Segregate vlans and sharing internet connection PC6248

Question

Hi PowerConnect experts,

I have a PC6248 acting as a core switch with multiple vlans sharing the same internet connection. I have routing enable on all the vlans interfaces.

I now need to segment the vlans so that client computers don't talk to each other across vlans. I tried the "no routing" on the vlan interfaces but they then stop talking to the router (ASA) aswell as each other. So the vlans lose the internet connection.

How can I stop traffic between vlans but keeping internet access for the vlans on PC6248? Is it possible?

Thank you

FamousRuler · Answer

Thanks for the reply, I went through the guide and it is usuable but I don't think I can cause I have a bunch of switches across the building and this configuration would force me to configure every single switch. And if there is a change on some port it need to be configured again. It looks like kind of a static approach and not very scalable.

Another thing is I don't think you can implement this using trunk ports since it only uses untagged frames so I can't use this since I'm using trunks to carry vlans to layer 2 switches.

Can't I use ACL's on the PC6248 or maybe if I turn routing off the vlan interfaces and put static routes to the ASA. I'm not familiar with the PC6248 so I don't know what it is capable of.

There is a ip routing command in global config mode, what does it do?

FamousRuler · Answer

Thank you, the link www.dell.com/.../pwcnt_IP_ACLs.pdf was very helpfull. I have now succesfully isolated all my vlans. I just created an ACL for every vlan interface and every ACL contain a deny ACE to all the vlans, and a permit ip any any is the last ACE on every ACL.

Well the pdf above really explains it all.

Thanks again.

PS. On my previous post I was wondering about the "ip routing" command, not the "ip route" command. just to clarify.

mburke911 · Answer

Does anyone know where dell is hiding the pwcnt_IP_ACLs.pdf document?  The link doens't work and it seems it's the solution for my problem.   Thanks

DELL-Charles R · Answer

Hello mburke911,

I don't know that that document is available. All the links I find to it are broken. If someone in the community has it maybe they could post it.

I did find this that may be helpful:

How to configure IP ACL in DELL Networking N-Series Switches

http://dell.to/3FeebeD

Networking General

Segregate vlans and sharing internet connection PC6248

Was this post helpful?