topic Re: How to separate different VLANs? in Network Simulator

How to separate different VLANs?

jzhuang — Wed, 27 Feb 2019 19:42:46 GMT

On my ProCurve 3500yl-48G Switch, I manually created two VLANs, namely VLAN-2 and VLAN-3. I tagged four different ports to each, say, VLAN-2 has ports [1, 3, 5, 7], and VLAN-3 has [9, 11, 13, 15]. Two host machines are connected to ports 1 and 15, respectively. I expect they do not ping each other because these two ports belong to different VLANs, but they can still communicate.

Is there a way to separate these two VLANs, so that only ports within a certain VLAN can communicate?

Re: How to separate different VLANs?

parnassus — Thu, 28 Feb 2019 20:58:45 GMT

@jzhuang wrote: ...I tagged four different ports to each, say, VLAN-2 has ports [1, 3, 5, 7], and VLAN-3 has [9, 11, 13, 15].

Since you're going to connect two hosts which shouldn't be aware of VLAN tagging (VLAN unaware) - at least if hosts' NIC are left on the default VLAN - you then should untag those ports on those VLANs...so:

# vlan 2
# untag 1,3,5,7
# vlan 3
# untag 9,11,13,15

instead of setting those ports as tagged members of those two VLANs.

Re: How to separate different VLANs?

jzhuang — Thu, 28 Feb 2019 21:36:42 GMT

Hi Parnassus, you are right. It should be "untag" instead of "tag".

Thank you very much.

Re: How to separate different VLANs?

krishan25 — Mon, 18 Mar 2019 07:05:13 GMT

Exactly, You have to untag that ports from the VLAN 2 and VLAN 3.