[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1398
  • Last Modified:

How to create a seperate isolated vlan on procurve

I've been asked to create a seperate vlan for a public wireless internet connection. I have a seperate cable internet connection coming into my modem and then a linksys router. I created the vlan 99 and tagged 2 ports on my procurve to vlan 99. I forbid all other ports for vlan 99 and forbid the 2 ports on all other vlans. I plugged the wan side of the linksys router into one of the ports and a laptop into the other port on vlan 99. I configured the helper ip address for vlan 99 to be the linksys router. I'm still not able to get an ip address from the linksys when plugged into port 2. what else do I need to do, I don't want any traffic from vlan 99 to contact anything else and vise verse.
  • 2
1 Solution
Matt VCommented:
Can you manually assign an IP to the laptop from the DHCP range and see if you have connectivity to the linksys?

You should not need a helper address since they are on the same LAN segment.
knfitzAuthor Commented:
do I need to assign an IP address and default gateway to the vlan?
Matt VCommented:
No, not unless you want to route it with the other vlan.
Your PC port should most likely be untagged. You only need tagging on your link between the switch and router and only if that is also being used by other VLANs on both networking devices as well.

You should not be able to route between VLANs unless you specifically configure to allow it.

You may want to configure ACLs on the IP interface for each network to drop anything coming in that is destined for the other network.

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now