Alternative method to using IP Forwarding?

[Derek_Mayberry]

We have an Extreme switch that has the following vlans.

vlan1 switch interface is 192.168.10.4/24
vlan2 switch interface is 192.168.50.240/22 (so hosts are 48.0 through 51.255)

vlan1 has ipforwarding enabled but vlan2 does not.

We need hosts that are on vlan2 to communicate with hosts on vlan1 and vice versa. The main problem is that we understand we can solve this by enabling ipforwarding on vlan2, but we don't want to do this if there is any other possible way. The point of vlans is segregation and we would just be removing that if we have ipforwarding enabled on both wouldn't we??

Is there any other possible method to get traffic between even just a couple hosts from each vlan to talk? Maybe something more limited than a broad brush of ipforwarding and secure etc. ?

[David_Rahn]

vlans are to separate broadcast traffic, and they do ..

if you want traffic to go from one vlan to an other you will have to have routing at some point.

in extreme "enable ipforwarding" is just turning on Routing between vlans

if you want security, you can use an ACL

[davidj_cogliane]

You beat me by 5 seconds cause I had to flip my brauts.