address not accessible

[william.briere]

Hello,

I have a 4507r and have added a new interface vlan 75 with an ip address of 10.75.0.1. I have created an ospf route for the 10.75.0.0 network in the 0 area but for some reason I cannot ping it.

Here is the config in question...

interface Vlan75

ip address 10.75.0.1 255.255.0.0

no ip redirects

!

router ospf 2

log-adjacency-changes

redistribute static metric 200 subnets

network 10.50.0.0 0.0.255.255 area 0

network 10.75.0.0 0.0.255.255 area 0

When I do a show ip route 10.50.0.0 I get..

Routing entry for 10.50.0.0/16

Known via "connected", distance 0, metric 0 (connected, via interface)

Routing Descriptor Blocks:

* directly connected, via Vlan23

Route metric is 0, traffic share count is 1

but for 10.75.0.0 I get

% Subnet not in table

Any ideas?

[william.briere]

What if I were to want to have a vlan on the 4948 that has 12 ports on it, but I don't want traffic to leave that vlan?

[mohammedmahmoud]

William,

You can use whatever VLANs you require on the 4948 and by default the traffic don't leave the VLAN unless inter-VLAN routing is configured by using SVI interfaces (interface vlan x and interface vlan y and so on) on a layer 3 switch, and accordingly in the context of a layer 2 switch the VLAN traffic can't be seen by another VLAN.

HTH,

Mohammed Mahmoud.

[william.briere]

So your saying as long as I only use...

vlan XX

and not use interface vlans then the traffic will stay within that vlan?

[mohammedmahmoud]

Hi,

Yes thats right, by default if the switch is layer 2 switch with just vlan configuration there can be no communication between the vlans, unless the switch is converted to layer 3 functionality (ip routing) and SVI interfaces are configured (interface vlan).

HTH,

Mohammed Mahmoud.

[william.briere]

I have heard about vlans not being secure... Can you comment on this? something like "vlan snooping????"