Solved

Cisco Vlan question

Posted on 2013-12-18
4
400 Views
Last Modified: 2014-01-11
Dear All


             I have a valn issue would like to ask, for example if i have created 3 vlan on a cisco switch, and 3 vlan will be using different ip subnet,

int range f0/1 - 23
switchport access vlan 2


int range f0/1 - 23
switchport access vlan 3

and now the 3 vlan has been assigned to switch ports 1 - 23 (see above), just wonder if i dont create sub-interface in router, the 3 vlan computers will not be able to ping each other ? am i correct ?  

if i do not want different vlan to ping each other and at the same time i want each of the vlan to access to internet, do i need to assign three dedicate lan port in the router for vlan1, vlan2 and vlan3 ?  in order to achieve my wish ?



Keith
0
Comment
Question by:piaakit
  • 2
  • 2
4 Comments
 
LVL 11

Expert Comment

by:Miftaul
ID: 39728466
and now the 3 vlan has been assigned to switch ports 1 - 23 (see above), just wonder if i dont create sub-interface in router, the 3 vlan computers will not be able to ping each other ? am i correct ?  

You are partially correct.
InterVLAN routing can be done either within the switch (if that supports routing) or on the router subinterface using Router-on-a-stick.
Can you do a command, "IP Routing" on the Switch and see if that works.

=======

if i do not want different vlan to ping each other and at the same time i want each of the vlan to access to internet, do i need to assign three dedicate lan port in the router for vlan1, vlan2 and vlan3 ?  in order to achieve my wish ?

You can achieve this using ACL. You do not need three dedicated LAN ports.
ACL to block communication between VLANs and NAT to allow all 2 VLANs to communicate to the internet.

Thanks.
0
 

Author Comment

by:piaakit
ID: 39728507
Can you list a example of the access list in my case above ? Thx
0
 

Author Comment

by:piaakit
ID: 39755559
is it possible to list a example of access-list for above
0
 
LVL 11

Accepted Solution

by:
Miftaul earned 500 total points
ID: 39755571
Here is a very good discussion with examples - Link Here

Where exactly you are doing the InterVLAN routing, on the switch or the Router-on-a-stick. I can simulate the scenario in PacketTracer and post it.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Download Logs File from Cisco Switch 1 64
Point to point connection slow in one direction only 15 64
Cisco switch suggestion 5 66
Cisco  3750E switches 1 28
This is about downgrading PIX Version 8.0(4) & ASDM 6.1(5) to PIX 7.2(4) and ASDM 5.2(4) but with only 64MB RAM and 16MB flash. Background: You have a Cisco Pix 515E which was running on PIX 7.2(4) and its supporting ASDM 5.2(4) without any i…
I recently updated from an old PIX platform to the new ASA platform.  While upgrading, I was tremendously confused about how the VPN and AnyConnect licensing works.  It turns out that the ASA has 3 different VPN licensing schemes. "site-to-site" …
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question