cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
465
Views
0
Helpful
1
Replies

Different Vlans equal different Subnets?

should hosts in Vlan 1 be of a different network than those in Vlan 2 and so forth?

 

generally speaking?

 

 

1 Accepted Solution

Accepted Solutions

Peter Paluch
Cisco Employee
Cisco Employee

Hi Josh,

should hosts in Vlan 1 be of a different network than those in Vlan 2 and so forth?

Yes, different VLANs (or better said, members of different VLANs) should use different, unique IP networks. This is because VLANs are usually used to group together hosts that are of a similar nature for practical network management purposes, but they are not intended to prevent them from ever talking together. And even if you wanted to do that, you would - in most cases - still want to allow all your VLANs to access the internet. Because of this, each one of your VLANs needs to use a different IP space to be distinguishable from any other, otherwise their mutual communication or the responses coming back from internet would not be delivered properly.

In the rare cases when a VLAN would be totally isolated from outside and would never, ever, talk to any outside host (in a different VLAN or in the internet), you could have the members of this VLAN share the IP subnet of another VLAN. But in all other cases, you would need to have each VLAN placed into a unique IP subnet.

Best regards,
Peter

View solution in original post

1 Reply 1

Peter Paluch
Cisco Employee
Cisco Employee

Hi Josh,

should hosts in Vlan 1 be of a different network than those in Vlan 2 and so forth?

Yes, different VLANs (or better said, members of different VLANs) should use different, unique IP networks. This is because VLANs are usually used to group together hosts that are of a similar nature for practical network management purposes, but they are not intended to prevent them from ever talking together. And even if you wanted to do that, you would - in most cases - still want to allow all your VLANs to access the internet. Because of this, each one of your VLANs needs to use a different IP space to be distinguishable from any other, otherwise their mutual communication or the responses coming back from internet would not be delivered properly.

In the rare cases when a VLAN would be totally isolated from outside and would never, ever, talk to any outside host (in a different VLAN or in the internet), you could have the members of this VLAN share the IP subnet of another VLAN. But in all other cases, you would need to have each VLAN placed into a unique IP subnet.

Best regards,
Peter