• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

how do I do this? vlan? layer 3 switch?

skylab

2[H]4U
Joined
Sep 5, 2001
Messages
2,981
What do I need to accomplish this?

Switch A is connected to Switch B

Port 1 on Switch A will only talk to port 1 on switch B, and vice versa

All of the other ports on both switches function normally

The conntection between the 2 isolated ports is layer 2, no subnetting to keep them seperate, I need to be able to use any range of IPs between.

Basically there are 2 switches connected together via gigabit. I want to be able to have an isolated ethernet connection between the 2 closets without having to run a seperate line
how do I do this?

thanks
 
VLANs. Place port 1 on both A & B switches in VLAN 2, leave the rest of the ports in the default VLAN 1.

Now recognize that unless the switch is L3 you will need a router on both VLANs if they need outside VLAN access.
 
Originally posted by Anthony.L
VLANs. Place port 1 on both A & B switches in VLAN 2, leave the rest of the ports in the default VLAN 1.

Now recognize that unless the switch is L3 you will need a router on both VLANs if they need outside VLAN access.

what do you mean by outside vlan access?
 
You'll need a router to pass packets from one VLAN to the other.
 
How do I just do layer 2 transport between the two switches? I need those 2 ports to basically act as a wire.
 
Are you just trying to uplink between them? In that case use their uplink ports. Or run a crossover cable.
 
yeah i dont think you even need to use vlans. a vlan is not a physical device..which is kind of what it sounds like you are trying to describe it as....sorry if thats wrong...just IMO....
anyways, you should just be able to use uplink ports on switch, or a crossover cable between any two non-uplink ports on your two switches.
this will work alot better for you because you wont have to have the vlan trunking on each of the uplink ports and you wont have to put that little bit of extra load on the switches with the vlan 'calculations' as i call them.
 
I am not trying to connect the two switches...thats already done.

What I need to do is, using the existing gigabit connection between the two wiring closets, have layer 2 transport between a port on switch a and a port on switch b. I need the two "isolated" ports to only talk to each other, and nothing else. They have to be able to pass any ip traffic between them regardless of subnet
 
that is what an uplink does. subnet is not an issue between uplinks. if you have two ports on a switch linked together, in thier own VLAN, then NO traffic will be on them, and unless you have another port trunked to your isolated VLAN, you wont ever see anything on there.

why are you worried about certain subnets anyways? IF that is even the issues, sounds like it isn't something on the switch, but perhaps on your machiens/router

<edit>
so what you are saying is you want a port on switch 1 to talk to another port on switch 2 over an isolated VLAN that runs over the gigabit links?
 
Originally posted by draconius


<edit>
so what you are saying is you want a port on switch 1 to talk to another port on switch 2 over an isolated VLAN that runs over the gigabit links?


correct.
 
I think I understand what you are asking. You want Port-A on Switch-1 and Port-B on Switch-2 physically seperate from the other ports on the switch? If so then creating a seperate VLAN for those ports is the best way to go, but understand that just having those two ports on a VLAN will only allow those two ports to talk to each other if they are directly(physically) connected...

How are the switch's currently connected and what kind are they?
 
The switches have not been purchased yet. They will probably be allied telesyn. The connection between them is gigabit ethernet
 
Let me ask you this, why would you only want the two ports to talk to each other? Will this switch also be doing routing for you?
 
Originally posted by PHUNBALL
Let me ask you this, why would you only want the two ports to talk to each other? Will this switch also be doing routing for you?

This isnt the exact situation due to nda, but here is a scenario that warrants the same need.

campus network between office buildings

existing gigabit ethernet between two buildings on the campus

another company subleases some space on the campus with offices in each of the 2 buildings

that company that subleased the space needs a data line between the 2 buildings

it is not possible to install another line between the 2 buildings, so they must be given a link using the existing line. obviously their connection has to be isolated from the building's network
 
OK, then you will definately need more than 2 ports allocated. You will need a VLAN on each side and at minimum two ports on each VLAN, one for the connection between buildings and one for whatever form of communication they intend to use (router, another switch, etc.)
 
Originally posted by PHUNBALL
OK, then you will definately need more than 2 ports allocated. You will need a VLAN on each side and at minimum two ports on each VLAN, one for the connection between buildings and one for whatever form of communication they intend to use (router, another switch, etc.)

so would it be like this?
port 1 on each switch is for company b
port 24 is the gb uplink
ports 2-23 are for company a

on both switches, port 1 is on vlan 1. ports 2-23 are on vlan 2. port 24 is on vlan 1 and vlan 2?
 
Something like that, what you really need to do is configure a port trunk for your GigE connection and then go from there with your VLAN configurations...
 
Skylab,

Phunball is correct.

If you don't create a trunk port between two switches, (on that gigabit interface), you can't separate the traffic.

I had to read through a couple of times of what you wanted to accomplish, but i think i get the gist of it. You want to carry traffic for this other company, but on separate networks.

On cisco equipment, the gig interfaces would be in trunk mode (as opposed to access mode, which is for regular access)

Then you define which vlans you want the trunk port to carry (vlan 1 , vlan2 "other company vlan".)

Once that is done you can define any ports on switch A and Switch B for vlan2 and they should see each other (and only each other).

Hope this helps.

Also, let us know how the AT switches are. I haven't heard of anyone using them, but i am curious to know. They make great media converters!
 
Originally posted by Darthkim
Skylab,

Phunball is correct.

If you don't create a trunk port between two switches, (on that gigabit interface), you can't separate the traffic.

I had to read through a couple of times of what you wanted to accomplish, but i think i get the gist of it. You want to carry traffic for this other company, but on separate networks.

On cisco equipment, the gig interfaces would be in trunk mode (as opposed to access mode, which is for regular access)

Then you define which vlans you want the trunk port to carry (vlan 1 , vlan2 "other company vlan".)

Once that is done you can define any ports on switch A and Switch B for vlan2 and they should see each other (and only each other).

Hope this helps.

Also, let us know how the AT switches are. I haven't heard of anyone using them, but i am curious to know. They make great media converters!

thanks. so far the AT switches are great. I have 4 or 5 in various installations and no problems. They give you alot for the money. Its interesting, I see people recommending the dell switches left and right (dell makes good servers so their switches must be good too?) when in reality dell switches are made by c-net in taiwan which makes them no better or worse than any other generic switch. The AT switches are closer to 3com or cisco in quality, at like 1/2 the price.
 
802.1q trunk those 2 VLANs if you only have 1 uplink between the switches.
 
Originally posted by ipconfig /all
Just make sure they dont use VLANs already. Why not create a VPN between the two end points?
Could require extra hardware that they don't want to buy.
 
Originally posted by []wave
Could require extra hardware that they don't want to buy.
If the company that is leasing the exisiting lines doesn't want to deal with VLANs on their network, it might be the only option.
 
agreed

i didn't read this entire thread as it looked like multiple instances of asking questions

he should just make an ENTIRELY new post with discrete and precise requirements of what he wants to accomplish

this thread is confusing lol
 
Back
Top