Switches, Hubs, and Modems
cancel
Showing results for 
Search instead for 
Did you mean: 

2824 Routing Mode

Joseph L. Casale
Regular Advisor

2824 Routing Mode

I don't have a spare 2824 to lab this up so I need some clarification. If I enable routing mode on my 2824 and assign each of two vlans an IP, I am expecting devices in vlan 1 to see vlan 2.

My problem is that there are several 2650's trunked to this switch also in vlan 1, a clever client on those switches could jump vlans on the 2824.

Any guidance would be appreciated!
Thanks.
I had hoped to prevent this with a route, but as per HP the 2824 routes in priority of "connected" then "static/best match". As soon as a vlan is assigned an ip it gets a connected route, so how can I utilize a more restrictive route that gets utilized first (over the "connected" route) to prevent those clients on the 2650 from jumping vlans?
2 REPLIES
Pieter 't Hart
Honored Contributor

Re: 2824 Routing Mode

>>> how can I utilize a more restrictive route that gets utilized first <<<

this sounds like you need "policy based routing"

bus first: is RACLs enough to enforce restriction of your trafic?

like:
ip access-list extended "Office"
10 deny ip 0.0.0.0 255.255.255.255 192.168.253.1 0.0.0.255
20 deny ip 0.0.0.0 255.255.255.255 192.168.1.1 0.0.0.255
30 deny ip 0.0.0.0 255.255.255.255 192.168.252.1 0.0.0.255
40 deny ip 0.0.0.0 255.255.255.255 192.168.251.1 0.0.0.255
50 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
exit
interface 3
name "Office"
ip access-group "Office" in
Joseph L. Casale
Regular Advisor

Re: 2824 Routing Mode

That would be great, but not supported on the 2824 series...