Isolation Option for Communication Between
SubVLANs
To facilitate communication between subVLANs, by
default, an entry is made in the IP ARP table of the superVLAN that performs a proxy ARP
function. This allows clients on one subVLAN to communicate with clients on another subVLAN.
In certain circumstances, intra-subVLAN communication may not be desired for isolation
reasons.
To prevent normal communication between subVLANs, disable
the automatic addition of the IP ARP entries on the superVLAN using the following
command:
disable subvlan-proxy-arp vlan
[vlan-name | all]Note
The
isolation option works for normal, dynamic, ARP-based client communication.