inner Vlan routing on ProCurve 2910al

[acheng]

Hi, I am new to networking and Procurve 2910al, I have one request that need to let vlan 99 be able to route to vlan 77, but vlan 77 is unable back to vlan 99. Can it be done by adding static route?

following is my configuration:

Running configuration:

; J9148A Configuration Editor; Created on release #W.14.38

hostname "ProCurve 2910al-48G-PoE Switch"
module 1 type J9148A
vlan 77
name "DEFAULT_VLAN"
untagged 1-24
ip address 192.168.77.253 255.255.255.0
no untagged 25-48
exit
vlan 99
name "private"
untagged 25-48
ip address 192.168.99.253 255.255.255.0
exit
snmp-server community "public" unrestricted

[Vince-Whirlwind]

You need to enable IP routing on the switch. This will cause the switch to automatically route between any subnet that it has an IP-addressed interface in.

If you need to restrict hosts from communicating with each other, you should be using host-based security, or, take the switch IP addresses off the VLANs and put them on a firewall and put the two subnets in different zones and configure your rules there.