10-15-2015 02:35 PM - edited 03-08-2019 02:14 AM
should hosts in Vlan 1 be of a different network than those in Vlan 2 and so forth?
generally speaking?
Solved! Go to Solution.
10-15-2015 02:41 PM
Hi Josh,
should hosts in Vlan 1 be of a different network than those in Vlan 2 and so forth?
Yes, different VLANs (or better said, members of different VLANs) should use different, unique IP networks. This is because VLANs are usually used to group together hosts that are of a similar nature for practical network management purposes, but they are not intended to prevent them from ever talking together. And even if you wanted to do that, you would - in most cases - still want to allow all your VLANs to access the internet. Because of this, each one of your VLANs needs to use a different IP space to be distinguishable from any other, otherwise their mutual communication or the responses coming back from internet would not be delivered properly.
In the rare cases when a VLAN would be totally isolated from outside and would never, ever, talk to any outside host (in a different VLAN or in the internet), you could have the members of this VLAN share the IP subnet of another VLAN. But in all other cases, you would need to have each VLAN placed into a unique IP subnet.
Best regards,
Peter
10-15-2015 02:41 PM
Hi Josh,
should hosts in Vlan 1 be of a different network than those in Vlan 2 and so forth?
Yes, different VLANs (or better said, members of different VLANs) should use different, unique IP networks. This is because VLANs are usually used to group together hosts that are of a similar nature for practical network management purposes, but they are not intended to prevent them from ever talking together. And even if you wanted to do that, you would - in most cases - still want to allow all your VLANs to access the internet. Because of this, each one of your VLANs needs to use a different IP space to be distinguishable from any other, otherwise their mutual communication or the responses coming back from internet would not be delivered properly.
In the rare cases when a VLAN would be totally isolated from outside and would never, ever, talk to any outside host (in a different VLAN or in the internet), you could have the members of this VLAN share the IP subnet of another VLAN. But in all other cases, you would need to have each VLAN placed into a unique IP subnet.
Best regards,
Peter
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide