As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [vlan]

For questions about Virtual LANs (VLANs) which are used to divide what otherwise would be a single OSI layer-2 broadcast domain into multiple, logical OSI layer-2 broadcast domains.

Filter by
Sorted by
Tagged with
0 votes
0 answers
9 views

Is there a WireGuard UI that can handle multiple groups? [closed]

I'm trying to set up a corporate VPN server (on a Debian11 VPS) that: can connect 300 clients separated in 100+ groups, 10.10.2.0/24 , 10.10.3.0/24, ... each client with fixed IP but none of those ...
SzakiLaci's user avatar
  • 101
0 votes
3 answers
80 views

If all subnets are a part of same vlan, then the network segregation using subnets does not make sense

This is what we know about subnetting. By dividing a network into subnets, you can separate different departments, locations, or security zones, creating distinct broadcast domains. This segmentation ...
RRHS's user avatar
  • 395
0 votes
1 answer
61 views

HSRP and DHCP problem

I have 2 layer 3 switches DS1 and DS2. There are the same VLANs but different IP addresses on VLAN interfaces. On DS1: VLAN 10: 192.168.10.1/24 VLAN 20: 192.168.20.1/24 On DS2: VLAN 10: 192.168.10.2/...
chancuockhanh's user avatar
0 votes
1 answer
33 views

Cannot enable link. Why?

I have the following setup: I'm unable to enable Fa0/5. The switch configuration for that port is correct No configuration has been made on the server side: Assigning Ip adresses has not solved the ...
Rubus's user avatar
  • 295
0 votes
1 answer
65 views

Why does this access list block DHCP request?

To prevent IP spoofing in a VLAN I configured the following access list ip access-list extended MITARBEITER permit tcp 10.15.240.0 0.0.0.255 any permit udp 10.15.240.0 0.0.0.255 any permit icmp 10....
Rubus's user avatar
  • 295
0 votes
1 answer
64 views

QinQ does not work with L2VPN (VSI and MPLS L2VC - Switch Huawei)

Currently, I am trying to configure a network to transport multiple VLANs for a client who has points in different locations (Side A and Side B). My idea was to use QinQ for this. The network topology ...
Claudio Elzio's user avatar
0 votes
0 answers
60 views

Cannot tag an interface for a specific VLAN : % Error: Tagged flag mis-match Te 0/3

I trying to tag an interface for a specific VLAN on a Dell S4810 : S4810#show run int ten 0/3 ! interface TenGigabitEthernet 0/3 no ip address mtu 12000 switchport flowcontrol rx on tx on no ...
SebMa's user avatar
  • 135
3 votes
2 answers
98 views

ethernet switching table is empty | vQFX | EVE-NG

I'm new to Juniper switches. I configured vlan10 and assigned two ports to the relevant vlan. root> show vlans Routing instance VLAN name Tag Interfaces default-switch vlan10 ...
Aaqil's user avatar
  • 33
1 vote
0 answers
64 views

Can't Pass 1 VLAN Through Trunk

I have 2 Cisco switches running IOS with VLANS 20,30,40,50. On SWITCH1 I have servers on Ports 1,2&3 on VLAN 30. I also have a laptop on port 5 on the same VLAN 30 and can ping the servers. They ...
JukEboX's user avatar
  • 461
0 votes
0 answers
32 views

Use a single FortiSwitch in multiple, segmented networks

Is it possible to use a single switch in multiple, segmented and firewall protected subnets? Looking at the above picture, I have this existing network WITHOUT the two inner firewalls. The switch is ...
Shawn's user avatar
  • 1
2 votes
1 answer
27 views

Is source source_wildcard-mask necessary when traffic is orginating from a VLAN when access list is applied in direction of the interface (in)

Let's say I have a vlan 1 with domain 192.168.10.0 0.0.0.255...also a vlan 2 with 192.168.20.0. 0.0.0.255..These are connected to router with intervlan enabled. Now I want to implement access list ...
Rubus's user avatar
  • 295
3 votes
1 answer
45 views

Should I be using point-to-point or broadcast if I plan on using SVI's in IS-IS on Juniper?

Apologies in advance if this is super-basic question, still learning ISIS. I'm migrating from Cisco over to Juniper in an environment where all of the switches are running EIGRP, are on a 172.31.255.0/...
user68992's user avatar
2 votes
2 answers
42 views

MST - multiple instance design in single region

I am preparing for migration of this rather simple network layout from RST to MST: From what I have read so far, it looks like the best approach is to avoid interoperability issues and simply rollout ...
quantum's user avatar
  • 177
1 vote
1 answer
56 views

Is non-blocking per-VLAN (rapid) spanning tree configuration possible?

Imagine a pair of switches connected with a couple of trunk links created in the following fashion: Assuming the numbers on lines correspond to different VLANs, how would you arrange a working ...
quantum's user avatar
  • 177
1 vote
1 answer
76 views

Static route is not saved - Why?

I have the following configuration. On R1 I do inter-vlan routing. The problem is when I ping the serial interface of ISP1 with PC MA11 the ping packet is not returned to R1. I wanted to add a static ...
Rubus's user avatar
  • 295
2 votes
1 answer
74 views

How to implement inter-vlan routing in this configuration on L3 switch

I want to enable inter-vlan routing on L3 switch. I have accomplished this by the following commands executed on Gig1/0/16 and Gig1/0/10 and setting the respective (192.168.x.1) as gateway on the ...
Rubus's user avatar
  • 295
0 votes
1 answer
45 views

Tag Control Information Byte Order

I need to extract the 12-bit VLAN ID from the 16-bit TCI section of the 802.1Q tag in an Ethernet frame. I already have the TCI extracted and stored as a uint16_t. I know that bytes arrive in Big ...
underwaterjesus's user avatar
0 votes
1 answer
63 views

How should edge switches have their routing configured (when there is a mgmt vlan in the mix)

I'm having trouble with a new network topology we are trying to implement onto our environment. The issue seems to be with the switches. The problem is not relevant to this question but for ...
shafuq's user avatar
  • 113
0 votes
1 answer
78 views

A newbie question about VLAN

Sorry for asking this. I am not a network engineer, but I do plan my own network, and know a little on how things moved. But I am not familiar on the terms being used. Now, suppose I have these ...
Magician's user avatar
  • 103
1 vote
2 answers
342 views

Exclude a certain vlan/subnet from layer3 inter-vlan routing

We have new gen aruba (hpe) switches in our environment. There is a backbone (5412R zl2) which all edge switches are connected to. The edge switches are also layer 3 (2930F). The backbone delivers ...
shafuq's user avatar
  • 113
1 vote
0 answers
38 views

Restconf not getting switchport vlan information

I have a couple of catalyst switches which I'm experiencing an interesting issue using APIs not pulling all the information I need. The switches are running IOS-XE 17.6.3, but I have also seen the ...
speirsington's user avatar
0 votes
1 answer
101 views

Is it possible to establish communication using just an ethernet cable?

I have two linux systems, server and client, whose both ethernet port has VLAN tagging(preconfigured IP address and same subnet), and connected with a common ethernet cable (no router or network ...
sjain's user avatar
  • 1
0 votes
2 answers
102 views

Connecting L3 and L2 switches with VLAN settings

I have 1 L3 switch with Static ip - 192.168.0.252 Two L2 switches Switch A - 192.168.0.250 Switch B - 192.168.0.251 I have created VLANs in L3 switches with 192.168.1.1 and 192.168.2.2 ips abd set it ...
Arahasya's user avatar
  • 101
0 votes
1 answer
193 views

Cisco Switch vIOS-L2 in GNS3 and CCNA 200-301

I am reading a preparation book for the CCNA Test 200-301. Currently, I am reading a section about DHCP and VLAN interfaces in a switch. The book shows an example of configuring this. switch# ...
Diego Velasco's user avatar
1 vote
3 answers
135 views

Cisco radius auto vlan assignment without ISE

I read in a lot of tutorials that i must have the ISE engine to implement auto vlan assignment using the authentication event fail retry 3 action authorize vlan 2 command on a cisco switch? Is that ...
MBrain's user avatar
  • 79
0 votes
1 answer
36 views

Private vlan split in two networks

Is it possible to split one private vlan (or isolated vlan) between two networks? so the "white" vlan from network 1 can only communicate with its peer in network 2?
Ethan bino's user avatar
0 votes
1 answer
43 views

SPAN/RSPAN monitoring VLAN vs Interface

I am a little lost with regards to the concept of capturing every traffic passing a core switch. If we set our monitor source to be all VLANs in a L3 switch, does that mean that traffic coming from a ...
Async's user avatar
  • 3
5 votes
2 answers
846 views

Stretching VLANS across a network infrastructure

I am learning about Autonomous and Lightweight APs at the moment and I came across this slide from a course that I follow. This specific line I know that this problem can be solved by using ...
Mitrixsen's user avatar
  • 699
1 vote
1 answer
72 views

How do I configure a Cisco router to relay DHCP packets to DHCP server on the basis of different VLAN?

Running-Config of RO1 ! interface GigabitEthernet0/0 ip address 192.168.25.26 255.255.255.0 duplex auto speed auto ! interface GigabitEthernet0/1 no ip address duplex auto speed auto ! interface ...
Billi Sheikh's user avatar
1 vote
1 answer
48 views

vlan forwarding

I have a juniper ex2200c with a trunked uplink and an access port on a vlan. I plug a device into the access port and port mirror the access port and the uplink (at different times, as you can only ...
abatie's user avatar
  • 11
0 votes
1 answer
1k views

VTP VLAN configuration not allowed when device is not the primary server for vlan database

I have a VTP server and 4 VTP clients. I wanted to create new VLANs on the VTP server and get the error VTP VLAN configuration not allowed when device is not the primary server for vlan database. The ...
MBrain's user avatar
  • 79
0 votes
1 answer
24 views

Trunk+Etherchannel group [duplicate]

The problem encountered in configuring the Trunk+Etherchannel group is that PC1 and PC2 are on different network segments, but I want PC1 to be able to successfully interconnect with PC2 (ping is ...
berniecheniitt 's user avatar
0 votes
4 answers
562 views

Communication between different VLANs

In my previous understanding, there is no way to communicate between two VLANs using only layer 2. After all, this is the purpose of having VLAN. I found a forum that claims the following. 1.VLANs can ...
jacky chong's user avatar
0 votes
2 answers
129 views

Cannot get inter-VLAN routing to work

The router at the top is from the ISP and I have no control over things like WAN, NAT, etc. Network 192.168.1.1/24 is fine, but I cannot get inter-VLAN routing between VLANs 1 and 55. PC 1 cannot even ...
ruyelpequenocid's user avatar
0 votes
2 answers
374 views

Cannot ping/access single host over VPN [closed]

I am running openVPN server on pfSense machine, which is also the router of the network. This network has several VLAN's, where only single one of them is of interest - 10.0.100.0/22. The openVPN ...
Veselin Manev's user avatar
1 vote
0 answers
358 views

Nexus 7706 - switchport trunk allowed vlan not working - all VLANs are being allowed

I noticed that my two Nexus 7706 do not limit the trunk VLANs to what switchport trunk allowed vlan is set to. Sample configuration: interface Ethernet1/15 switchport switchport mode trunk ...
Cha0s's user avatar
  • 226
1 vote
1 answer
436 views

Can Traffic pass a trunk if its not allowed but set as native vlan?

If i have configured 3 vlans vlan10 vlan20 vlan30 and then i make 2 trunkports int gi0/1 description trunk1 switchport mode trunk switchport trunk allowed vlan 20 switchport trunk native vlan 10 ...
MBrain's user avatar
  • 79
0 votes
1 answer
33 views

Single SSID w/PSK to default VLAN, Secondary Auth EAP-TLS to a second VLAN

I'm wondering if the following is possible given the limitations/constraints of RADIUS, CoA, and fundamental limits of 802.11 authentication, etc. I would like a wireless configuration with a single ...
user3814483's user avatar
2 votes
1 answer
292 views

How to combine two Internet connection into one switch with VLAN

We currently have two different internet providers coming into our office (one is a backup), and each is going into separate switches. From the two different switches they are going up into both of ...
Chad's user avatar
  • 23
0 votes
2 answers
337 views

Access to systems with the same IP address but various port number in another network?

I have some knowledge of networking but not much, so I appreciate knowing from the experts. modified part I have 10 devices(PLCs) with the same IP address "192.168.42.2" that I want to ...
Farz's user avatar
  • 3
1 vote
2 answers
222 views

Is it okay to not assign an IP address to the physical interface of router when used for "Router on a Stick"?

When setting up "Router on a Stick" interVLAN routing, the steps I have seen only covered creating sub-interfaces for each VLAN and assigning an IP address to each of these sub-interfaces. ...
huthut28's user avatar
1 vote
2 answers
273 views

Why do 802.1Q trunk ports drop tagged frames with the same ID as the native VLAN?

I'm taking a course on the CCNA and when learning about VLAN tagging, I came across this: "If an 802.1Q trunk port receives a tagged frame with the VLAN ID that is the same as the native VLAN, it ...
user85479's user avatar
0 votes
2 answers
55 views

Adding switch to domain, do I need to use vlan

I have a windows 2016 server. I am setting up a domain on it (office.local), and user accounts through Active Directory. Do I need a managed switch and vlan to allow PCs to connect to the server, or ...
user85359's user avatar
2 votes
1 answer
241 views

How do you drop (or ignore or filter) all untagged traffic on an 802.1q trunk port?

This answer says "[a] trunk has optionally one untagged VLAN and many tagged VLANS." I always thought specifying switchport mode trunk would drop untagged frames at that port, but that ...
KJ7LNW's user avatar
  • 125
0 votes
3 answers
141 views

What does `switchport trunk native <n>` do when in `switchport mode trunk`?

According to this article Cisco recommends VLAN 99 for the "native VLAN". But what is the point when operating under switchport mode trunk? Doesn't switchport mode trunk filter all tagged ...
KJ7LNW's user avatar
  • 125
0 votes
1 answer
92 views

Is it possible to have inter-VLAN communication when at one of the VLAN's NAT gateway is not set?

Currently I am testing a network and it almost does everything that I want it to do. Just one final step is missing and I am wondering if it is even possible in the current setup. I am using a router-...
M. Boot's user avatar
0 votes
1 answer
534 views

PFSense: Opt port able to get to my LAN port / internet

I am trying to setup a disruption between 2 networks one that is coming from the LAN port and one with a different SUBNET from the other (OPT) port. My LAN is not getting blocked from the OPT subnet ...
BartMolk's user avatar
0 votes
1 answer
52 views

Packet tracer help with routing between multiple company routers with vlans and wireless routers

Im still quite a novice to packet tracer (so im sorry if this has been answered) and I'm trying to ping both vlans at company1 router to both Lans at company2 router but for some reason when the ...
Lykadios's user avatar
1 vote
1 answer
51 views

What is the appropriate VLAN configuration for this?

We have a group of clients connects to a Arista switch with DHCP enabled. And we want to setup an additional private VLAN so that those clients can communicate to each other through pre-defined static ...
feplooptest's user avatar
1 vote
1 answer
284 views

Vlan 20 & native vlan 20

If native VLAN 20 wants to communicate with VLAN 20 through a trunk link what happens? Will native VLAN be able to communicate with VLAN 20?
Pravallika Reddy's user avatar

1
2 3 4 5
25