How to separate different VLANs?

[jzhuang]

On my ProCurve 3500yl-48G Switch, I manually created two VLANs, namely VLAN-2 and VLAN-3. I tagged four different ports to each, say, VLAN-2 has ports [1, 3, 5, 7], and VLAN-3 has [9, 11, 13, 15]. Two host machines are connected to ports 1 and 15, respectively. I expect they do not ping each other because these two ports belong to different VLANs, but they can still communicate.

Is there a way to separate these two VLANs, so that only ports within a certain VLAN can communicate?

[parnassus · Accepted solution]

---

@jzhuang wrote: ...I tagged four different ports to each, say, VLAN-2 has ports [1, 3, 5, 7], and VLAN-3 has [9, 11, 13, 15].

---

Since you're going to connect two hosts which shouldn't be aware of VLAN tagging (VLAN unaware) - at least if hosts' NIC are left on the default VLAN - you then should untag those ports on those VLANs...so:

# vlan 2
# untag 1,3,5,7
# vlan 3
# untag 9,11,13,15

instead of setting those ports as tagged members of those two VLANs.

[jzhuang]

Hi Parnassus, you are right. It should be "untag" instead of "tag".

Thank you very much.

[krishan25]

Exactly, You have to untag that ports from the VLAN 2 and VLAN 3.