03-19-2013 05:19 AM
I try to do the following:
- WLAN with VLAN 10 and inter-vlan disabled
- LAN-Port 4 with VLAN 20 untagged and inter-vlan disabled
- VLAN 1 & 10 are excluded on LAN-Port 4
Why can I still ping from LAN to WLAN => I can ping from LAN-Port 4 to the VLAN 10, this shouldnt be possible, right?
At the end, VLAN 10 should not be able to reach LAN, only WAN.
03-21-2013 07:44 AM
Hi Joe, thank you for using our forum, my name is Johnnatan I am part of the Small business Support community. Well Joe in this case you could isolate the Vlans 10 and 20 in order to restrict the communication between Vlans. I hope you find this answer useful,
Please mark the question as Answered or rate it so other users can benefit from it"
Greetings,
Johnnatan Rodriguez Miranda.
Cisco Network Support Engineer.
03-25-2013 03:14 AM
I think the problem is, that there is automatically dynamic routing between WLAN and LAN Ports. The Routing-Table shows no static Routing, only dynamic. Isolation chance nothing.
Can I deactivate dynamic Routing?
The target is, to Route 4 WLAN with their own VLANs through 4 different LAN-Ports. WAN-Port is not needed, and there should be no dynamic Routing to 0.0.0.0
03-25-2013 01:25 PM
I am sorry for that, I wasn´t clear, in this case what I mean is, you can create an Access List in order to restrict the access between WLAN to LAN. I will share with you a document explaining how to do that, http://www6.nohold.net/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=2286
Please mark the question as Answered or rate it so other users can benefit from it
Greetings,
Johnnatan Rodriguez Miranda.
Cisco Network Support Engineer.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide