Yashy
asked on
Trying to set up a VLAN with port range. When I connect laptop outside of that port range, can still ping that network I set up?!
Hi guys,
I've got an HP procurve. I put in the following commands:
ProCurve Switch 2810-48G# conf t
ProCurve Switch 2810-48G(config)# vlan1 name VLAN1
ProCurve Switch 2810-48G(config)# vlan1
ProCurve Switch 2810-48G(vlan-1)# untagged 1-11
ProCurve Switch 2810-48G(vlan-1)# ip address 192.168.13.1 255.255.255.0
ProCurve Switch 2810-48G# wr mem
I assume I have to set it up as untagged, as I will not be having one port with more than one VLAN or tagged traffic.
SO I have set up VLAN1 to be on ports 1-11. However, when I plug a laptop with the same network range as 192.168.13.0 onto let's say port number 20...it can still ping 192.168.13.1. What gives? Should that be possible?
I thought my configuration says that ports 1-11 are only configured for the network 192.168.13.0/24 and anything outside of that range is vanilla and not configured?
Thanks for helping guys
Yashy
I've got an HP procurve. I put in the following commands:
ProCurve Switch 2810-48G# conf t
ProCurve Switch 2810-48G(config)# vlan1 name VLAN1
ProCurve Switch 2810-48G(config)# vlan1
ProCurve Switch 2810-48G(vlan-1)# untagged 1-11
ProCurve Switch 2810-48G(vlan-1)# ip address 192.168.13.1 255.255.255.0
ProCurve Switch 2810-48G# wr mem
I assume I have to set it up as untagged, as I will not be having one port with more than one VLAN or tagged traffic.
SO I have set up VLAN1 to be on ports 1-11. However, when I plug a laptop with the same network range as 192.168.13.0 onto let's say port number 20...it can still ping 192.168.13.1. What gives? Should that be possible?
I thought my configuration says that ports 1-11 are only configured for the network 192.168.13.0/24 and anything outside of that range is vanilla and not configured?
Thanks for helping guys
Yashy
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
There's no sign of a second VLAN anywhere on the switch. And unless you had assigned ports to a different VLAN, what Pete Long had mentioned is what will hold true.
ASKER
Hey guys,
Thank you all for your input and help here. I appreciate it.
So basically, if I reconfigure those ports 1-11 to be on VLAN10 with the same IP 192.168.13.1/24, then in theory, if I plug in my laptop with the IP address say 192.168.13.100 to port 20 (outside of my VLAN10 range), I should not be able to ping the gateway 192.168.13.1 right?
Thank you all for your input and help here. I appreciate it.
So basically, if I reconfigure those ports 1-11 to be on VLAN10 with the same IP 192.168.13.1/24, then in theory, if I plug in my laptop with the IP address say 192.168.13.100 to port 20 (outside of my VLAN10 range), I should not be able to ping the gateway 192.168.13.1 right?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Yeah, i will use VLAN10. So there wont be a VLAN1:)
ASKER
Pete Long, that worked. I cleared the switch first. I went in again and configured it all but just created a VLAN2 with vlan ID 2. I assigned untagged ports 1-11 to it, set the IP address 192.168.13.1/24 to those ports. Saved it. Now, when I connect my laptop with a static IP to let's say port 12 or anything above, I can't connect to the 192.168.13.1 IP. Perfect.
Thanks a lot for everyone's input.
Thanks a lot for everyone's input.
ThanQ