Link to home
Start Free TrialLog in
Avatar of publicvoid
publicvoidFlag for United States of America

asked on

routing between subnets- no commands needed?

I am setting up a cisco router with a few vlans.  The vlans seem to route ip traffic between each other without any routing commands.  Is that correct or do i have something setup wrong?  So, i have a vlan with the subnet 10.30.0.0/24 and another 10.10.0.0/24 yet without any special routing commands i can ping computers on both networks.  How is that happening and how can i stop it?
ASKER CERTIFIED SOLUTION
Avatar of Mal Osborne
Mal Osborne
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of publicvoid

ASKER

its a 6505 router/switch. It routes traffic between vlans without me putting a command in like:

ip route 10.30.0.0 255.255.255.0 Vlan30

so what do i need commands like that for?  I don't necessarily want to block the traffic, I just didn't expect that behavior.
The 6500, along with a few other L3 switches, will automatically route traffic between VLAN's it has a L3 interface on.

You still need the route command to define routes to L3 networks that the 6500 does not have a L3 interface on.
Perfect, thanks guys!
Hi There,

Interface vlans or SVI's by default when enable routing on a L3 switch.
If you want to restrict it use ACLs.

Below is an example:
http://www.asanka.me/2014/02/disabling-inter-vlan-routing-using-acls/
You can't disable routing on 6500 switch any more.  Setup ACL's on vlan interfaces to block communication.

On lower end switches, you can disable routing by typing: no ip routing