VLANs can ping each other

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

VLANs can ping each other

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
VLANs can ping each other
VLANs can ping each other
2017-11-03 14:24:26
p-1, port 1 is my trunk port, how would I set these ports tag/untag/PVID in this scenario so that devices in different vlans can't ping/see each other?
The Router has the subnets/VLANs set on it. I could get the machines on their VLAN and receiving the correct IPs with this config but they could ping each other from different VLANs?
[ATTACH=CONFIG]6353[/ATTACH]

All I have set at the moment is
VLAN ID 1 - Untagged Ports - 1-8

appreciate any help with this! :confused:
  0      
  0      
#1
Options
4 Reply
Re:VLANs can ping each other
2017-11-04 02:29:13
As long as you don't isolate the different networks on your router and it is used as the default gateway, the router usually will route traffic from/to those networks independent of their VLAN membership.
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#2
Options
Re:VLANs can ping each other
2017-11-04 06:03:55
So I still need to isolate (firewall) the networks from each other? Vlan tagging doesn't do that?
  0  
  0  
#3
Options
Re:VLANs can ping each other
2017-11-04 08:26:53

beamboy wrote

So I still need to isolate (firewall) the networks from each other? Vlan tagging doesn't do that?


In general, enabling VLANs on the router usually will not (and should not) mess around with firewall policies/settings. Usually a router should do routing between subnets managed by the router. :) You need to define the firewall policy you have in mind if not set as default policy already.
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#4
Options
Re:VLANs can ping each other
2017-11-04 14:40:14
awesome thanks man got it all sorted, firewall groups for the vlans and a bit of effort. :eek:
  0  
  0  
#5
Options