VLAN to separate clients in a LAN

[anup_bekal]

Hi

We have a LAN that consists of clients with 2 range of private IP addresses, namely 10.1.1.0 and 192.168.1.0 with subnet mask 255.255.255.0. All clients are connected to five CISCO Catalyst 2950 Series Switches which are cascaded.

I do not want 10.1.1.0 clients to communicate with 192.168.1.0 clients. Some of the users in 10.1.1.0 network configure secondary IP address from the 192.168.1.0 network on their PCs and communicate with 192.168.1.0 network and vice versa.

How can I stop this? Does configuring VLAN on the Cisco Switches can help in this regard? If so how exactly I can configure that?

Please help.

Thanks in advance.

Anoop K

[Georg Pauwen]

Hello,

you could indeed create two VLANs and assign ports from each subnet to those VLANs, effectively prohibiting one subnet to communicate with the other. You will have to create a VTP domain and trunk links between your switches in order for the VLAN traffic to be transported across the cascaded switches.

Once you have set your VTP domain, your trunk links, and your VLANs, assign the ports to VLANs with the following commands:

interface FastEthernet0/1

switchport mode access

switchport access vlan 2

You might want to check this document, it describes the process of creating VLANs and the related issues:

VLANS/VTP (VIRTUAL LANS/VLAN TRUNKING PROTOCOL)

Creating Ethernet VLANs on Catalyst Switches

http://www.cisco.com/en/US/partner/tech/tk389/tk689/technologies_tech_note09186a008009478e.shtml

HTH,

GP

[anup_bekal]

Hi

Thanks for the information. But, I was not able to get the document from the link you have provided. It was asking to log in with a CCO account for which when I tried with mine, got rejected.

Please send me the document to this email anup_bekal@hotmail.com, if possible.

Thanks once again.

Regards

Anoop

[Kevin Dorrell]

The same document is available without a login at:

http://www.cisco.com/warp/public/793/lan_switching/3.html

Kevin Dorrell

Luxembourg

[aashish.c]

Hi Anup,

Here is the document you need for creating vlans on 2950 :

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2950/12119ea1/2950scg/swvlan.htm

put the users in different vlans and they will not be able to communicate with each other.

if any problems you can cntact me at aashish.c@helpdesk.netsol.co.in

regards

aashish C