T2600G ping diferent VLAN
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
I'm created interface VLAN20 ip 192.168.0.5. All devices in VLAN 20 I can ping from switch. And can't ping ip in VLAN 10 and another VLAN. Is there the way do it?
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Hi BrainLowe
If you want to ping the IP address in other VLAN, you need to set up the L3 interface for other VLAN as well.
Generally the VLAN will separate the network in layer 2. If you set up the L3 interface for VLAN, switch will generate the routing. Then the data can transmit in layer 3 through routing table.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
V_M wrote
Both vlan are in the same IP subnet. Therefore, I can not create another interface.
Then either split the IP subnets (e.g. split subnet IP 192.168.1.0/24 into subnet IPs 192.168.1.0/25 and 192.168.1.128/25) to be able to define two VLAN interfaces or use Access Control Lists to isolate client groups in the same subnet (and same VLAN). Then allow only ICMP echo requests/responses to reach any client of such a group.
- Copy Link
- Report Inappropriate Content
V_M wrote
Both vlan are in the same IP subnet. Therefore, I can not create another interface.
Generally VLAN is used for isloate the devices. If you want different VLAN can access each other, you need to set up the VLAN interface to let them access on Layer 3. As you see, different VLAN interface should be in different subnet. You can refer to what R1D2 said, split 192.168.0.0/24 to two subnets. Then you can create VLAN interface successfully.
- Copy Link
- Report Inappropriate Content
If you are using a layer 2 switch the VLANs will not be able to communicate between each other, they will be totally separted, now if you want to enable communication between them, you need to use a layer 3 device in order to interconnect them, you can use: routers, multilayer switches or firewall to accomplish that.
- Copy Link
- Report Inappropriate Content
V_M wrote
Both vlan are in the same IP subnet. Therefore, I can not create another interface.
Was there a reason you created two VLANs for computers in the same IP subnet? Is it a requirement? Are you doing it for isolation?Otherwise, just put all of the ports into VLAN 20, and you will be able to ping them all.
If you want to isolate them, you can configure Port Isolation:
But this still will not allow you to ping the devices from the switch VLAN 20.
Is the switch interface for VLAN 20 also the default gateway for your subnet? Or is that just the management interface on the switch? You cannot configure two different VLAN IP interfaces in the same subnet on the switch.
-rb
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 2384
Replies: 6
Voters 0
No one has voted for it yet.