Isolation Option for Communication Between
SubVLANs
To facilitate communication between
sub
VLAN (Virtual LAN)s, by default, an entry is made in the IP ARP table of
the superVLAN that performs a proxy ARP function. This allows clients on one subVLAN to
communicate with clients on another subVLAN. In certain circumstances, intra-subVLAN
communication may not be desired for isolation reasons.
To prevent normal communication between subVLANs, disable
the automatic addition of the IP ARP entries on the superVLAN using the following
command:
disable subvlan-proxy-arp vlan
[vlan-name | all]
Note
The
isolation option works for normal, dynamic, ARP-based client communication.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB