Unsolved
This post is more than 5 years old
2 Posts
0
8752
April 26th, 2006 16:00
Powerconnect 3448 VLAN Help!!
My company hired a network engineer that promised to setup Vlans for our office building...he told us to purchase a powerconnect 3448....he then tells us that when we setup Vlans on this switch, they cannot have access to the internet, which defeats the whole purpose....after he told us this, he quit...so i need someone to shed some light on us and tell me if there is away around this issue...do we need a layer 3 switch?...or is there an easy way out??.....thanks
No Events found!
RogueDataVault
5 Posts
0
April 26th, 2006 23:00
Computer A, VLAN 2 --> My Firewall's WAN Port (gateway to the internet)
Computer B, VLAN 3 --> A group of computers
Computer C, VLAN 4 --> Another group of computers
Now my goal is to have Computer groups B & C communicate with the Firewall ('A') but not communicate with each other. So B can ping A but can't ping C. Here's how I did it:
I created all my VLANs and made the ports members of those VLANs through VLAN Membership. Next for my firewall port under Port Settings I changed the VLAN Mode to General, selected the PVID of 2, Admit All and Enable. I also made Computer A a member of both B & C.
Now for the computers in group B, they must be a member of both VLAN A & B. For those computers I changed the Port Settings to be General, PVID 3, Admit All and Enable.
For computers in group C they must be a member of both VLAN A & C. Those need to be configured with PVID 4, Admit All and Enable.
Now if a computer in Group B needs to access a computer in Group C you just make those two computers members of group B and C and they should be able to communicate.
One more side note, when I was testing this out I had problems if the computers were a member of VLAN ID 1. You'll note all my VLAN ID's start with 2. Just take care that you can still access the management interface of the switch! I configured this through the web interface.
Adam N
2 Intern
•
128 Posts
0
April 27th, 2006 13:00
This is impossible to answer without more detail. If at present you already have a router which is providing access to the internet then there is no reason at all why you cannot give specific VLANS on the PC3448 access to the Internet. However, if you have no ISP router at present and were hoping to use the PC3448 switch to route traffic to your ISP then this is not possible, it is not a L3 switch / router.
Hope this is of some help, try and be more specific and I can try and help your further.
Regards