using ACLs on the management VLAN interface.

0 Helpful

Kevin Dorrell
Level 10
Level 10
In response to cco

‎11-05-2007 05:41 AM

Oh, I see! So you cannot simply delete the layer-3 VLAN interface, 'cos that would zap your management functions as well.

Sorry, apart from the access lists (in this case applied to the vty lines as well as the VLAN interface), I cannot think of a better way to do it. How about anyone else?

Kevin Dorrell

Luxembourg

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents