Questions tagged [vlan]
For questions about Virtual LANs (VLANs) which are used to divide what otherwise would be a single OSI layer-2 broadcast domain into multiple, logical OSI layer-2 broadcast domains.
1,224
questions
0
votes
0
answers
9
views
Is there a WireGuard UI that can handle multiple groups? [closed]
I'm trying to set up a corporate VPN server (on a Debian11 VPS) that:
can connect 300 clients separated in 100+ groups, 10.10.2.0/24 , 10.10.3.0/24, ...
each client with fixed IP
but none of those ...
- 101
0
votes
3
answers
80
views
If all subnets are a part of same vlan, then the network segregation using subnets does not make sense
This is what we know about subnetting.
By dividing a network into subnets, you can separate different departments, locations, or security zones, creating distinct broadcast domains. This segmentation ...
- 395
0
votes
1
answer
61
views
HSRP and DHCP problem
I have 2 layer 3 switches DS1 and DS2. There are the same VLANs but different IP addresses on VLAN interfaces.
On DS1:
VLAN 10: 192.168.10.1/24
VLAN 20: 192.168.20.1/24
On DS2:
VLAN 10: 192.168.10.2/...
0
votes
1
answer
33
views
Cannot enable link. Why?
I have the following setup:
I'm unable to enable Fa0/5. The switch configuration for that port is correct
No configuration has been made on the server side:
Assigning Ip adresses has not solved the ...
- 295
0
votes
1
answer
65
views
Why does this access list block DHCP request?
To prevent IP spoofing in a VLAN I configured the following access list
ip access-list extended MITARBEITER
permit tcp 10.15.240.0 0.0.0.255 any
permit udp 10.15.240.0 0.0.0.255 any
permit icmp 10....
- 295
0
votes
1
answer
64
views
QinQ does not work with L2VPN (VSI and MPLS L2VC - Switch Huawei)
Currently, I am trying to configure a network to transport multiple VLANs for a client who has points in different locations (Side A and Side B). My idea was to use QinQ for this. The network topology ...
0
votes
0
answers
60
views
Cannot tag an interface for a specific VLAN : % Error: Tagged flag mis-match Te 0/3
I trying to tag an interface for a specific VLAN on a Dell S4810 :
S4810#show run int ten 0/3
!
interface TenGigabitEthernet 0/3
no ip address
mtu 12000
switchport
flowcontrol rx on tx on
no ...
- 135
3
votes
2
answers
98
views
ethernet switching table is empty | vQFX | EVE-NG
I'm new to Juniper switches. I configured vlan10 and assigned two ports to the relevant vlan.
root> show vlans
Routing instance VLAN name Tag Interfaces
default-switch vlan10 ...
- 33
1
vote
0
answers
64
views
Can't Pass 1 VLAN Through Trunk
I have 2 Cisco switches running IOS with VLANS 20,30,40,50. On SWITCH1 I have servers on Ports 1,2&3 on VLAN 30. I also have a laptop on port 5 on the same VLAN 30 and can ping the servers. They ...
- 461
0
votes
0
answers
32
views
Use a single FortiSwitch in multiple, segmented networks
Is it possible to use a single switch in multiple, segmented and firewall protected subnets?
Looking at the above picture, I have this existing network WITHOUT the two inner firewalls. The switch is ...
- 1
2
votes
1
answer
27
views
Is source source_wildcard-mask necessary when traffic is orginating from a VLAN when access list is applied in direction of the interface (in)
Let's say I have a vlan 1 with domain 192.168.10.0 0.0.0.255...also a vlan 2 with 192.168.20.0. 0.0.0.255..These are connected to router with intervlan enabled. Now I want to implement access list ...
- 295
3
votes
1
answer
45
views
Should I be using point-to-point or broadcast if I plan on using SVI's in IS-IS on Juniper?
Apologies in advance if this is super-basic question, still learning ISIS.
I'm migrating from Cisco over to Juniper in an environment where all of the switches are running EIGRP, are on a 172.31.255.0/...
- 33
2
votes
2
answers
42
views
MST - multiple instance design in single region
I am preparing for migration of this rather simple network layout from RST to MST:
From what I have read so far, it looks like the best approach is to avoid interoperability issues and simply rollout ...
- 177
1
vote
1
answer
56
views
Is non-blocking per-VLAN (rapid) spanning tree configuration possible?
Imagine a pair of switches connected with a couple of trunk links created in the following fashion:
Assuming the numbers on lines correspond to different VLANs, how would you arrange a working ...
- 177
1
vote
1
answer
76
views
Static route is not saved - Why?
I have the following configuration. On R1 I do inter-vlan routing. The problem is when I ping the serial interface of ISP1 with PC MA11 the ping packet is not returned to R1. I wanted to add a static ...
- 295
2
votes
1
answer
74
views
How to implement inter-vlan routing in this configuration on L3 switch
I want to enable inter-vlan routing on L3 switch. I have accomplished this by the following commands executed on Gig1/0/16 and Gig1/0/10 and setting the respective (192.168.x.1) as gateway on the ...
- 295
0
votes
1
answer
45
views
Tag Control Information Byte Order
I need to extract the 12-bit VLAN ID from the 16-bit TCI section of the 802.1Q tag in an Ethernet frame.
I already have the TCI extracted and stored as a uint16_t.
I know that bytes arrive in Big ...
0
votes
1
answer
63
views
How should edge switches have their routing configured (when there is a mgmt vlan in the mix)
I'm having trouble with a new network topology we are trying to implement onto our environment. The issue seems to be with the switches. The problem is not relevant to this question but for ...
- 113
0
votes
1
answer
78
views
A newbie question about VLAN
Sorry for asking this. I am not a network engineer, but I do plan my own network, and know a little on how things moved. But I am not familiar on the terms being used.
Now, suppose I have these ...
- 103
1
vote
2
answers
342
views
Exclude a certain vlan/subnet from layer3 inter-vlan routing
We have new gen aruba (hpe) switches in our environment.
There is a backbone (5412R zl2) which all edge switches are connected to. The edge switches are also layer 3 (2930F). The backbone delivers ...
- 113
1
vote
0
answers
38
views
Restconf not getting switchport vlan information
I have a couple of catalyst switches which I'm experiencing an interesting issue using APIs not pulling all the information I need.
The switches are running IOS-XE 17.6.3, but I have also seen the ...
- 11
0
votes
1
answer
101
views
Is it possible to establish communication using just an ethernet cable?
I have two linux systems, server and client, whose both ethernet port has VLAN tagging(preconfigured IP address and same subnet), and connected with a common ethernet cable (no router or network ...
- 1
0
votes
2
answers
102
views
Connecting L3 and L2 switches with VLAN settings
I have 1 L3 switch with
Static ip - 192.168.0.252
Two L2 switches
Switch A - 192.168.0.250
Switch B - 192.168.0.251
I have created VLANs in L3 switches with 192.168.1.1 and 192.168.2.2 ips abd set it ...
- 101
0
votes
1
answer
193
views
Cisco Switch vIOS-L2 in GNS3 and CCNA 200-301
I am reading a preparation book for the CCNA Test 200-301. Currently, I am reading a section about DHCP and VLAN interfaces in a switch. The book shows an example of configuring this.
switch# ...
- 103
1
vote
3
answers
135
views
Cisco radius auto vlan assignment without ISE
I read in a lot of tutorials that i must have the ISE engine to implement auto vlan assignment using the
authentication event fail retry 3 action authorize vlan 2
command on a cisco switch? Is that ...
- 79
0
votes
1
answer
36
views
Private vlan split in two networks
Is it possible to split one private vlan (or isolated vlan) between two networks?
so the "white" vlan from network 1 can only communicate with its peer in network 2?
0
votes
1
answer
43
views
SPAN/RSPAN monitoring VLAN vs Interface
I am a little lost with regards to the concept of capturing every traffic passing a core switch. If we set our monitor source to be all VLANs in a L3 switch, does that mean that traffic coming from a ...
- 3
5
votes
2
answers
846
views
Stretching VLANS across a network infrastructure
I am learning about Autonomous and Lightweight APs at the moment and I came across this slide from a course that I follow.
This specific line
I know that this problem can be solved by using ...
- 699
1
vote
1
answer
72
views
How do I configure a Cisco router to relay DHCP packets to DHCP server on the basis of different VLAN?
Running-Config of RO1
!
interface GigabitEthernet0/0
ip address 192.168.25.26 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
!
interface ...
- 13
1
vote
1
answer
48
views
vlan forwarding
I have a juniper ex2200c with a trunked uplink and an access port on a vlan. I plug a device into the access port and port mirror the access port and the uplink (at different times, as you can only ...
- 11
0
votes
1
answer
1k
views
VTP VLAN configuration not allowed when device is not the primary server for vlan database
I have a VTP server and 4 VTP clients. I wanted to create new VLANs on the VTP server and get the error
VTP VLAN configuration not allowed when device is not the primary server for vlan database.
The ...
- 79
0
votes
1
answer
24
views
Trunk+Etherchannel group [duplicate]
The problem encountered in configuring the Trunk+Etherchannel group is that PC1 and PC2 are on different network segments, but I want PC1 to be able to successfully interconnect with PC2 (ping is ...
0
votes
4
answers
562
views
Communication between different VLANs
In my previous understanding, there is no way to communicate between two VLANs using only layer 2.
After all, this is the purpose of having VLAN.
I found a forum that claims the following.
1.VLANs can ...
- 25
0
votes
2
answers
129
views
Cannot get inter-VLAN routing to work
The router at the top is from the ISP and I have no control over things like WAN, NAT, etc.
Network 192.168.1.1/24 is fine, but I cannot get inter-VLAN routing between VLANs 1 and 55.
PC 1 cannot even ...
0
votes
2
answers
374
views
Cannot ping/access single host over VPN [closed]
I am running openVPN server on pfSense machine, which is also the router of the network. This network has several VLAN's, where only single one of them is of interest - 10.0.100.0/22.
The openVPN ...
1
vote
0
answers
358
views
Nexus 7706 - switchport trunk allowed vlan not working - all VLANs are being allowed
I noticed that my two Nexus 7706 do not limit the trunk VLANs to what switchport trunk allowed vlan is set to.
Sample configuration:
interface Ethernet1/15
switchport
switchport mode trunk
...
- 226
1
vote
1
answer
436
views
Can Traffic pass a trunk if its not allowed but set as native vlan?
If i have configured 3 vlans
vlan10
vlan20
vlan30
and then i make 2 trunkports
int gi0/1
description trunk1
switchport mode trunk
switchport trunk allowed vlan 20
switchport trunk native vlan 10
...
- 79
0
votes
1
answer
33
views
Single SSID w/PSK to default VLAN, Secondary Auth EAP-TLS to a second VLAN
I'm wondering if the following is possible given the limitations/constraints of RADIUS, CoA, and fundamental limits of 802.11 authentication, etc.
I would like a wireless configuration with a single ...
- 103
2
votes
1
answer
292
views
How to combine two Internet connection into one switch with VLAN
We currently have two different internet providers coming into our office (one is a backup), and each is going into separate switches. From the two different switches they are going up into both of ...
- 23
0
votes
2
answers
337
views
Access to systems with the same IP address but various port number in another network?
I have some knowledge of networking but not much, so I appreciate knowing from the experts.
modified part
I have 10 devices(PLCs) with the same IP address "192.168.42.2" that I want to ...
- 3
1
vote
2
answers
222
views
Is it okay to not assign an IP address to the physical interface of router when used for "Router on a Stick"?
When setting up "Router on a Stick" interVLAN routing, the steps I have seen only covered creating sub-interfaces for each VLAN and assigning an IP address to each of these sub-interfaces. ...
- 13
1
vote
2
answers
273
views
Why do 802.1Q trunk ports drop tagged frames with the same ID as the native VLAN?
I'm taking a course on the CCNA and when learning about VLAN tagging, I came across this:
"If an 802.1Q trunk port receives a tagged frame with the VLAN ID that is the same as the native VLAN, it ...
- 13
0
votes
2
answers
55
views
Adding switch to domain, do I need to use vlan
I have a windows 2016 server. I am setting up a domain on it (office.local), and user accounts through Active Directory. Do I need a managed switch and vlan to allow PCs to connect to the server, or ...
2
votes
1
answer
241
views
How do you drop (or ignore or filter) all untagged traffic on an 802.1q trunk port?
This answer says "[a] trunk has optionally one untagged VLAN and many tagged VLANS."
I always thought specifying switchport mode trunk would drop untagged frames at that port, but that ...
- 125
0
votes
3
answers
141
views
What does `switchport trunk native <n>` do when in `switchport mode trunk`?
According to this article Cisco recommends VLAN 99 for the "native VLAN".
But what is the point when operating under switchport mode trunk?
Doesn't switchport mode trunk filter all tagged ...
- 125
0
votes
1
answer
92
views
Is it possible to have inter-VLAN communication when at one of the VLAN's NAT gateway is not set?
Currently I am testing a network and it almost does everything that I want it to do. Just one final step is missing and I am wondering if it is even possible in the current setup.
I am using a router-...
- 3
0
votes
1
answer
534
views
PFSense: Opt port able to get to my LAN port / internet
I am trying to setup a disruption between 2 networks one that is coming from the LAN port and one with a different SUBNET from the other (OPT) port.
My LAN is not getting blocked from the OPT subnet ...
- 1
0
votes
1
answer
52
views
Packet tracer help with routing between multiple company routers with vlans and wireless routers
Im still quite a novice to packet tracer (so im sorry if this has been answered) and I'm trying to ping both vlans at company1 router to both Lans at company2 router but for some reason when the ...
- 3
1
vote
1
answer
51
views
What is the appropriate VLAN configuration for this?
We have a group of clients connects to a Arista switch with DHCP enabled. And we want to setup an additional private VLAN so that those clients can communicate to each other through pre-defined static ...
- 11
1
vote
1
answer
284
views
Vlan 20 & native vlan 20
If native VLAN 20 wants to communicate with VLAN 20 through a trunk link what happens?
Will native VLAN be able to communicate with VLAN 20?
