Isolation Option for Communication Between SubVLANs

To facilitate communication between subVLANs, by default, an entry is made in the IP ARP table of the superVLAN that performs a proxy ARP function. This allows clients on one subVLAN to communicate with clients on another subVLAN. In certain circumstances, intra-subVLAN communication may not be desired for isolation reasons.
To prevent normal communication between subVLANs, disable the automatic addition of the IP ARP entries on the superVLAN using the following command:
disable subvlan-proxy-arp vlan [vlan-name | all]


The isolation option works for normal, dynamic, ARP-based client communication.