Skip to main content
18 votes
Accepted

Can a switch that does NOT support VLAN capability be considered a managed switch if it has other features?

Yes. A managed switch is a switch you can configure in some way or other. Whether it supports VLANs or not is not the question. Even a switch (or a hub for that matter) that only provides status ...
Zac67's user avatar
  • 85.4k
10 votes
Accepted

What's use of Port Isolation vs traditional VLANs?

Port isolation -also called private VLAN (thanks @Stuggi)- is a very useful feature for switches that connect end users. In a typical network you will have many end-users computers grouped together ...
JFL's user avatar
  • 19.7k
7 votes

Can a switch that does NOT support VLAN capability be considered a managed switch if it has other features?

Yes, "manageable" obviously refers to the fact that you can manage the switch, rather than to one specific feature such as VLAN. Among other things, some useful features such a switch could have: ...
JFL's user avatar
  • 19.7k
5 votes

Correct term for networks created for virtual machines and containers?

Under the hood, all virtualization systems, including docker, use the same mechanism: they use a software switch on the host. Such a switch can be called a "virtual switch" (but this is a bit grey ...
JFL's user avatar
  • 19.7k
4 votes

Meraki Firewall & Switch VLAN Setup

VLANs separate traffic into distinct L2 segments or broadcast domains - no L2 (Ethernet) traffic crosses between different VLANs. For them to communicate, you need a router to enable L3 (IP) traffic. ...
Zac67's user avatar
  • 85.4k
4 votes
Accepted

Private VLAN on HP switch

Not all HP series support Private VLAN (PVLAN). According to HPE ArubaOS-Switch Software Feature Support Matrix, you do not have this feature (PVLAN) on your devices. Some people suggest that you can ...
Hung Tran's user avatar
  • 3,754
4 votes
Accepted

Are there any security advantages to activating VLAN tagging?

The security part comes from using VLANs. Users and devices on one VLAN cannot communicate with users and devices on another VLAN, except through a router. This gives you the opportunity to place ...
Ron Maupin's user avatar
  • 99.9k
3 votes
Accepted

Struggling with interVLAN routing + multiple VPNs + default routes on multi-layer switch

Basically, you need to make up your mind which device your clients should use as default gateway: the OPNsense - then inter-VLAN routing goes that way, too - or the L3 switch, that in turn uses the ...
Zac67's user avatar
  • 85.4k
3 votes

Correct term for networks created for virtual machines and containers?

There is no specific term (that I'm aware of). A "virtual network," "virtual segment," or perhaps "layer 2 domain" all might be acceptable. You can also look at Docker or Kubernetes documentation to ...
Ron Trunk's user avatar
  • 67.7k
2 votes
Accepted

How to assign multiple VLANS to a port?

I think you're assigning ports the wrong way. You have to specify each port before you enter the vlan command. Something like this: MainSwitch(config)#interface fastEthernet 1/4 MainSwitch(config-...
Ron Trunk's user avatar
  • 67.7k
2 votes
Accepted

No Private VLAN commands Cisco C3560 switch

Thank you guys, my switch is running LANBASE license, just found out and let you know. At least I should have an ipbase license to run private-vlan feature. Topic should be closed now. Thanks again.
Federal Reserve's user avatar
2 votes

Bonjour defeating wireless isolation?

I think SSID isolation is not the same as Client Isolation. Some controllers will have both and I believe they perform two different tasks. With SSID isolation, it simply means that if you have ...
SleepyMan's user avatar
  • 2,016
2 votes

Are there any security advantages to activating VLAN tagging?

By themselves, VLANs do not have any security advantages. But using VLANs, as @ronmaupin hints at, allows you to place access control lists to restrict traffic flowing from one VLAN to another. So, ...
Ron Trunk's user avatar
  • 67.7k
2 votes

Can the data usage be Oriented by Consume of Demand?

If I understand correctly, the problem is how to charge users based on how fast they consume data, rather than (or in addition to) how much data they consumed Cisco IOS has a "show interfaces" ...
mere3ortal's user avatar
  • 2,416
2 votes

Can the data usage be Oriented by Consume of Demand?

If you want to measure traffic and charge users based on how much traffic they generate, you will need to configure Netflow (or similar) to record traffic use. If you want to limit each users' share ...
Ron Trunk's user avatar
  • 67.7k
2 votes

Maximum no of Host's possible in private network on class wise?

For classful networks, the available addresses are given by the Wikipedia page on Classful Networks. Class A = 16,777,214 Class B = 65534 Class C = 254 The Wikipedia page also discusses the ...
Patrick Mackey's user avatar
2 votes

Correct term for networks created for virtual machines and containers?

I'd have called that a "virtual ethernet": there are ethernet addresses, ARP packets, broadcasts. It's virtual because there is no medium. It's definitely not a VPN, as there is what that is ...
jonathanjo's user avatar
  • 16.3k
2 votes
Accepted

Private VLANs Same As VLANs!

Private VLAN is a feature that prevent hosts within a single VLAN to communicate with each others. VLAN separate different networks. A site may consists of thousands computers, belonging to dozens of ...
JFL's user avatar
  • 19.7k
2 votes

Do i need VLAN per customer when i want to give users (secure) access to specific customer sites

Is it possible that a user can change his VPN IP? and if it is, can we protect this in a scalable way with having less as possible management effort? E.g. only allow a specific IP range (e.g. 10....
Ron Trunk's user avatar
  • 67.7k
2 votes

Private VLAN: gateway and DHCP for isolated VLANs over multiple switches (Extreme)

Private VLANs or normal VLANs (tagged or port-based) work the same way with DHCP. PVLANs just have the added complexity that the DHCP server needs to be reachable from each secured access port. You ...
Zac67's user avatar
  • 85.4k
2 votes
Accepted

Private vlan split in two networks

There's no need to share a VLAN across those two sites - all addressing is unambiguous and a routed link will work nicely. It's a model case for a VPN tunnel. I'd suggest setting up an IPsec tunnel. ...
Zac67's user avatar
  • 85.4k
1 vote

What is the appropriate VLAN configuration for this?

we want to setup an additional private VLAN so that those clients can communicate to each other through pre-defined static IPs. Alternatively, you can set up address reservations on the DHCP server, ...
Zac67's user avatar
  • 85.4k
1 vote

is private Vlan concept an alternative for access-list configuration?

It might. A private VLAN (or port isolation) restricts communication between switch ports. Normally, that is used to enable their communication to a server or uplink port while denying all other ports....
Zac67's user avatar
  • 85.4k
1 vote
Accepted

Do i need VLAN per customer when i want to give users (secure) access to specific customer sites

Is it possible that a user can change his VPN IP? That depends on your VPN solution. With most, it's not possible for a client to change their address. You should put that on your requirement list. ...
Zac67's user avatar
  • 85.4k
1 vote
Accepted

Private Vlans - Promiscuous port

According to the answer I found here : https://community.cisco.com/t5/switching/communication-between-the-secondary-community-vlans-hosts/td-p/2648508 ... this seems possible based on the design I ...
user59345's user avatar
1 vote

Private Vlans - Promiscuous port

If I had a private vlan on my switch, can it communicate with a 'normal' vlan on that same switch ? Given a Cisco switch, the answer is No. That is the whole point of private VLANs.
Ron Trunk's user avatar
  • 67.7k
1 vote
Accepted

Securing VLANs for Wireless AP with multiple SSIDs

Supporting multiple VLANs on a switch interface means you will have a trunk with tags to separate frames for each VLAN on the trunk, except the native VLAN (if any). On your Cisco 350 switch, you can ...
Ron Maupin's user avatar
  • 99.9k
1 vote

Meraki Firewall & Switch VLAN Setup

you need to configure your gateways on the Meraki Firewall ( via dashboard Security Appliance => Addressing & Vlans ) after that you need to configure the interconnexion between the firewall and ...
Phantomix's user avatar
1 vote
Accepted

How can I set up a VLAN to be firewalled from our intranet?

Configure a separate VLAN for your PCs, say VLAN 100. Assign all the PCs ports to this VLAN 100. Configure a subnet for your PCs, say 172.16.0/24 Configure your Mac1 port as a 802.1q trunk, so your ...
Andriy Berestovskyy's user avatar
1 vote
Accepted

Is a PVLAN the same as a one-port VLAN

Yes and no. Yes in the sense that the effect of two ports in an isolated PVLAN or two ports in two different community PVLANs can not communicate, as if they were in two different actual VLANs (...
Eddie's user avatar
  • 15.1k

Only top scored, non community-wiki answers of a minimum length are eligible