cancel
Showing results for 
Search instead for 
Did you mean: 

isolate ip network of vlan from other on same port

isolate ip network of vlan from other on same port

sumeet
New Contributor
Here is the scenario
we have multiple VLAN's configured as follows.

VLAN 2001 setting

create vlan "vlan2001"
configure vlan vlan2001 tag 2001
configure vlan vlan2001 add ports 21-24 tagged
configure vlan vlan2001 ipaddress 10.0.0.1 255.255.255.0
configure vlan vlan2001 dhcp-address-range 10.0.0.3 - 10.0.0.100
configure vlan vlan2001 dhcp-options default-gateway 10.0.0.1
enable ipforwarding vlan vlan2001
enable dhcp ports 21-24 vlan vlan2001

There are lots of other vlans
for example
create vlan "vlan199"
configure vlan vlan199 tag 199
configure vlan vlan199 add ports 21-24 tagged
configure vlan vlan199 ipaddress 172.16.199.1 255.255.255.0
configure vlan vlan199 dhcp-address-range 172.16.199.2 - 172.16.199.200
configure vlan vlan199 dhcp-options default-gateway 172.16.199.1
enable ipforwarding vlan vlan199
enable dhcp ports 21-24 vlan vlan199

Similiarly we have vlan 101 to 198 with ip 172.16.<101-198>.1 and dhcp range 172.16.<101-198>199.2 - 172.16.<101-198>.200
I want that 172.16.<101-199>.x should not be able to ping 10.0.0.x
How should I do that ?

Thanks.
26 REPLIES 26

sumeet
New Contributor
ok
i will read references
then reply back .
1818 page pdf .pretty detailed.nice.

JeremyClarkson
New Contributor
Also the Command Reference Guide has alot on VR.

Sorry cant find the doc link.

André_Herkenrat
Extreme Employee

André_Herkenrat
Extreme Employee
EXOS always uses virtual router. as long as all vlans are within one vr they can communicate.
If you create another vr and put the vlans inside of this vr, these vlans can't communicate with the rest.
GTM-P2G8KFN