Isolate-User-VLAN

By Vikas Bagwe -

Network Diagram

Figure 5 Network diagram for isolate-user-VLAN configuration

Network Requirements

Device B and Device C are located in two independent networks, each device configured with VLANs as required. Due to network design changes, you are required to use Device A to interconnect Device B and Device C. When doing that, consider the following:



For security sake, devices attached to Device B should not communicate directly with devices attached to Device C. However, because the VLANs on Device B and Device C overlap, Host A and Host C will be in the same VLAN after the network design changes, which can result in safety problems, as shown in Figure 5. To address the problem, you can use the isolate-user-VLAN function to make VLAN 2 and VLAN 3 on Device B and VLAN 3 and VLAN 4 on Device C become locally significant. On Device A, use VLAN 5 and VLAN 6 to isolate the two networks, without having to consider their respective internal VLAN configurations.



Configure VLAN interfaces on Device A for forwarding packets between the two networks at Layer 3.

Configuration Example

Configuration on Device B
#
vlan 2 to 3
#
vlan 5
 isolate-user-vlan enable
#
interface GigabitEthernet2/0/1
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 3 5 untagged
 port hybrid pvid vlan 3
#
interface GigabitEthernet2/0/2
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 2 5 untagged
 port hybrid pvid vlan 2
#
interface GigabitEthernet2/0/5
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 2 3 5 untagged
 port hybrid pvid vlan 5
#
isolate-user-vlan 5 secondary 2 3

Configuration on Device C
#
vlan 3 to 4
#
vlan 6
 isolate-user-vlan enable
#
interface GigabitEthernet2/0/3
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 3 6 untagged
 port hybrid pvid vlan 3
#
interface GigabitEthernet2/0/4
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 4 6 untagged
 port hybrid pvid vlan 4
#
interface GigabitEthernet2/0/5
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 3 4 6 untagged
 port hybrid pvid vlan 6
#
isolate-user-vlan 50 secondary 2 3

Configuration on Device A
#
vlan 5 to 6
#
interface Vlan-interface 5
 ip address 192.168.0.1 255.255.255.0
#
interface Vlan-interface 6
 ip address 192.168.1.1 255.255.255.0
#
interface GigabitEthernet2/0/1
 port access vlan 5
#
interface GigabitEthernet2/0/2
 port access vlan 6

You might also like:

SATTA KING
free online proxy list pro
mixads
EBB Series economical bending beam Load Cell CAL-TEDS Plug & Play Smart load cell option is a AD9 connector with EEPROM attached to cable
Visit our website for more info.

NYC Car Service and Limousine Service in New York to JFK, LGA, EWR, LaGuardia and Newark Airport NJ

Comments

Post a Comment

Popular posts from this blog

Linux File and Directory Permissions

By -
Image
file & directory protection is a essential of any OS and Linux OS is no exception for it! These authorizations allow you to choose exactly who can access your files & directory, providing an overall improved system security. There was one of the major flaws in the older Windows operating-system where, by standard, all users can see each other people's information (Windows 95, 98, Me). For overcoming it, editions of the Windows based computer system such as NT, 2000, XP and 2003 lot more security features added. They fully support file & directory permissions, just as Linux system has since the beginning. Together, we'll now assess a directory listing from our Lab Linux system hosting server, to help us understand the information provided. a simple 'ls' command will give you the file and directory listing within a given directory, including the option  '-l' will display number of new areas that we are going to discuss here:
Read more

How to Disable SSL for Webmin

By -
Webmin is a Web application that enables administrators to manage Linux servers. Webmin runs on a Web server at port 10000. Miniserv is the name of the Web server application that handles the Webmin Web application. By default, Miniserv uses SSL. However, you can disable SSL for Webmin Miniserv by editing the configuration file for the Web application. With SSL disabled, you can access the Webmin application over a standard HTTP connection. Step 1 Open a terminal window on the Linux server. You can also SSH into the server if you do not have physical access to the machine. Step 2 Type the following command at the command prompt and press the “Enter” key: nano /etc/webmin/miniserv.conf This command opens the Miniserv configuration file in the Nano text editor.
Read more

INSTALL CISCO VPN CLIENT ON WINDOWS 10 (32 & 64 BIT). FIX REASON 442

By -
Image
This article shows how correctly install Cisco VPN Client (32 & 64 bit) on Windows 10 (32 & 64 bit) using simple steps, overcome the ‘ This app can’t run on this PC ’ installation error , plus fix the Reason 442: Failed to enable Virtual Adapter error message . The article applies to New Windows 10 installations or Upgrades from earlier Windows versions and all versions before or after Windows 10 build 1511 .  To simplify the article, we’ve broken it into the following two sections: How to Install Cisco VPN client on Windows 10 (clean installation or upgrade from previous Windows), including Windows 10 build prior or after build 1511 . How to Fix Reason 442: Failed to enable Virtual Adapter on Windows 10 Figure 1. The Cisco VPN Client Reason 442: Failed to enable Virtual Adapter error on Windows 10 HOW TO INSTALL CISCO VPN CLIENT ON WINDOWS 10 (NEW INSTALLATIONS OR O/S UPGRADES) The instructions below are for new or clean Windows 10 inst...
Read more