• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 304
  • Last Modified:

Inter Vlan routing

ok..heres my prob.
i have a block of public IP's from the ISP(naturally)  i was wondering if there was a way i could possibly block like 15 ports off and put them in a vlan specifically for these IP's and then allow access to that Vlan from other vlans?  How would i go about that..thanks again in advance
  • 3
  • 2
1 Solution
Um, my crystal ball is out of batteries :P

What brand/model switch/router have you got?
jasonmichelAuthor Commented:
dell 6200 switches stacked with 10g kit and cisco router with 12.4 ios..
Say you've already got 2 VLANs VLAN 1 (Data) and VLAN 2 (Voice), and you want grab 15 ports and chuck em in a new VLAN (Lets call it 3, Public).

VLAN 1 -
VLAN 2 -
VLAN 3 - 210.200.30.X/27 (For example)

Dell 6200 - Example config:
- Ports 1 - 15 are VLAN 3 only
- Ports 16-23 are in VLAN 1 only
- Port 24 is the uplink to the Cisco
- Just apply the port 24 setting to the 10g uplinks for inter-switch connectivity.

vlan database
 vlan 1,2,3
interface ethernet 1/g24
 switchport mode general
 switchport general allowed vlan add 2,3 tagged
 switchport general pvid 1
interface range Ethernet 1/g1-1/g15
 switchport access vlan 3
interface range Ethernet 1/g16-1/g23
 switchport access vlan 1

Cisco uplink to the switch:
interface XXX
 switchport mode trunk
 switchport trunk encapsulation dot1q
 switchport trunk native 1
interface Vlan1
 ip address
interface Vlan2
 ip address
interface Vlan3
 ip address 210.200.30.x/27
ip routing

The default gateway for VLAN1 is
The default gateway for VLAN2 is
The default gateway for VLAN3 is (The Cisco Router's VLAN 3 interface)


You could make the Dell's do the routing instead if you wish, but that's as far as I go with Dell, the rest I'm is basically Web config, and cannot be shown easily with words.

Try here: http://support.dell.com/support/edocs/network/pc62xx/en/UG/HTML/configue.htm#wp1185290

jasonmichelAuthor Commented:
would there have to be some type of default route statement so that the other 2 vlans know that vlan 3 is the exit destination for (or in this case inet?)
If your Cisco was doing the routing, it would have a:

 ip route [ISP's GW IP]

As long as each device on each VLAN had a default gateway of the Cisco, they all would have internet access, and they (each VLAN) all could talk to each other.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now