VLAN interconnects

[lardum]

I have a 2924 with 5 different VLANs setup. They are called 10,20,30,40,50. On VLAN 10 i have my router/dhcp connected. Every VLAN should have access to this. But 20,30,40,50 should not be able to talk to eachother. The config looks like this:

interface FastEthernet0/1
switchport multi vlan 10,20
switchport mode multi
!
interface FastEthernet0/2
switchport multi vlan 10,20
switchport mode multi
!
interface FastEthernet0/3
switchport multi vlan 10,20
switchport mode multi
!
interface FastEthernet0/4
switchport multi vlan 10,20
switchport mode multi
!
interface FastEthernet0/5
switchport multi vlan 10,20
switchport mode multi
!
interface FastEthernet0/6
switchport multi vlan 10,20
switchport mode multi
!
interface FastEthernet0/7
switchport multi vlan 10,30
switchport mode multi
!
interface FastEthernet0/8
switchport multi vlan 10,30
switchport mode multi
!
interface FastEthernet0/9
switchport multi vlan 10,30
switchport mode multi
!
interface FastEthernet0/10
switchport multi vlan 10,30
switchport mode multi
!
interface FastEthernet0/11
switchport multi vlan 10,30
switchport mode multi
!
interface FastEthernet0/12
switchport multi vlan 10,40
switchport mode multi
!
interface FastEthernet0/13
switchport multi vlan 10,40
switchport mode multi
!
interface FastEthernet0/14
switchport multi vlan 10,40
switchport mode multi
!
interface FastEthernet0/15
switchport multi vlan 10,40
switchport mode multi
!
interface FastEthernet0/16
switchport multi vlan 10,40
switchport mode multi
!
interface FastEthernet0/17
switchport multi vlan 10,50
switchport mode multi
!
interface FastEthernet0/18
switchport multi vlan 10,50
switchport mode multi
!
interface FastEthernet0/19
switchport multi vlan 10,50
switchport mode multi
!
interface FastEthernet0/20
switchport multi vlan 10,50
switchport mode multi
!
interface FastEthernet0/21
switchport multi vlan 10,50
switchport mode multi
!
interface FastEthernet0/22
switchport multi vlan 1,10
switchport mode multi
!
interface FastEthernet0/23
switchport multi vlan 1,10
switchport mode multi
!
interface FastEthernet0/24
switchport multi vlan 1,10
switchport mode multi
!


The problem i have with this setup is that VLAN 20 can for example talk to VLAN 30. But not the other way. Anyone have any idea?

 

[nawlej]

I think at least one port has to be able to be set up for trunking between the two vlans using the router on a stick model, or all of the ports haved to be a member of the management vlan..

 

[AJ1982]

VLANS need to be routed, with a Layer3 Switch or a Router.

Ta

AJ

===

Fatman Superstar (Andrew James)

CCNA, CCAI

 

[lardum]

So there's no way for me to solve this? I need to seperate 5 different segments. The equipment i can choose between is Cisco 2924XL or 2950T.

 

[lardum]

Correction: 5 different segments. 1 of the segments needs to be accessed from all segments. I have DHCP and Internet connectivity on that segment.

 

[AJ1982]

You need VLAN routing

===

Fatman Superstar (Andrew James)

CCNA, CCAI

 

[lardum]

Do i really need VLAN routing even if i want this:

- each VLAN should only be able to talk to VLAN 10.
- i.e VLAN 20 should not be able to talk to VLAN 30.
- VLAN 20 should be able to talk to VLAN 10.
- VLAN 30 should be able to talk to VLAN 10.
- VLAN 40 should be able to talk to VLAN 10.
- VLAN 50 should be able to talk to VLAN 10.

?

 

[AJ1982]

You are correct

===

Fatman Superstar (Andrew James)

CCNA, CCAI

 

[nawlej]

Yes, you need a router. SWITCHES dont ROUTE. When you separate a switch into VLANS, its like having three different switched, three different broadcast domains. Broadcast domains cant talk to each other unless they are routed between.