Access Control Lists

sivnet · 06-12-2007, 12:08 PM

Hello all. I am trying to access a server on a different vlan, and was wondering how to configure it so i could have access to it as if it was on my own vlan. I think i can do it through access control lists, but i do not know how. Also i am on a different switch than the one with the vlans (the switches are connected). Any ideas?

SirNtwrk · 06-12-2007, 03:26 PM

Two vlans will have two different IP ranges, so you will need some kind of routing to access that other vlan. This could mean and external router or, if your switch supports it, a built in engine that can automatically route between the vlans (this is called layer 3 switching.)

For example, if your computer is on the 192.168.0.0/24 network and the other computer is on 192.168.1.0/24, then packets destine for the other machine must pass through a gateway address (usually the vlan 0 "interface" address) and be routed to the other network. Once this is done once (following any ACL rules that may be in place), some switches can immediately pass from one hardware address to another on the same switch.

Vlans that span multiple switches require some kind of vlan trunking protocol to pass information from one switch to the next through an uplinked port that is trunked to carry information from all or some of the vlans.

I guess my point is that ACL entries may be required or may need to be altered, but router rules are not the only pieces to that puzzle. You will need to have some kind of routing engine (either built into the switch or external) to connect from one network to another whether you are talking about vlans or separate switches.

If you have any specific questions related to the hardware you are using, I would be happy to try to answer as many questions as I can but I have to admit that I do not get on this site very often.

sivnet · 06-13-2007, 07:12 AM

I do have a l3 switch, with the configured vlans, just my ability as a network pro are pro -less i am still learning. Now the vlans are only on 1 switch, that is directly connected to another switch that i am on. They are not stacked or anything. From here i am clueless. I am just going to do more homework b4 i get much more into this. What hurts me most is i am training for ccna and this job site uses netgear. Yes almost the same, but radically different. Another huge thing i have to worry about is security. The vlan i want to access would be our public addresses while we are on a private address. So i need to know more about ssl. Since that is what we wish to use. Thank you

06-12-2007, 12:08 PM	#1 (permalink)
sivnet Registered User Join Date: Apr 2007 Posts: 22 OS: XP	Access Control Lists Hello all. I am trying to access a server on a different vlan, and was wondering how to configure it so i could have access to it as if it was on my own vlan. I think i can do it through access control lists, but i do not know how. Also i am on a different switch than the one with the vlans (the switches are connected). Any ideas?

06-12-2007, 03:26 PM	#2 (permalink)
SirNtwrk Registered User Join Date: Aug 2005 Posts: 26 OS: Win XP SP2	Re: Access Control Lists Two vlans will have two different IP ranges, so you will need some kind of routing to access that other vlan. This could mean and external router or, if your switch supports it, a built in engine that can automatically route between the vlans (this is called layer 3 switching.) For example, if your computer is on the 192.168.0.0/24 network and the other computer is on 192.168.1.0/24, then packets destine for the other machine must pass through a gateway address (usually the vlan 0 "interface" address) and be routed to the other network. Once this is done once (following any ACL rules that may be in place), some switches can immediately pass from one hardware address to another on the same switch. Vlans that span multiple switches require some kind of vlan trunking protocol to pass information from one switch to the next through an uplinked port that is trunked to carry information from all or some of the vlans. I guess my point is that ACL entries may be required or may need to be altered, but router rules are not the only pieces to that puzzle. You will need to have some kind of routing engine (either built into the switch or external) to connect from one network to another whether you are talking about vlans or separate switches. If you have any specific questions related to the hardware you are using, I would be happy to try to answer as many questions as I can but I have to admit that I do not get on this site very often.

06-13-2007, 07:12 AM	#3 (permalink)
sivnet Registered User Join Date: Apr 2007 Posts: 22 OS: XP	Re: Access Control Lists I do have a l3 switch, with the configured vlans, just my ability as a network pro are pro -less i am still learning. Now the vlans are only on 1 switch, that is directly connected to another switch that i am on. They are not stacked or anything. From here i am clueless. I am just going to do more homework b4 i get much more into this. What hurts me most is i am training for ccna and this job site uses netgear. Yes almost the same, but radically different. Another huge thing i have to worry about is security. The vlan i want to access would be our public addresses while we are on a private address. So i need to know more about ssl. Since that is what we wish to use. Thank you