18
votes
Accepted
Can a switch that does NOT support VLAN capability be considered a managed switch if it has other features?
Yes. A managed switch is a switch you can configure in some way or other. Whether it supports VLANs or not is not the question. Even a switch (or a hub for that matter) that only provides status ...
- 88.1k
10
votes
Accepted
What's use of Port Isolation vs traditional VLANs?
Port isolation -also called private VLAN (thanks @Stuggi)- is a very useful feature for switches that connect end users.
In a typical network you will have many end-users computers grouped together ...
- 19.8k
7
votes
Can a switch that does NOT support VLAN capability be considered a managed switch if it has other features?
Yes, "manageable" obviously refers to the fact that you can manage the switch, rather than to one specific feature such as VLAN.
Among other things, some useful features such a switch could have:
...
- 19.8k
5
votes
Correct term for networks created for virtual machines and containers?
Under the hood, all virtualization systems, including docker, use the same mechanism: they use a software switch on the host. Such a switch can be called a "virtual switch" (but this is a bit grey ...
- 19.8k
4
votes
Accepted
Private VLAN on HP switch
Not all HP series support Private VLAN (PVLAN). According to HPE ArubaOS-Switch Software Feature Support Matrix, you do not have this feature (PVLAN) on your devices.
Some people suggest that you can ...
- 3,754
4
votes
Meraki Firewall & Switch VLAN Setup
VLANs separate traffic into distinct L2 segments or broadcast domains - no L2 (Ethernet) traffic crosses between different VLANs.
For them to communicate, you need a router to enable L3 (IP) traffic. ...
- 88.1k
3
votes
Accepted
Struggling with interVLAN routing + multiple VPNs + default routes on multi-layer switch
Basically, you need to make up your mind which device your clients should use as default gateway: the OPNsense - then inter-VLAN routing goes that way, too - or the L3 switch, that in turn uses the ...
- 88.1k
3
votes
Correct term for networks created for virtual machines and containers?
There is no specific term (that I'm aware of). A "virtual network," "virtual segment," or perhaps "layer 2 domain" all might be acceptable. You can also look at Docker or Kubernetes documentation to ...
- 68k
2
votes
Accepted
How to assign multiple VLANS to a port?
I think you're assigning ports the wrong way. You have to specify each port before you enter the vlan command. Something like this:
MainSwitch(config)#interface fastEthernet 1/4
MainSwitch(config-...
- 68k
2
votes
Accepted
No Private VLAN commands Cisco C3560 switch
Thank you guys, my switch is running LANBASE license, just found out and let you know. At least I should have an ipbase license to run private-vlan feature. Topic should be closed now. Thanks again.
- 166
2
votes
Can the data usage be Oriented by Consume of Demand?
If I understand correctly, the problem is how to charge users based on how fast they consume data, rather than (or in addition to) how much data they consumed
Cisco IOS has a "show interfaces" ...
- 2,426
2
votes
Can the data usage be Oriented by Consume of Demand?
If you want to measure traffic and charge users based on how much traffic they generate, you will need to configure Netflow (or similar) to record traffic use.
If you want to limit each users' share ...
- 68k
2
votes
Maximum no of Host's possible in private network on class wise?
For classful networks, the available addresses are given by the Wikipedia page on Classful Networks.
Class A = 16,777,214
Class B = 65534
Class C = 254
The Wikipedia page also discusses the ...
2
votes
Correct term for networks created for virtual machines and containers?
I'd have called that a "virtual ethernet": there are ethernet addresses, ARP packets, broadcasts. It's virtual because there is no medium.
It's definitely not a VPN, as there is what that is ...
- 16.4k
2
votes
Accepted
Private VLANs Same As VLANs!
Private VLAN is a feature that prevent hosts within a single VLAN to communicate with each others.
VLAN separate different networks.
A site may consists of thousands computers, belonging to dozens of ...
- 19.8k
2
votes
Do i need VLAN per customer when i want to give users (secure) access to specific customer sites
Is it possible that a user can change his VPN IP? and if it is, can we
protect this in a scalable way with having less as possible management
effort? E.g. only allow a specific IP range (e.g. 10....
- 68k
2
votes
Accepted
Private vlan split in two networks
There's no need to share a VLAN across those two sites - all addressing is unambiguous and a routed link will work nicely. It's a model case for a VPN tunnel.
I'd suggest setting up an IPsec tunnel. ...
- 88.1k
2
votes
Private VLAN: gateway and DHCP for isolated VLANs over multiple switches (Extreme)
Private VLANs or normal VLANs (tagged or port-based) work the same way with DHCP. PVLANs just have the added complexity that the DHCP server needs to be reachable from each secured access port.
You ...
- 88.1k
2
votes
Accepted
VLAN Configuration without inter-vlan routing but with Internet access
The Catalyst 3850 is a layer-3 switch, so inter-VLAN routing can be done on the switch.
Follow these steps:
Configure VLANs as required on the Catalyst. Use a dedicated VLAN/subnet for the uplink ...
- 88.1k
1
vote
Is a private network the same concept as a network which uses private IP addresses inside it?
Depending on the context and your own preference, a private network is usually one that uses private network addresses. The term may also be any network that is not open to the public to route into or ...
- 88.1k
1
vote
What is the appropriate VLAN configuration for this?
we want to setup an additional private VLAN so that those clients can communicate to each other through pre-defined static IPs.
Alternatively, you can set up address reservations on the DHCP server, ...
- 88.1k
1
vote
is private Vlan concept an alternative for access-list configuration?
It might.
A private VLAN (or port isolation) restricts communication between switch ports. Normally, that is used to enable their communication to a server or uplink port while denying all other ports....
- 88.1k
1
vote
Accepted
Do i need VLAN per customer when i want to give users (secure) access to specific customer sites
Is it possible that a user can change his VPN IP?
That depends on your VPN solution. With most, it's not possible for a client to change their address. You should put that on your requirement list.
...
- 88.1k
1
vote
Accepted
Private Vlans - Promiscuous port
According to the answer I found here :
https://community.cisco.com/t5/switching/communication-between-the-secondary-community-vlans-hosts/td-p/2648508
... this seems possible based on the design I ...
- 33
1
vote
Private Vlans - Promiscuous port
If I had a private vlan on my switch, can it communicate with a
'normal' vlan on that same switch ?
Given a Cisco switch, the answer is No. That is the whole point of private VLANs.
- 68k
1
vote
Accepted
Securing VLANs for Wireless AP with multiple SSIDs
Supporting multiple VLANs on a switch interface means you will have a trunk with tags to separate frames for each VLAN on the trunk, except the native VLAN (if any). On your Cisco 350 switch, you can ...
- 101k
1
vote
Meraki Firewall & Switch VLAN Setup
you need to configure your gateways on the Meraki Firewall ( via dashboard Security Appliance => Addressing & Vlans )
after that you need to configure the interconnexion between the firewall and ...
- 36
1
vote
Accepted
How can I set up a VLAN to be firewalled from our intranet?
Configure a separate VLAN for your PCs, say VLAN 100.
Assign all the PCs ports to this VLAN 100.
Configure a subnet for your PCs, say 172.16.0/24
Configure your Mac1 port as a 802.1q trunk, so your ...
1
vote
Accepted
Is a PVLAN the same as a one-port VLAN
Yes and no.
Yes in the sense that the effect of two ports in an isolated PVLAN or two ports in two different community PVLANs can not communicate, as if they were in two different actual VLANs (...
- 15.2k
1
vote
Is a PVLAN the same as a one-port VLAN
In short, no, those VLANs would be considered primary VLANs, not private VLANs or PVLANs.
PVLANs are a segmentation technique that can isolate hosts within the same 'primary' VLAN into 'secondary' ...
- 1,050
Only top scored, non community-wiki answers of a minimum length are eligible