- Community Home
- >
- Networking
- >
- Legacy
- >
- Switches, Hubs, Modems
- >
- Multiple VLANs over single subnet
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-23-2007 08:28 AM
тАО04-23-2007 08:28 AM
Multiple VLANs over single subnet
Please let me know if this is possible. It is like setting up private VLANs on Cisco switches, so that different ports within same VLAN can not communicate to other set of ports within the same VLAN. I thought, I may be able to do it still simpler with my approach above.
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-23-2007 07:50 PM
тАО04-23-2007 07:50 PM
Re: Multiple VLANs over single subnet
Multiple Vlans in the Same IP Subnet is possible and its used in many cases like the Hospitality Billing solutions, where you have all the Guests in the same subnet, but each one is his own Vlan and his Vlan ID is used to map him to his room number.
Simply, on the 2600, create all the Vlans you need without any IP, then on the Uplink to the Core tagg all the Vlans.
On the Core (routing switch), just add an IP Helper-Address to point to your DHCP server.
But i think your concern is security, where some ports can;t communicate with other ports even all these ports in the same Vlan.
If this is the case, you need a Source port filtering feature not multiple Vlans.
Check this, it will give you enough info with examples:
ftp://ftp.hp.com/pub/networking/software/Security-Oct2005-59906024-Chap09-Port_Security.pdf
Good Luck !!!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-23-2007 07:56 PM
тАО04-23-2007 07:56 PM
Re: Multiple VLANs over single subnet
Each Layer 2 VLAN needs to be in a seperate Layer 3 subnet.
It will not be possible to successfully have a single IP subnet that spans multiple VLANs as far as i know!
I am unsure of the concept of private VLANs so i can't help you there.
You can use the 5300 series as router and as the default gateway for each of the seperate VLANs on the edge switches, connect each switch to the 5300 using dot1q trunks and create VLAN interfaces on the 5300 with a default gateway for each VLAN.
Switch on IP routing for the 5300 and make sure you have the Ip helper-address command configured on each VLAN interface to allow the clients to get DHCP addresses from the server.
Hope i am on the right track...
Cheers
Jonboy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-24-2007 02:16 AM
тАО04-24-2007 02:16 AM
Re: Multiple VLANs over single subnet
I can see the concept now. The clients will not need to communicate with each other, therefore no routing will be needed between VLANs.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-24-2007 02:39 AM
тАО04-24-2007 02:39 AM
Re: Multiple VLANs over single subnet
Please confirm so that I can plan on implementing the changes. It will take me couple of days to get this done as they are on remote sites and I need to schedule some maintennace window.
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-24-2007 04:27 AM
тАО04-24-2007 04:27 AM
Re: Multiple VLANs over single subnet
My dear, what i said in my previous post was L2 Vlans, and its a special case used in may cases like Transparent Firewalls, Billing Solutions, IDP device working in Sniff mode.....
But not the type on the Vlans you are planning for.
What you need is L3 Vlans, means as Jonathan said, each Vlan need an IP Address.
Just think about it, say you have created Vlan20 and 30, now whats the Difference between both Vlans in DHCP scopes, if you need both Vlans to be in the same subnet??? so you are now
1: Confusing the DHCP server and it will probably ask for a Kobian cigar.
2: you said that you need to set an IP for each Vlan and enable routing between them on the core switch, OK ...Life is Good, but what do you need to route?
Solution:
Private VLANs provide Layer 2 isolation between ports within the same Vlan, and that is available on some cisco switches, but not on HP.
anyway if you can explain what you need exactly, somebody for sure in this forum will provide you a solution for your requirments.
Good Luck !!!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-24-2007 04:48 AM
тАО04-24-2007 04:48 AM
Re: Multiple VLANs over single subnet
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-24-2007 05:26 AM
тАО04-24-2007 05:26 AM
Re: Multiple VLANs over single subnet
I don't think you are short of IP Addresses to Chop the 192.168.5.0/24 to /26 or /27 even it will solve your problem :)
But also, you still can't so what your are planning for, because technically you need a L3 Vlans each one in different broadcast domain - Subnet, so you are segregating them and you will be able to route between them on the core.
So i think you need 3 Vlans, 3 Subnets and 3 DHCP Scopes.
And i think that will be better for you if you have any policies for these new groups, like Security policies, so you can use ACLs between the 3 new Vlans based on IP Addresses.
Good Luck !!!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-21-2008 04:46 AM
тАО09-21-2008 04:46 AM
Re: Multiple VLANs over single subnet
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-21-2008 05:43 AM
тАО09-21-2008 05:43 AM
Re: Multiple VLANs over single subnet
"Multiple VLANs over single subnet" is impossible as it's a head-over-heels layering violation. You said it yourself: VLANs are Layer 2 entities (essentially they are broadcast domains with the speciality that a modern switch can be partitioned into multiple of them and has optimizations for hauling them over to other such partitioned switches without needing an individual link per broadcast domain). IP networks (please phase out the term subnet, it's obsolete wording from the age of classful addressing, which ended more than a decade ago), on the other hand, are Layer 3 entities. You establish IP networks on top of (or within, as I prefer the wording) broadcast domains, not the other way around.
So you can have more than one IP network within a single broadcast domain, but that's not what you want. What you separate on L2 cannot transparently find together on L3 except by introducing explicit routing.
Private VLANs are something entirely different. They are single broadcast domains (not multiple, as you propose), but they have sophisticated additional filtering rules that break the basic transitive concept of broadcast domains (if A can reach B, and B can reach C, this implies A can reach C). You cannot easily emulate them.
And BTW, there is no such thing as "L3 VLANs". What this reference talks about are Switch Virtual Interfaces (SVIs) - L3 entities (like IPv4 interfaces) that are not sitting on top of a MAC/LLC (L2) sitting on top of a real PHY (L1), but instead sitting on a virtual MAC/LLC that is anchored into a VLAN within the same switch. It doesn't "make the VLAN L3", it just plugs an L3 interface into the VLAN just as if you plug a real physical router interface into an access port for this VLAN on your physical switch - just without all the extra boxes and cables. The VLAN is still an L2 entity, but now you have also established an IP network on top of (aka within) it, or rather a connected route to it. For it to become a network, there should be some other participants in that broadcast domain assuming the same IP parameters ;)
HTH,
Andre.