We have 2 vlans

vlan 20 & vlan 30

they are both currently able to contact each other but we don't want them to be able to. We have 2 switches too, with these vlans on them.

They should not be able to contact each other on the same switch or going through another switch.

Would we have to set up an ACL to stop this or are there commnads we can use to set up such paramiters when we set up VLAN's

edit: trunking is enable on both switches

  • 4
    What manufacturer and model are the switches? Could you add a diagram with their connectivity and/or the configuration on the switches? Check out the NE Question Checklist for more hints on how to help us help you. Apr 28 '14 at 18:56
  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin
    Aug 8 '17 at 18:12

A VLAN is a layer-2 concept. If there's IP (layer-3) connectivity between them, then there's a router somewhere routing between VLANs. It will naturally route between them until you actively prevent it, most often with an ACL.

(a more complex setup could be done with VRF.)

  • Thanks for that, turns out we didn't need an ACL after all, the VLANs were supposed to be able to ping each other. May 3 '14 at 16:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.