topic Re: restrict vlan routing in Switches, Hubs, and Modems

restrict vlan routing

ACL — Mon, 21 Feb 2011 12:34:07 GMT

I have an HP Procurve E5406(Core) with vlan-10(guest-voice)IP-DHCP, Vlan-100(guest-data)IP-DHCP,vlan-300(switch mgmt)IP-192.168.6.X/24 and vlan-200(admin network)192.168.5.X/24. Now when I enable ip routing all the vlan's are pinking each other. but i want to restrict the access of vlan 10 & 100 to vlan 200 & 300. i need only 200 & 300 to communicate each other.how is it possible? is it possible by creating ACL and how to do ACL in this case?

Re: restrict vlan routing

cenk sasmaztin — Tue, 22 Feb 2011 00:42:56 GMT

your config
your vlan unable between routing
because unasign ip address on vlan interface

if you want use acl fristly assign vlan ip address

for example configuration sperate vlan 100 between vlan 1 acl
****************************************
ip access-list standard "10"
10 deny 192.168.2.0 0.0.0.255
20 permit 0.0.0.0 255.255.255.255
exit
vlan 1
name "DEFAULT_VLAN"
ip address 192.168.2.50 255.255.255.0
untagged B21-B24,C1-C24
no untagged A1-A24,B1-B20
exit
vlan 100
name "Guest"
ip address 192.168.3.50 255.255.255.0
untagged A19-A20,B3-B4
tagged B21-B24,C1-C20
ip access-group "10" out
exit
vlan 10
name "Voice"
ip address 192.168.4.50 255.255.255.0
untagged A17-A18,B1-B2
tagged B21-B24,C1-C20
exit
vlan 200
name "Admin"
ip address 192.168.5.50 255.255.255.0
untagged A1-A16,B5-B20
tagged B21-B24,C1-C20
exit
vlan 300
name "Admin_Mgmt"
untagged A21-A24
ip address 192.168.6.50 255.255.255.0
tagged B21-B24,C1-C20
exit

Re: restrict vlan routing

ACL — Tue, 22 Feb 2011 05:06:35 GMT

Thank you..
can you give me a brief about how the ACL in the your example works? will it blocks all the traffic from vlan-100 to the default-vlan_1. also confirm if I have to enable IP routing or not.

Re: restrict vlan routing

cenk sasmaztin — Tue, 22 Feb 2011 08:31:19 GMT

yes ip routing must be enable

Re: restrict vlan routing

ACL — Sun, 27 Feb 2011 04:36:37 GMT

thank you so much

Re: restrict vlan routing

ACL — Sun, 27 Feb 2011 04:39:23 GMT

thanks