asked on
Need help adding a VLAN to Cisco Catalyst 3850
Hello - we need help adding a VLAN to our network. In short, we have to wait 2 weeks for Cisco to help us, due to a support lapse. So we're seeing if we can get this done without them, with the help of a guru. We currently have 6 VLAN's (1 - 6) that have been created by either Cisco or VMWare, over the years. we need another one now - 7. We are using Catalyst 3850's.
thanks for your help
thanks for your help
* VLANCiscoSwitches / Hubs* switchesNetworking
Last Comment
Damian Gardner
SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Hi,
Don't forget to apply it to the interface you want the vlan to operate.
sample:
interface GigabitEthernet0/10
switchport access vlan <vlan number>
switchport mode access
no cdp enable
spanning-tree portfast
Don't forget to apply it to the interface you want the vlan to operate.
sample:
interface GigabitEthernet0/10
switchport access vlan <vlan number>
switchport mode access
no cdp enable
spanning-tree portfast
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
ok great - thanks for everyone's input. When you say assign the vlan to a port - do you mean as part of setting the vlan up on the switch? or simply for whatever device will be using the vlan after it's set up? thanks again
Hi,
Yes, as part of the vlan setting on the switch.
For the devices, if your statically assigning the ip address, you need to configure the subnet for the vlan 7.
Yes, as part of the vlan setting on the switch.
For the devices, if your statically assigning the ip address, you need to configure the subnet for the vlan 7.
ASKER
ok got it. the VLAN setup seems pretty straight-forward. My goal for this VLAN is to segregate XP clients on the network from the rest of the network. Will it be possible to only allow certain types of network access thru to our main VLAN, and limit everythiung else (thinking viruses and hackers, etc)? In other words - can a "small hole" be opened up to our main VLAN from this new VLAN, that only allows an XP machine on this new VLAN to access our network storage server, for example - or access a printer on the network - but nothing else?
Thanks guys
Thanks guys
Yes, use an access-list, but if you are not familiar with networking you should let Cisco help you with this.
ASKER
ok - yeah I figured I would let Cisco help on this. just wanted to know in general. So I could connect the two VLANs, but then limit the communication thru an access-list. ok great. thank you
ip helper "dhcp server ip"