Stop Routing Between VLANS but still allow access to Internet
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-21-2002 09:57 PM - edited 03-01-2019 08:35 PM
I have to setup 32 Vlan, which will represent 32 seperate offices. I wish to allow each of the VLANs to access the internet and VLAN 1, but not to access the other client VLANs.
Does any know if this is possible?
Thanks in Advance
- Labels:
-
Other Networking
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-21-2002 10:17 PM
Yes, apply ACL to RSM.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-21-2002 10:27 PM
Sorry I should have explained this better,
it is going to be an external 2651 w/ daul 10/100 ports and 2 x Cisco 2950T 24 x 10/100 2x 10/100/100
Would I have to apply access list to each virtual interface?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-21-2002 10:51 PM
Yes. You have to enable ip routing for other VLAN to access VLAN 1 and Internet, and ACL must be used to block traffc between those VLANs.
For example, if you use following address scheme:
VLAN1: 192.168.1.0 /24
VLAN2: 192.168.2.0 /24
...
VLAN32: 192.168.31.0 /24
Configuration of the router:
interface f0/1.2
encapsulation dot1q 2
ip address 192.168.2.254 255.255.255.0
ip access-group 101 in
interface f0/1.2
encapsulation dot1q 3
ip address 192.168.3.254 255.255.255.0
ip access-group 101 in
access-list 101 permit ip any 192.168.1.0 0.0.0.255 ;allow VLAN 1 access
access-list 101 deny ip any 192.168.0.0 0.0.31.255 ; deny traffic to other VLANs
access-list 101 permit ip any any ; allow Internet access
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-21-2002 11:29 PM
Thank you very much
