Solved

How to stop Cisco 1721 from automatically routing between Vlans

Posted on 2008-09-30
2
812 Views
Last Modified: 2012-05-05
I have a Cisco 1721 with a 10bt WIC in it.

I have trunking configured on the fa0 interface and PAT configured on the e0 interface.  I have 2 vlans trunked with dot1q to the fa0 interface

Vlan1: 192.168.20.0/24
Vlan2: 192.168.100.0/24

PAT/DHCP are enabled to serve both vlans.

My question is, how do i prevent Vlan1 from pinging/accessing Vlan2 and vice versa?

Seeing as how both vlans are in my connected routes in show ip route, the router just assumes it should route to them, but I want them segmented, yet still able to access the internet through e0

Thanks.
0
Comment
Question by:Probity
2 Comments
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 500 total points
ID: 22607420
Use an access-list instead:

ip access-list extended 150
deny ip 192.168.20.0 0.0.0.255 192.168.100.0 0.0.0.255
deny ip 192.168.100.0 0.0.0.255 192.168.20.0 0.0.0.255
permit ip any any

int vlan1
ip access-group 150 in

int vlan2
ip access-group 150 in
0
 
LVL 23

Expert Comment

by:that1guy15
ID: 22607428
Apply an ACL to both sub interfaces that block traffic from the other vlan.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We've been using the Cisco/Linksys RV042 for years as: - an internet Gateway - a site-to-site VPN device - a leased line site-to-site subnet-to-subnet interface (And, here I'm assuming that any RV0xx behaves the same way as an RV042.  So that's …
The Cisco RV042 router is a popular small network interfacing device that is often used as an internet gateway. Network administrators need to get at the management interface to make settings, change passwords, etc. This access is generally done usi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question