2824 Routing Mode

[Joseph L. Casale]

I don't have a spare 2824 to lab this up so I need some clarification. If I enable routing mode on my 2824 and assign each of two vlans an IP, I am expecting devices in vlan 1 to see vlan 2.

My problem is that there are several 2650's trunked to this switch also in vlan 1, a clever client on those switches could jump vlans on the 2824.

Any guidance would be appreciated!
Thanks.
I had hoped to prevent this with a route, but as per HP the 2824 routes in priority of "connected" then "static/best match". As soon as a vlan is assigned an ip it gets a connected route, so how can I utilize a more restrictive route that gets utilized first (over the "connected" route) to prevent those clients on the 2650 from jumping vlans?

[Pieter 't Hart]

>>> how can I utilize a more restrictive route that gets utilized first <<<

this sounds like you need "policy based routing"

bus first: is RACLs enough to enforce restriction of your trafic?

like:
ip access-list extended "Office"
10 deny ip 0.0.0.0 255.255.255.255 192.168.253.1 0.0.0.255
20 deny ip 0.0.0.0 255.255.255.255 192.168.1.1 0.0.0.255
30 deny ip 0.0.0.0 255.255.255.255 192.168.252.1 0.0.0.255
40 deny ip 0.0.0.0 255.255.255.255 192.168.251.1 0.0.0.255
50 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
exit
interface 3
name "Office"
ip access-group "Office" in

[Joseph L. Casale]

That would be great, but not supported on the 2824 series...