PC can't ping the router on VLAN

[MrFinny]

Hi, i'm learning on packet tracer and i have a problem.

I need to create a network with 5 VLAN where the PCs in the same VLAN can comunicate between them, while PCs from different VLANs can't. My problem is that i can't ping the router from any PC.

I'm using one router, one switch and to the switch are attached all the PCs, i've setted the router interface as a trunk type while all the others are access. I would need, if possible, to use only one cable and only one network IP. (mine for this is network: 192.168.1.0 SB: 255.255.255.0 DG: 192.168.1.1). All the PCs are on the same network from 192.168.1.11 to 192.168.1.25.

I will attach a copy of my packet tracer file and a screenshot. Sorry for my bad english and thanks for the time.

[Flavio Miranda]

Hi

 What you need to do is create a interface vlan on router with respective ip address for each vlan.

Look on my file. I did for vlan 50. You can see on the router that I created an interface :

FastEthernet0/0.50  and add it to vlan 50. I also change the encapsulation to dot.q

Then, now if you go to a PC on vlan 50, you can ping the router.

You need to repeat it to every vlan on the topology. 

Make sure you change the interface on router to

FastEthernet0/0.40

FastEthernet0/0.30

etc

[Georg Pauwen]

Hello,

what instructions are you following (if any), can you post them ? The reason I am asking is that the requirements below are mutually exclusive.

--> All the PCs are on the same network from 192.168.1.11 to 192.168.1.25.

--> I need to create a network with 5 VLAN where the PCs in the same VLAN can comunicate between them, while PCs from different VLANs can't.

Also, you need to deny inter-Vlan access from all Vlans to all other Vlans, effectively allowing only intra-Vlan access ?

[MrFinny]

Well i was wondering if it was possible to create multiple VLAN on the same network (192.168.1.0) but reading various articles i discovered that is impossible, if i had it correctly i need to create 5 subnets like:

192.168.1.0, 192.168.2.0, 192.168.3.0, 192.168.4.0, 192.168.5.0, all with SM 255.255.255.0, and then divide the router interface into 5 different interfaces using decimals and encapsuling them with dot1Q.

I needed 5 VLANs that can't comunicate between them, but PCs in the same VLAN could.

Example: if we had PC1 and PC2 in the VLAN 10, and PC3 and PC4 in the VLAN 20 if i ping from PC1 to PC2 the ping should be succesfull while if i pinged from PC1 to PC3 or PC4 the ping should fail.

If my answer is the same as your answer sorry for the misunderstanding.

[Georg Pauwen]

Hello,

I am still not really clear on what you are trying to accomplish...

--> I need to create a network with 5 VLAN where the PCs in the same VLAN can communicate between them, while PCs from different VLANs can't.

Is this something you have come up with yourself, or are you following a lab with instructions ?

[Martin L]

technically it is possible to create multiple VLANs on the same network but it is not usually done; you could have 192.168.0.0/16 with several vlans; Normally, you would split /16 into smaller /24s. and have 1 subent per 1 vlan.

as you mentioned, PCs will communicate within the same VLAN but not outside; you will need a router (or L3 SVI) to route traffic between vlans.  this is because vlan separates B-cast domains. 

Regards, ML
**Please Rate All Helpful Responses **