Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

Is it possible to split a Network into 2 parts? Example there are a 192.168.100.129/26 Network i want to split one Address, the last one for example, to a diffrent vlan. So can i create IP based VLANs? Is it possible or i need a router for this function?

Something like

vlan1: 192.168.100.130 - 192.168.100.190 on port 1 & 2 
vlan2: 192.168.100.130 - 192.168.100.189 on port 1 
vlan3: 192.168.100.190 on port 2

Any suggestion?

Regards Rene

share|improve this question

2 Answers

up vote 2 down vote accepted

You can't really split off the subnet like you're thinking without creating two new subnets of 192.168.100.128/27 and 192.168.100.160/27

What you may be looking for is an ACL on the ports?

share|improve this answer
I think i did not need vlan but a ACL that allow only Address 192.168.100.190 on Port 3, Port 1 deliver the IPs and Port 2 can access the wohle IP Range. – kockiren Mar 24 '11 at 12:46
Yes, you need an ACL. Something like: allow 192.168.100.190, deny any. – Hyppy Mar 24 '11 at 12:50
So i access to Port 3 with "int fa0/3" but i can only set ip address and ip igmp is'nt ACL supported on Catalyst 2950? – kockiren Mar 24 '11 at 13:56
The configuration guide for 2950 ACLs is available here: cisco.com/en/US/docs/switches/lan/catalyst2950/software/release/… – Hyppy Mar 24 '11 at 14:00
thx. I setting up an ACL with number 101 but how can i assign this ACL to Port 3? I can't find anything in the Docu?! – kockiren Mar 24 '11 at 14:44
show 4 more comments
up vote 1 down vote

You're misunderstanding VLAN's and subnetting.

A port can only belong to one VLAN unless it's a trunk port.

You can't assign the same ip address range to each VLAN. Well, you can but network communication won't operate properly as you won't be able to route traffic from one VLAN to another as they're all in the same subnet.

share|improve this answer
I have 3 Ports, one came from Router with 192.168.100.129/26 Addresses to Port1, on Port 2 there are a firewall they use Addresses .130-.189 and to Port3 there are only .190 Address. So i did not need a vlan but a restriction that Port 3 only Access with .190 Source-IP. It is possible? – kockiren Mar 24 '11 at 12:45

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.