Questions tagged [private-vlan]
For questions about or involving private VLAN. For instance, you need to split a running VLAN into sub domains or sub-VLANs inside a VLAN.
41
questions
0
votes
1answer
34 views
Struggling with interVLAN routing + multiple VPNs + default routes on multi-layer switch
I have a fairly simply setup, using a PCEngines firewall running OPNSense and an EdgeCore ECS4620-28P L3 switch. The EdgeCore is doing InterVLAN routing and that works just fine, but I cannot get ...
0
votes
0answers
28 views
PVLAN on juniper- native isolated VLAN & trunk
I'm trying to use PVLAN to isolate devices (servers) on a L2 network from each other. However, these devices are currently sit on trunk ports, because they have VLAN-aware IPMI interfaces.
My config ...
5
votes
1answer
31 views
is private Vlan concept an alternative for access-list configuration?
is private Vlan concept is introduced by cisco for alternative for access-list to segregate traffic among different Vlan and within same Vlan .
2
votes
0answers
39 views
Private VLANs implementation
So, I have campus LAN, implemented as many VLANs with InterVLAN routing, that spreads on tens of L2 switches and one L3 switch. Now, I have request that hosts on one VLAN don't see each other. But, ...
0
votes
2answers
46 views
Private VLANs Same As VLANs!
The common VLANs provides a layer 2 speration flooding and broadcasting is limited to each virtual lans.
Im wondering what is the purpose of the private VLANs also the secondary VLANs (isolated and ...
0
votes
3answers
62 views
Do i need VLAN per customer when i want to give users (secure) access to specific customer sites
This question is a follow up on this question. We are currently working on the network design, nothing is implemented yet.
Our network will exist out of our own (internal) network and lot of customer ...
0
votes
0answers
17 views
how do i save private ip space using NAT [duplicate]
im using VLSM to assign private ip address networks to my specific vlans. Unfortunately there is not enough space in my /24 mask even when segmented in order to accommodate my user requirements for ...
1
vote
0answers
319 views
802.1Q Tag mapping using Private VLANs on Cisco Nexus 3524
I'm struggeling with a VLAN mapping issue on a Nexus 3524 Switch.
My setup:
Downlink router<---Dot1Q 1901--->NX3524<---Dot1Q 493--->Uplink router
I already figured out that basic 1:1 ...
4
votes
0answers
91 views
PVLANs/Port isolation in IPv6 networks
We're currently using port isolation to prevent communication between computers on the same vlan and use client isolation on our guest wifi. The reason for having this enabled is to prevent unwanted ...
1
vote
2answers
121 views
Private Vlans - Promiscuous port [closed]
If I had a private vlan on my switch, can it communicate with a 'normal' vlan on that same switch ?
Is it only between secondary private vlan that communication is restricted ? It seems to be the ...
2
votes
3answers
53 views
Correct term for networks created for virtual machines and containers?
What is the correct term for the type of network created for virtual machines and for containers. For illustration a Linux virtual host might have devices docker0 as 02:42:a6:79:a6:bc with address 172....
1
vote
1answer
524 views
Securing VLANs for Wireless AP with multiple SSIDs
I'm deploying Wireless Access Points with two SSIDs: employee (VLAN 45) and guests (VLAN 46). I'm confused how I should configure the Ethernet port on the APs and switch.
My preference would be to ...
0
votes
1answer
1k views
Maximum no of Host's possible in private network on class wise? [duplicate]
my query is that what is the maximum no of host's are possible for Private network in class wise.
i.e i want to know No of Private host's in CLASS A,B,C?
how to calculate these no?
1
vote
2answers
3k views
Meraki Firewall & Switch VLAN Setup
I have a Meraki MX84 Firewall and a Meraki MS225-48FP switch. I have two VLAN's one is VLAN 1 (Default) the other is VLAN 50. Vlan 1 (Default) has a scope of 192.168.1.x and VLAN 50 has a scope of ...
-1
votes
2answers
54 views
Can the data usage be Oriented by Consume of Demand?
Let's imagine that a LAN house, solve to charge financially your users, through of data usage consumption and not by time of use.
It Is possible do control individually of assignment of data usage for ...
5
votes
1answer
6k views
What's use of Port Isolation vs traditional VLANs?
I've seen several switch products advertising port isolation feature as "way to limit ports communication without configuring VLANs" and it sounds quite... sketchy? If i understand it correctly port ...
2
votes
1answer
2k views
Private VLAN on HP switch
I am totally new to vlan concept and I am trying to learn by configuring them on these 2 switches: HP-2530-24G and HP-1820-8G(where there is no CLI).
I need to implement Private-Vlan on these switches ...
10
votes
2answers
1k views
Can a switch that does NOT support VLAN capability be considered a managed switch if it has other features?
So the question is in the title.
If a switch does not support Virtual Local Area Network capabilities can it still be considered a managed switch?
What other features should it have to be considered ...
0
votes
2answers
358 views
How can I set up a VLAN to be firewalled from our intranet? [closed]
I am being tasked with setting up about 15 PCs to be used as digital signage at my job. These PCs are not allowed to be connected to our internal network/intranet. We do have one Mac workstation that ...
0
votes
2answers
388 views
Is a PVLAN the same as a one-port VLAN
Recently I came across the concept of a Private VLAN (https://en.wikipedia.org/wiki/Private_VLAN). However, I can't seem to see the difference between a PVLAN and a VLAN which is configured on one ...
1
vote
1answer
585 views
Block private addresses for Egress traffic passing through an ASA firewall performing NAT translation
I am completing a lab and have been told I should ALWAYS block Egress traffic from private address ranges.
The ASA performs NAT translation of private IPs to the public IP address assigned to the '...
2
votes
2answers
3k views
How to assign multiple VLANS to a port?
I have a simple question about a network (I am new to this concept so please correct me if I am wrong).
I have a simple network as shown (GNS3):
The network have 3VLANS (VLAN10 = DesignTeam, VLAN30 ...
1
vote
1answer
503 views
No Private VLAN commands Cisco C3560 switch
I'm studying Private VLAN on C3560 Cisco Switch hardware. When i enter the
(config-vlan)#
It doesn't contain the private-vlan command in the list of available commands. I turned the VTP mode to ...
1
vote
1answer
2k views
Manage access point in a different subnet
I am trying to setup a separate private network for a rented office in our building. I think i have succeeded in setting up two private LAN networks using port based VLAN's (192.168.10.0/24 and 192....
0
votes
1answer
222 views
Bonjour defeating wireless isolation?
I have two MacBook Pros and a Cisco RV110W wireless router.
I have created a VLAN with all ports untagged and I linked this VLAN to a Wi-Fi with the option "Wireless Isolation with SSID" on.
From ...
4
votes
5answers
2k views
Are there any security advantages to activating VLAN tagging?
I understand the concepts of generating a VLAN. However, on a small, closed, sophisticated network, are there any security advantages to activating VLAN tagging?
1
vote
1answer
197 views
For how much period does the NAT table entry stays there even after connection is closed?
Yesterday, I was reading about the NAT then, during that time I endup with above doubt, I am thinking that if some application from private network makes call to outside world i.e. public network ...
2
votes
1answer
388 views
How to achieve Private VLAN (PVLAN) isolation without PVLAN support on switches
I'm looking for some wired client isolation on our public IPv4 VLAN. Since we have a /23 block, isolation is a kind of feature that's really useful.
But we don't have switches capable of PVLAN. To ...
2
votes
2answers
70 views
private-vlan pimary vlan port not set to promiscuous?
What is the behavior of a port in a private-vlan pimary vlan that isn't set to promiscuous?
1
vote
0answers
156 views
Create private sub(?)-network with AdvancedTomato router and Apple Time Capsule … [closed]
In the next time, I’m connecting to the internet via my neighbor’s router/connection (VDSL) and I want to create a secure/private sub(?)-network between my MacBook, TimeCapsule and the neighbor’s ...
1
vote
2answers
1k views
Configuring PVLANs across 3 switches
We are about to implement PVLANs into our environment however I had a couple of questions for anyone who has production experience with them.
The network will be set up as follows:
Hosts Hosts
|...
1
vote
0answers
55 views
Mirroring private vlan on catalyst switches
I currently have a catalyst switch configured with private VLANs and would like to mirror that traffic to an external system. I have tried creating a monitor session for the VLANs involved but that ...
2
votes
1answer
309 views
Virtual Machines on a seprate vlan [closed]
My team has 100 developers. They each have a computer and on that computer, they have two nics facing our router. WiFi and their virtual machine (VMWare nic).
I would like to have a network inside ...
3
votes
1answer
26 views
Limiting community member communication in PVLAN's
Is there a way to limit communication between community members in a PVLAN?
Ex.
Service provider ABC has 1000 clients, the clients with more than one VM to their name have their own community, ...
1
vote
1answer
99 views
Addressing guest hosts
Suppose one wishes to provide guests with access to the Internet (and only the Internet) over one's network. For obvious reasons, switch ports will be assigned to a private VLAN created specifically ...
6
votes
1answer
3k views
Juniper Private VLAN isolated port on a trunk
I'm trying to grasp the private VLAN configuration on Juniper EX switches.
As I understand it right now:
Access ports in the primary VLAN (VLAN with no-local-switching configured) are implicitly ...
3
votes
1answer
2k views
Private vLAN useful to isolate multicast sources?
On a Cisco 3750G switch I have a number (30-ish) of video processors in a vLAN providing multicast streams to clients via a router. Because all of the machines are in the same vLAN they see each ...
4
votes
1answer
2k views
Private VLAN in transparent mode
Why do we have to set up the switch in transparent mode when dealing with private VLANs?
5
votes
4answers
3k views
Single client per VLAN in /24 network
I have a single /24 IP network. I want to make a VLAN (or something) and distribute a single IP and gateway per client. Each client should not be able to talk to each other.
What is the best way to ...
3
votes
1answer
2k views
Isolated VLAN members on a private VLAN (Cisco)
I have been wondering for a while about this.
On Cisco switches you can configure a VLAN and nest private community and private isolated VLANs into it. You can also configure promiscuous ports that ...
8
votes
1answer
2k views
Private-vlan configuration - connectivity issue
I've an issue leading with Private Vlans. I've fiber modem and they can't reach the DHCP/TFTP to be provision. I suspect from the configuration of Private VLANs. Can you review them ? My doubts are ...
