VLAN error

[handsome]

May i ask what is happening to my vlans? i tried to configure those 2 vlans which is vlan 10(left) and vlan 20 (right). but they can connect each other even when they are on the different vlan... what is wrong with my configuration?

version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Switch
!
!
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
interface FastEthernet0/1
 switchport trunk native vlan 99
 switchport mode trunk
!
interface FastEthernet0/2
 switchport access vlan 10
 switchport mode access
!
interface FastEthernet0/3
 switchport access vlan 20
 switchport mode access

license udi pid CISCO2911/K9 sn FTX1524YU8Y-
!
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet0/0
 no ip address
 duplex auto
 speed auto
!
interface GigabitEthernet0/0.10
 encapsulation dot1Q 10
 ip address 10.10.10.1 255.255.255.248
!
interface GigabitEthernet0/0.20
 encapsulation dot1Q 20
 ip address 10.10.20.1 255.255.255.248
!
interface GigabitEthernet0/0.99
 no ip address
!
interface GigabitEthernet0/1
 no ip address
 duplex auto
 speed auto
 shutdown
!

[balaji.bandi]

but they can connect each other even when they are on the different vlan... what is wrong with my configuration?

Please clarify what is the issue ? they can connect or they can not connect VLAN 10 and VLAN 20 ?

what is the IP address of the device ?

[handsome]

they can connect to each other... it should be not connected

[Georg Pauwen]

Hello,

this looks like a Packet Tracer project. Post the zipped project (.pkt) file...

[balaji.bandi]

they can connect to each other... it should be not connected

if they are not support to contact each other then you need to put ACL to deny.

examples :

https://www.cisco.com/c/en/us/support/docs/ip/access-lists/26448-ACLsamples.html

[Deepak Kumar]

Hello,

As per the design and configuration, both VLAN hosts must communicate because you are using a router as a gateway, and Routing is enabled by default on all routers. 

So, when you are trying to ping or send traffic from VLAN 10 to 20 or vice versa, Packets reach the gateway (router) and it will route traffic on the required destination VLAN.