Port with voice and data vlan

I have my port configure for voice vlan 100 (10.10.100.0/24) and data vlan 200 (10.10.200.0/24). A worker plugged his PC in with 10.10.10.10/24 and he was able to access a device on 10.10.10.0 network. I am not sure how this works.
I thought that when you configure a port with the specific vlan and if you don't know the vlan (or subnet of the vlan), you cannot access the port.
LVL 1
leblancAccountingAsked:
Who is Participating?
 
MiftaulCommented:
Does 10.10.10.0/24 subnet resides in vlan 200.

You can have multiple subnets reside within a vlan, but only one subnet can communicate outside the vlan.

Here the person added his host with ip 10.10.10.10/24, and he also connected other devices on the same vlan  the switchport is in with this subnet.  say another device is on 10.10.10.20.  now communication will word just fine between 10.10.10.10 and 10.10.10.20.
0
 
leblancAccountingAuthor Commented:
no. 10.10.10.0/24 is supposed to be on vlan10 and I did not configure the port to vlan10 yet. Is this strange? In my network, I try to have one subnet per vlan
0
 
MiftaulCommented:
You mean the host 10.10.10.10 in vlan 200 is communicating with the same subnet in vlan 10. Could it be that the person actually is communicating with another host he put in vlan 200.
Elso it could be that there are misconfigurations in your switch. Make sure the link between the switch is trunk and not access.
0
Cloud Class® Course: Microsoft Windows 7 Basic

This introductory course to Windows 7 environment will teach you about working with the Windows operating system. You will learn about basic functions including start menu; the desktop; managing files, folders, and libraries.

 
leblancAccountingAuthor Commented:
ok so this is what really happened, his PC has 10.10.10.10 connected to port 1 (configured for vlan 200) and his server (10.10.10.1) connected to port 2 (configured for vlan 200 as well). His PC then can communicate with his server. Not sure how this works.
0
 
MiftaulCommented:
Thats what i thought. Vlan is a layer2 technology.

You can have any number of layer3 subnets within a vlan. But you can only have one ip address configured for the vlan interface. That specific subnet within the vlan can communicate outside of the vlan

Here host and the server in subnet 10.10.10.0/24 are residing in vlan200, communication within the vlan is allowed and they can communicate between them. But when these devices tries to communicate outside of vlan 200, its dropped. Because these hosts doesnt know how to reach vlan interface ip which is the default gateway and thats a different subnet 10.10.200.0/24
0
 
leblancAccountingAuthor Commented:
"You can have any number of layer3 subnets within a vlan". This is key for me to understand here. Thank you
So when 10.10.10.0 tries to communicate with 10.10.100.0/24 for example, it will be dropped because vlan200 is assigned to 10.2.200.0/24. Correct?
0
 
MiftaulCommented:
You got it exactly, correct.

Please post here if you have any other confusions.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.