VLAN Configuration

[rfebol]

hello, i have attached my network diagram which consists of multiple vlans. i have 1 dhcp server providing network 192.168.115.0/24 to all LAN. i want to restrict each vlan from seeing each other except the network resources (servers and internet). do i need to give each vlan separate network address? or there is a better way of vlan settings... please advice. thanks...

[cenk sasmaztin]

hi
I make for you example config

----------------------------------------------------------------------
*procurve switch config

hostname "ProCurve Switch 2626"
web-management support-url "http://www.dunyailetisim.net"

ip routing
timesync sntp
snmp-server community "public" Unrestricted

vlan 1
name "user"
untagged 1-21
ip address 10.0.10.1 255.255.255.0
ip-helper address 10.0.40.2
no untagged 22-26
ip igmp
exit
vlan 2
name "internet"
untagged 25-26
ip address 10.0.20.1 255.255.255.0
exit
vlan 4
name "server"
untagged 24
ip address 10.0.40.1 255.255.255.0
exit
vlan 5
name "user2"
untagged 22-23
ip address 10.0.50.1 255.255.255.0
ip-helper address 10.0.40.2
exit
ip route 0.0.0.0 0.0.0.0 10.0.20.2

note:
internet router in vlan 2 (for internet vlan) and lan ip address 10.0.20.2
dhcp server in vlan 4(for server vlan )and ip address 10.0.40.2

------------------------------------------------------------------------
*internet router config

you can basic config on router for internet connetion .
After you make write static route (on router)for vlans
example:
ip route 10.0.50.0 255.255.255.0 10.0.20.1
ip route 10.0.40.0 255.255.255.0 10.0.20.1
ip route 10.0.20.0 255.255.255.0 10.0.20.1
ip route 10.0.10.0 255.255.255.0 10.0.20.1





--------------------------------------------------------------------------
*dhcp server config
you can create new scobe each user vlan

scobe 1
scobe name :vlan 1
ip pool:10.0.10.10----10.0.10.200
default gateway :10.0.10.1
dns:10.0.20.2(optional)

scobe 2
scobe name:vlan 5
ip pool 10.0.50.10----10.0.50.200
default gateway :10.0.50.1
dns:10.0.20.2(optional)

note:each scobe send dhcp offer packet associate vlan
------------------------------------------