|
Posted by Christo on May 3, 2006, 4:05 pm
If you were Registered and logged in, you could reply and use other advanced thread options
>
> It depends....You can control what vlan have access to what by assigning
> a dot1q or ISL layer 3 subinterace to the vlan. For example, if you only
> wanted and student and staff to have access to each other and the
> application vlan to be isolated your would configured your router as
> suchs. Please note im assuming the vlan 1 is staff, 2 is student, and 3
> is app for this example.
>
> interface FastEthernet0/0
> no ip address
> duplex full
> !
> interface FastEthernet0/0.1
> description Staff VLAN
> encapsulation isl 1
> ip address x.x.x.x 255.255.255.0
> no ip redirects
> !
> interface FastEthernet0/0.2
> description Student VLAN
> encapsulation isl 2
> ip address x.x.x.x 255.255.255.0
> no ip redirects
>
> Let me know if you have any questions.
>
>
App isnt a VLAN it is just a single server connected to a interface on the
router
the switch is connected to another interface on the router via a trunk, this
switch has 2 vlans
STAFF
STUDENT
i dont want staff and student to be able to communicate with eachother
However i want them both to be able to access application which is a single
server connected to another interface on the router
| 
Yahoo! 
Google 
Windows Live 
del.icio.us 
digg 
Netscape 
XML site map