kilbride98
asked on
How to make VLAN use a certain Gateway
Hi
I have created myself a VLAN on a cisco 3750 switch called VLAN 26.
We use DHCP to distribute IP addresses and currently everyone gets a default gateway of 10.255.251.254.
I now need to ensure that anyone (ports, pc's etc) who are connected to VLAN 26 goes out through a certain default gateway. (eg. 10.255.251.218 and not .254) I dont want them to have access to the rest of our network, it is simply for internet access only.
Can I do this using an access list?
Thanks
I have created myself a VLAN on a cisco 3750 switch called VLAN 26.
We use DHCP to distribute IP addresses and currently everyone gets a default gateway of 10.255.251.254.
I now need to ensure that anyone (ports, pc's etc) who are connected to VLAN 26 goes out through a certain default gateway. (eg. 10.255.251.218 and not .254) I dont want them to have access to the rest of our network, it is simply for internet access only.
Can I do this using an access list?
Thanks
if you have a digram it would be eaiser
ASKER
Hi
Here is the diagram. Could I create a seperate DHCP pool that would be associated with the new vlan and in the pool set the gateway to be the one I want to use?
Visio-basic.pdf
Here is the diagram. Could I create a seperate DHCP pool that would be associated with the new vlan and in the pool set the gateway to be the one I want to use?
Visio-basic.pdf
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
clients on vlan 26 would not be able to see devices on the currente vlan, think of vlans as seperate physical switchs
what you need is to set up a second sub net
so you would have
vlan(current) = 10.255.251.0 255.255.255.0 DGFGW 10.255.251.254
VLAN26 = 10.10
.252.0 255.255.255.0 DFGW 10.10.252.254
you then set up stow SVI / vlan interfaces
#int vlan26
#ipddress 10.10.252.254 ........ this is the dfgw addess above
from your DHCP you then can hand out the two differet ranges based on what vlan a device is on.
now you have two seperate subnets, you can then control how each can talk out of the network, and indeed between the two vlans.
so you can set up ACLS and routes that will forward traffic from a vlan out of the gateways you want.
but your first step is to seperate the network in to two vlans and configure a new IP address sceam.