Solved

How to stop Cisco 1721 from automatically routing between Vlans

Posted on 2008-09-30
2
814 Views
Last Modified: 2012-05-05
I have a Cisco 1721 with a 10bt WIC in it.

I have trunking configured on the fa0 interface and PAT configured on the e0 interface.  I have 2 vlans trunked with dot1q to the fa0 interface

Vlan1: 192.168.20.0/24
Vlan2: 192.168.100.0/24

PAT/DHCP are enabled to serve both vlans.

My question is, how do i prevent Vlan1 from pinging/accessing Vlan2 and vice versa?

Seeing as how both vlans are in my connected routes in show ip route, the router just assumes it should route to them, but I want them segmented, yet still able to access the internet through e0

Thanks.
0
Comment
Question by:Probity
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 500 total points
ID: 22607420
Use an access-list instead:

ip access-list extended 150
deny ip 192.168.20.0 0.0.0.255 192.168.100.0 0.0.0.255
deny ip 192.168.100.0 0.0.0.255 192.168.20.0 0.0.0.255
permit ip any any

int vlan1
ip access-group 150 in

int vlan2
ip access-group 150 in
0
 
LVL 23

Expert Comment

by:that1guy15
ID: 22607428
Apply an ACL to both sub interfaces that block traffic from the other vlan.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I have seen some questions on problems with SSH/telnet access to Cisco routers that may occur despite the fact that from a PC connected to your LAN, Internet connectivity is in place and users can access Internet sites without any issues.  There are…
Hello , This is a short article on how would you go about enabling traceoptions on a Juniper router . Traceoptions are similar to Cisco debug commands but these traceoptions are implemented in Juniper networks router . The following demonstr…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question