[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 818
  • Last Modified:

How to stop Cisco 1721 from automatically routing between Vlans

I have a Cisco 1721 with a 10bt WIC in it.

I have trunking configured on the fa0 interface and PAT configured on the e0 interface.  I have 2 vlans trunked with dot1q to the fa0 interface

Vlan1: 192.168.20.0/24
Vlan2: 192.168.100.0/24

PAT/DHCP are enabled to serve both vlans.

My question is, how do i prevent Vlan1 from pinging/accessing Vlan2 and vice versa?

Seeing as how both vlans are in my connected routes in show ip route, the router just assumes it should route to them, but I want them segmented, yet still able to access the internet through e0

Thanks.
0
Probity
Asked:
Probity
1 Solution
 
JFrederick29Commented:
Use an access-list instead:

ip access-list extended 150
deny ip 192.168.20.0 0.0.0.255 192.168.100.0 0.0.0.255
deny ip 192.168.100.0 0.0.0.255 192.168.20.0 0.0.0.255
permit ip any any

int vlan1
ip access-group 150 in

int vlan2
ip access-group 150 in
0
 
that1guy15Commented:
Apply an ACL to both sub interfaces that block traffic from the other vlan.
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now