Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.
18 votes
Accepted

Can a switch that does NOT support VLAN capability be considered a managed switch if it has other features?

Yes. A managed switch is a switch you can configure in some way or other. Whether it supports VLANs or not is not the question. Even a switch (or a hub for that matter) that only provides status ...
user avatar
  • 69.8k
10 votes
Accepted

What's use of Port Isolation vs traditional VLANs?

Port isolation -also called private VLAN (thanks @Stuggi)- is a very useful feature for switches that connect end users. In a typical network you will have many end-users computers grouped together ...
user avatar
  • 18.3k
7 votes

Can a switch that does NOT support VLAN capability be considered a managed switch if it has other features?

Yes, "manageable" obviously refers to the fact that you can manage the switch, rather than to one specific feature such as VLAN. Among other things, some useful features such a switch could have: ...
user avatar
  • 18.3k
5 votes
Accepted

Juniper Private VLAN isolated port on a trunk

Unfortunately not. This is a frustrating limitation of the way Juniper have implemented Isolated ports and Promiscuos ports in PVLANs - it essentially boils down to if the interfaces is in access ...
user avatar
5 votes

Single client per VLAN in /24 network

Cisco Catalyst switches have the concept of private vlans which should accomplish what you are trying to do. In some situations, you need to prevent Layer 2 (L2) connectivity between end devices ...
user avatar
  • 1,331
5 votes

Private VLAN in transparent mode

Cisco says: You must configure VTP to transparent mode before you can create a private VLAN. Private VLANs are configured in the context of a single switch and cannot have members on other switches....
user avatar
  • 1,064
4 votes
Accepted

Private VLAN on HP switch

Not all HP series support Private VLAN (PVLAN). According to HPE ArubaOS-Switch Software Feature Support Matrix, you do not have this feature (PVLAN) on your devices. Some people suggest that you can ...
user avatar
  • 3,744
4 votes

Meraki Firewall & Switch VLAN Setup

VLANs separate traffic into distinct L2 segments or broadcast domains - no L2 (Ethernet) traffic crosses between different VLANs. For them to communicate, you need a router to enable L3 (IP) traffic. ...
user avatar
  • 69.8k
4 votes
Accepted

Are there any security advantages to activating VLAN tagging?

The security part comes from using VLANs. Users and devices on one VLAN cannot communicate with users and devices on another VLAN, except through a router. This gives you the opportunity to place ...
user avatar
  • 93k
4 votes

Correct term for networks created for virtual machines and containers?

Under the hood, all virtualization systems, including docker, use the same mechanism: they use a software switch on the host. Such a switch can be called a "virtual switch" (but this is a bit grey ...
user avatar
  • 18.3k
3 votes
Accepted

How to achieve Private VLAN (PVLAN) isolation without PVLAN support on switches

The short answer is no - PVLAN functionality is there for a reason - it changes the way the default flooding and learning mechanisms work to ensure that hosts in a VLAN don't see each other, while ...
user avatar
3 votes

Single client per VLAN in /24 network

A better solution (and more simple than private vlans) would be using switchport protected. Switchport Protected is a command you can apply on a per-interface basis. The way it works, is if two ...
user avatar
  • 13.9k
3 votes

Correct term for networks created for virtual machines and containers?

There is no specific term (that I'm aware of). A "virtual network," "virtual segment," or perhaps "layer 2 domain" all might be acceptable. You can also look at Docker or Kubernetes documentation to ...
user avatar
  • 62.1k
3 votes
Accepted

Struggling with interVLAN routing + multiple VPNs + default routes on multi-layer switch

Basically, you need to make up your mind which device your clients should use as default gateway: the OPNsense - then inter-VLAN routing goes that way, too - or the L3 switch, that in turn uses the ...
user avatar
  • 69.8k
2 votes

Limiting community member communication in PVLAN's

Private VLANS are a layer 2 technology. To filter specific ports, you need something that operates at layer 4. There are virtualized firewalls that would be applied per VM that could do this for you....
user avatar
  • 62.1k
2 votes

Addressing guest hosts

Separate private VLAN that has it's own L3 addressing scheme is the option that would make the most sense. Or you can get fancy and use vrf's. Simple is better, do not make things complicated when ...
user avatar
  • 121
2 votes

Private vLAN useful to isolate multicast sources?

Are the sources using the same multicast address. If not make sure IGMP snooping is enabled on the switch. Private Vlans would prevent the servers from seeing each other even for unicast. If all the ...
user avatar
  • 1,357
2 votes

Single client per VLAN in /24 network

We have a similar setup, with a single /24 public range. At the time, I was not aware that the 2950 switches could support PVLANs (which coincidentally is what we've also been running). Instead, to ...
user avatar
  • 1,458
2 votes
Accepted

private-vlan pimary vlan port not set to promiscuous?

you need to consider the next facts 1- A private VLAN domain has only one primary VLAN. Each port in a private VLAN domain is a member of the primary VLAN; the primary VLAN is the entire private VLAN ...
user avatar
  • 3,404
2 votes
Accepted

How to assign multiple VLANS to a port?

I think you're assigning ports the wrong way. You have to specify each port before you enter the vlan command. Something like this: MainSwitch(config)#interface fastEthernet 1/4 MainSwitch(config-...
user avatar
  • 62.1k
2 votes
Accepted

No Private VLAN commands Cisco C3560 switch

Thank you guys, my switch is running LANBASE license, just found out and let you know. At least I should have an ipbase license to run private-vlan feature. Topic should be closed now. Thanks again.
user avatar
2 votes

Bonjour defeating wireless isolation?

I think SSID isolation is not the same as Client Isolation. Some controllers will have both and I believe they perform two different tasks. With SSID isolation, it simply means that if you have ...
user avatar
  • 1,966
2 votes

Can the data usage be Oriented by Consume of Demand?

If I understand correctly, the problem is how to charge users based on how fast they consume data, rather than (or in addition to) how much data they consumed Cisco IOS has a "show interfaces" ...
user avatar
  • 2,396
2 votes

Can the data usage be Oriented by Consume of Demand?

If you want to measure traffic and charge users based on how much traffic they generate, you will need to configure Netflow (or similar) to record traffic use. If you want to limit each users' share ...
user avatar
  • 62.1k
2 votes

Are there any security advantages to activating VLAN tagging?

By themselves, VLANs do not have any security advantages. But using VLANs, as @ronmaupin hints at, allows you to place access control lists to restrict traffic flowing from one VLAN to another. So, ...
user avatar
  • 62.1k
2 votes
Accepted

Configuring PVLANs across 3 switches

You would put the IP address on the primary VLAN SVI. Interface vlan2  private-VLAN mapping 3,5,7  ip address x.x.x.x x.x.x.x I would suggest running VTPv3 which supports pvlans. That way all ...
user avatar
2 votes

Maximum no of Host's possible in private network on class wise?

For classful networks, the available addresses are given by the Wikipedia page on Classful Networks. Class A = 16,777,214 Class B = 65534 Class C = 254 The Wikipedia page also discusses the ...
user avatar
2 votes

Correct term for networks created for virtual machines and containers?

I'd have called that a "virtual ethernet": there are ethernet addresses, ARP packets, broadcasts. It's virtual because there is no medium. It's definitely not a VPN, as there is what that is ...
user avatar
  • 15.9k
2 votes

Do i need VLAN per customer when i want to give users (secure) access to specific customer sites

Is it possible that a user can change his VPN IP? and if it is, can we protect this in a scalable way with having less as possible management effort? E.g. only allow a specific IP range (e.g. 10....
user avatar
  • 62.1k
2 votes
Accepted

Private VLANs Same As VLANs!

Private VLAN is a feature that prevent hosts within a single VLAN to communicate with each others. VLAN separate different networks. A site may consists of thousands computers, belonging to dozens of ...
user avatar
  • 18.3k

Only top scored, non community-wiki answers of a minimum length are eligible