Questions tagged [private-vlan]
For questions about or involving private VLAN. For instance, you need to split a running VLAN into sub domains or sub-VLANs inside a VLAN.
48
questions
0
votes
1
answer
32
views
Is a private network the same concept as a network which uses private IP addresses inside it?
Kurose's TopDown Network book says:
8.7.1 IPsec and Virtual Private Networks (VPNs)
An institution that extends over multiple geographical regions often
desires its own IP network, so that its hosts ...
- 1,545
1
vote
0
answers
24
views
Set promiscuous port for upstream LACP trunk on Cisco 2960X
I have a series of clients who are looking into a intra-VLAN isolation scheme to satisfy a DDQ request.
I was looking into deploying private VLANs for all client device / voice VLANs to satisfy this ...
- 11
0
votes
2
answers
80
views
Hide private IP address
DS has 7 VLANs and 7 DHCP pools respectively. There are 3 trunk links to 3 access layer switchs to share VLANs. Its VLAN interfaces and DHCP pools:
ip dhcp pool vlan10
network 192.168.10.0 255.255....
- 27
0
votes
1
answer
42
views
Private vlan split in two networks
Is it possible to split one private vlan (or isolated vlan) between two networks?
so the "white" vlan from network 1 can only communicate with its peer in network 2?
1
vote
1
answer
652
views
Private VLAN: gateway and DHCP for isolated VLANs over multiple switches (Extreme)
I'm using extreme network switches and have some networks that would benefit from isolation. The idea is to create a private vlan with isolated vlans, that span over multiple switches. The vlans have ...
- 111
1
vote
1
answer
58
views
What is the appropriate VLAN configuration for this?
We have a group of clients connects to a Arista switch with DHCP enabled. And we want to setup an additional private VLAN so that those clients can communicate to each other through pre-defined static ...
- 11
1
vote
0
answers
26
views
Personal VPN sub-network accessible through Work VPN? [closed]
I currently access my work network via Cisco VPN.
At work, I have my own three computers and NAS on a personal dedicated router using my own DHCP. For several reasons, I do not want these computers to ...
- 111
0
votes
1
answer
2k
views
Struggling with interVLAN routing + multiple VPNs + default routes on multi-layer switch
I have a fairly simply setup, using a PCEngines firewall running OPNSense and an EdgeCore ECS4620-28P L3 switch. The EdgeCore is doing InterVLAN routing and that works just fine, but I cannot get ...
- 103
0
votes
2
answers
552
views
PVLAN on juniper- native isolated VLAN & trunk
I'm trying to use PVLAN to isolate devices (servers) on a L2 network from each other. However, these devices are currently sit on trunk ports, because they have VLAN-aware IPMI interfaces.
My config ...
1
vote
1
answer
116
views
is private Vlan concept an alternative for access-list configuration?
is private Vlan concept is introduced by cisco for alternative for access-list to segregate traffic among different Vlan and within same Vlan .
user74910
2
votes
0
answers
49
views
Private VLANs implementation
So, I have campus LAN, implemented as many VLANs with InterVLAN routing, that spreads on tens of L2 switches and one L3 switch. Now, I have request that hosts on one VLAN don't see each other. But, ...
- 812
0
votes
2
answers
70
views
Private VLANs Same As VLANs!
The common VLANs provides a layer 2 speration flooding and broadcasting is limited to each virtual lans.
Im wondering what is the purpose of the private VLANs also the secondary VLANs (isolated and ...
- 19
0
votes
3
answers
151
views
Do i need VLAN per customer when i want to give users (secure) access to specific customer sites
This question is a follow up on this question. We are currently working on the network design, nothing is implemented yet.
Our network will exist out of our own (internal) network and lot of customer ...
- 219
0
votes
0
answers
17
views
how do i save private ip space using NAT [duplicate]
im using VLSM to assign private ip address networks to my specific vlans. Unfortunately there is not enough space in my /24 mask even when segmented in order to accommodate my user requirements for ...
- 1
1
vote
0
answers
757
views
802.1Q Tag mapping using Private VLANs on Cisco Nexus 3524
I'm struggeling with a VLAN mapping issue on a Nexus 3524 Switch.
My setup:
Downlink router<---Dot1Q 1901--->NX3524<---Dot1Q 493--->Uplink router
I already figured out that basic 1:1 ...
- 527
4
votes
0
answers
204
views
PVLANs/Port isolation in IPv6 networks
We're currently using port isolation to prevent communication between computers on the same vlan and use client isolation on our guest wifi. The reason for having this enabled is to prevent unwanted ...
- 171
1
vote
2
answers
188
views
Private Vlans - Promiscuous port [closed]
If I had a private vlan on my switch, can it communicate with a 'normal' vlan on that same switch ?
Is it only between secondary private vlan that communication is restricted ? It seems to be the ...
- 33
3
votes
3
answers
69
views
Correct term for networks created for virtual machines and containers?
What is the correct term for the type of network created for virtual machines and for containers. For illustration a Linux virtual host might have devices docker0 as 02:42:a6:79:a6:bc with address 172....
- 1,545
1
vote
1
answer
560
views
Securing VLANs for Wireless AP with multiple SSIDs
I'm deploying Wireless Access Points with two SSIDs: employee (VLAN 45) and guests (VLAN 46). I'm confused how I should configure the Ethernet port on the APs and switch.
My preference would be to ...
- 197
0
votes
1
answer
2k
views
Maximum no of Host's possible in private network on class wise? [duplicate]
my query is that what is the maximum no of host's are possible for Private network in class wise.
i.e i want to know No of Private host's in CLASS A,B,C?
how to calculate these no?
1
vote
2
answers
5k
views
Meraki Firewall & Switch VLAN Setup
I have a Meraki MX84 Firewall and a Meraki MS225-48FP switch. I have two VLAN's one is VLAN 1 (Default) the other is VLAN 50. Vlan 1 (Default) has a scope of 192.168.1.x and VLAN 50 has a scope of ...
- 11
-1
votes
2
answers
59
views
Can the data usage be Oriented by Consume of Demand?
Let's imagine that a LAN house, solve to charge financially your users, through of data usage consumption and not by time of use.
It Is possible do control individually of assignment of data usage for ...
6
votes
1
answer
7k
views
What's use of Port Isolation vs traditional VLANs?
I've seen several switch products advertising port isolation feature as "way to limit ports communication without configuring VLANs" and it sounds quite... sketchy? If i understand it correctly port ...
- 231
3
votes
1
answer
3k
views
Private VLAN on HP switch
I am totally new to vlan concept and I am trying to learn by configuring them on these 2 switches: HP-2530-24G and HP-1820-8G(where there is no CLI).
I need to implement Private-Vlan on these switches ...
- 175
10
votes
2
answers
1k
views
Can a switch that does NOT support VLAN capability be considered a managed switch if it has other features?
So the question is in the title.
If a switch does not support Virtual Local Area Network capabilities can it still be considered a managed switch?
What other features should it have to be considered ...
- 1,521
0
votes
2
answers
447
views
How can I set up a VLAN to be firewalled from our intranet? [closed]
I am being tasked with setting up about 15 PCs to be used as digital signage at my job. These PCs are not allowed to be connected to our internal network/intranet. We do have one Mac workstation that ...
0
votes
2
answers
447
views
Is a PVLAN the same as a one-port VLAN
Recently I came across the concept of a Private VLAN (https://en.wikipedia.org/wiki/Private_VLAN). However, I can't seem to see the difference between a PVLAN and a VLAN which is configured on one ...
- 225
1
vote
1
answer
650
views
Block private addresses for Egress traffic passing through an ASA firewall performing NAT translation
I am completing a lab and have been told I should ALWAYS block Egress traffic from private address ranges.
The ASA performs NAT translation of private IPs to the public IP address assigned to the '...
- 113
1
vote
2
answers
9k
views
How to assign multiple VLANS to a port?
I have a simple question about a network (I am new to this concept so please correct me if I am wrong).
I have a simple network as shown (GNS3):
The network have 3VLANS (VLAN10 = DesignTeam, VLAN30 ...
- 105
1
vote
1
answer
630
views
No Private VLAN commands Cisco C3560 switch
I'm studying Private VLAN on C3560 Cisco Switch hardware. When i enter the
(config-vlan)#
It doesn't contain the private-vlan command in the list of available commands. I turned the VTP mode to ...
- 166
1
vote
1
answer
2k
views
Manage access point in a different subnet
I am trying to setup a separate private network for a rented office in our building. I think i have succeeded in setting up two private LAN networks using port based VLAN's (192.168.10.0/24 and 192....
- 13
0
votes
1
answer
268
views
Bonjour defeating wireless isolation?
I have two MacBook Pros and a Cisco RV110W wireless router.
I have created a VLAN with all ports untagged and I linked this VLAN to a Wi-Fi with the option "Wireless Isolation with SSID" on.
From ...
- 101
4
votes
5
answers
2k
views
Are there any security advantages to activating VLAN tagging?
I understand the concepts of generating a VLAN. However, on a small, closed, sophisticated network, are there any security advantages to activating VLAN tagging?
- 925
1
vote
1
answer
356
views
For how much period does the NAT table entry stays there even after connection is closed?
Yesterday, I was reading about the NAT then, during that time I endup with above doubt, I am thinking that if some application from private network makes call to outside world i.e. public network ...
- 111
2
votes
1
answer
433
views
How to achieve Private VLAN (PVLAN) isolation without PVLAN support on switches
I'm looking for some wired client isolation on our public IPv4 VLAN. Since we have a /23 block, isolation is a kind of feature that's really useful.
But we don't have switches capable of PVLAN. To ...
- 504
2
votes
2
answers
78
views
private-vlan pimary vlan port not set to promiscuous?
What is the behavior of a port in a private-vlan pimary vlan that isn't set to promiscuous?
- 463
1
vote
0
answers
158
views
Create private sub(?)-network with AdvancedTomato router and Apple Time Capsule … [closed]
In the next time, I’m connecting to the internet via my neighbor’s router/connection (VDSL) and I want to create a secure/private sub(?)-network between my MacBook, TimeCapsule and the neighbor’s ...
- 11
1
vote
2
answers
2k
views
Configuring PVLANs across 3 switches
We are about to implement PVLANs into our environment however I had a couple of questions for anyone who has production experience with them.
The network will be set up as follows:
Hosts Hosts
|...
- 57
1
vote
0
answers
60
views
Mirroring private vlan on catalyst switches
I currently have a catalyst switch configured with private VLANs and would like to mirror that traffic to an external system. I have tried creating a monitor session for the VLANs involved but that ...
- 173
2
votes
1
answer
360
views
Virtual Machines on a seprate vlan [closed]
My team has 100 developers. They each have a computer and on that computer, they have two nics facing our router. WiFi and their virtual machine (VMWare nic).
I would like to have a network inside ...
- 121
3
votes
1
answer
28
views
Limiting community member communication in PVLAN's
Is there a way to limit communication between community members in a PVLAN?
Ex.
Service provider ABC has 1000 clients, the clients with more than one VM to their name have their own community, ...
- 3,310
1
vote
1
answer
103
views
Addressing guest hosts
Suppose one wishes to provide guests with access to the Internet (and only the Internet) over one's network. For obvious reasons, switch ports will be assigned to a private VLAN created specifically ...
- 465
6
votes
1
answer
3k
views
Juniper Private VLAN isolated port on a trunk
I'm trying to grasp the private VLAN configuration on Juniper EX switches.
As I understand it right now:
Access ports in the primary VLAN (VLAN with no-local-switching configured) are implicitly ...
- 8,117
3
votes
1
answer
2k
views
Private vLAN useful to isolate multicast sources?
On a Cisco 3750G switch I have a number (30-ish) of video processors in a vLAN providing multicast streams to clients via a router. Because all of the machines are in the same vLAN they see each ...
- 139
4
votes
1
answer
2k
views
Private VLAN in transparent mode
Why do we have to set up the switch in transparent mode when dealing with private VLANs?
- 1,398
5
votes
4
answers
3k
views
Single client per VLAN in /24 network
I have a single /24 IP network. I want to make a VLAN (or something) and distribute a single IP and gateway per client. Each client should not be able to talk to each other.
What is the best way to ...
- 51
3
votes
1
answer
2k
views
Isolated VLAN members on a private VLAN (Cisco)
I have been wondering for a while about this.
On Cisco switches you can configure a VLAN and nest private community and private isolated VLANs into it. You can also configure promiscuous ports that ...
- 837
8
votes
1
answer
2k
views
Private-vlan configuration - connectivity issue
I've an issue leading with Private Vlans. I've fiber modem and they can't reach the DHCP/TFTP to be provision. I suspect from the configuration of Private VLANs. Can you review them ? My doubts are ...
- 2,008