Comware

 View Only
last person joined: 2 days ago 

Expand all | Collapse all

I need help with isolation vlan from other vlans

This thread has been viewed 0 times
  • 1.  I need help with isolation vlan from other vlans

    Posted Feb 03, 2021 07:36 AM

    Hello 

    I have 3 vlans with each dhcp pool assigned , but i still can ping from vlan10 to vlan20 (i.e: can ping from 10.0.0.0 to 20.0.0.0 network and vice versa) same for vlan30 . How i can isolate each vlan alone please?

    these are their configuration:

    vlan 1
    name "VLAN1"
    no untagged 10-18
    untagged 1-9,19-28
    ip address dhcp-bootp
    exit
    vlan 10
    name "vlan10"
    untagged 10-12
    ip address 10.0.0.1 255.255.255.0
    dhcp-server
    exit
    vlan 20
    name "vlan20"
    untagged 13-15
    ip address 20.0.0.1 255.255.255.0
    dhcp-server
    exit

    vlan 30
    name "vlan30"
    untagged 16-18
    ip address 30.0.0.1 255.255.255.0
    dhcp-server
    exit

    Pools:

    dhcp-server pool vlan10
    HP-2620-24(vlan20)# authoritative
    HP-2620-24(vlan20)# default-router 10.0.0.1
    HP-2620-24(vlan20)# network 10.0.0.0 255.255.255.0
    HP-2620-24(vlan20)# range 10.0.0.10 10.0.0.20
    HP-2620-24(vlan20)# exit

    dhcp-server pool vlan20
    HP-2620-24(vlan20)# authoritative
    HP-2620-24(vlan20)# default-router 20.0.0.1
    HP-2620-24(vlan20)# network 20.0.0.0 255.255.255.0
    HP-2620-24(vlan20)# range 20.0.0.10 20.0.0.20
    HP-2620-24(vlan20)# exit

     

    dhcp-server pool vlan30
    HP-2620-24(vlan20)# authoritative
    HP-2620-24(vlan20)# default-router 30.0.0.1
    HP-2620-24(vlan20)# network 30.0.0.0 255.255.255.0
    HP-2620-24(vlan20)# range 30.0.0.10 30.0.0.20
    HP-2620-24(vlan20)# exit

     


    #VLAN
    #isolation


  • 2.  RE: I need help with isolation vlan from other vlans

    EMPLOYEE
    Posted Feb 03, 2021 08:06 AM
    Hello,

    If you want to stop all intervlan communication then disable 'ip routing' or you want to isolate some particular vlans then apply ACL.

    Thanks!