inter vlan configure in 3550 switch

Unanswered Question
Oct 22nd, 2008

how i can configure like this type of vlan communication...

vlan10 communicate only vlan20 ,vla30,vlan40,vlan50 but vlan 20,vlan30,vlan40,vlan 50 not communicate each other .

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Dean Watson Thu, 10/23/2008 - 01:50

Just to clarify, you want vlan10 to be accessible from and to vlan20, vlan30, vlan40 and vlan50. But vlan20, vlan30, vlan40 and vlan50 should be isolated from each other?

If vlan10 is used for router, firewall or other gateway device then you may be able to achieve what you want by using Private VLAN.

tcordier Thu, 10/23/2008 - 03:30

Inter VLANs traffic needs to be routed and hence pass through a Layer 3 device. That means you can use access-lists on the L3 device to permit and deny traffic to pass from one subnet (=VLAN) to another. The access-lists can be applied to the physical or logical (VLAN interfaces) you use.

Private VLANs create sub-VLANs within a VLAN and are usually better suited to apply traffic limitations between ports in the same VLAN. However, depending on what you actually want to achieve, Private VLANs may be a good, or better, solution if you now have created different VLANs for single hosts (but we would need more information about your requirement).

HTH, Thomas


This Discussion