Business Community > Switches > How to block Vlans from seeing each other on the netowk
< Switches

How to block Vlans from seeing each other on the netowk

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

How to block Vlans from seeing each other on the netowk

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
How to block Vlans from seeing each other on the netowk
How to block Vlans from seeing each other on the netowk
2025-03-10 00:09:49 - last edited 2025-03-10 02:23:31
Model: TL-SG108PE  
Hardware Version: V2
Firmware Version: 1.0.1 Build 20211021 Rel.56865

I have the ER605 Router with no controller. I have successfully setup my Vlans and all traffic is being routed correctly. However How do I ban say Vlan from seeing Vlan 2 etc. I am not sure where this is done. Is it in the router or each switch ? 

 

All of my Vlans have the same subnet so I Am not sure if I have to change the subnet for each vlan. 

 

 

Is this done under Access Control in the firewall ? 

 

 

Also if my main computer is on Vlan 1 and I am running Plex, DNLA Server. If I drop my TVS on Vlan 2 and block Vlan traffic from each other, How do I give Vlan 2 access to say PLESK on Vlan 1 ? A Single application. 

  0      
 
  0      
 
#1
Options
1 Accepted Solution
Re:How to block Vlans from seeing each other on the netowk-Solution
2025-03-10 02:22:32 - last edited 2025-03-10 02:23:31

Hi @johngalt 

Thanks for posting in our business forum.

Same VLAN ID means the same subnet.

Devices in the same subnet will receive the ARP.

Then they discover each other.

 

Set them in different subnets = VLAN, you will not receive the ARP from them and not see them.

The price for not seeing them, if you insist, is to block the ARP, and you will lose connection for LAN and Internet.

There is no workaround for this. Just separate them in different VLAN interfaces.

 

If you use ACL to block VLAN 1 and 2 from accessing each other, there is no way to bypass it due to the rule you've set.

Recommended Solution
  1  
  1  
#3
Options
4 Reply
Re:How to block Vlans from seeing each other on the netowk-Solution
2025-03-10 02:22:32 - last edited 2025-03-10 02:23:31

Hi @johngalt 

Thanks for posting in our business forum.

Same VLAN ID means the same subnet.

Devices in the same subnet will receive the ARP.

Then they discover each other.

 

Set them in different subnets = VLAN, you will not receive the ARP from them and not see them.

The price for not seeing them, if you insist, is to block the ARP, and you will lose connection for LAN and Internet.

There is no workaround for this. Just separate them in different VLAN interfaces.

 

If you use ACL to block VLAN 1 and 2 from accessing each other, there is no way to bypass it due to the rule you've set.

Recommended Solution
  1  
  1  
#3
Options
Re:How to block Vlans from seeing each other on the netowk
2025-03-10 04:21:38
Not sure I follow: So should I add each VLAN in its own subnet ?
  0  
  0  
#4
Options
Re:How to block Vlans from seeing each other on the netowk
2025-03-10 07:20:22

Hi @johngalt 

Thanks for posting in our business forum.

johngalt wrote

Not sure I follow: So should I add each VLAN in its own subnet ?

Something like this:

How to Set Up VLAN Interface on the Omada Router

 

Each subnet means a broadcast area. You want them not to see each other in different VLANs, so separate them.

  0  
  0  
#5
Options
Re:How to block Vlans from seeing each other on the netowk
2025-03-11 02:23:43

  @johngalt  i am not using the omada controller and my switches are switches that can't be controlled in omada.

 

  0  
  0  
#6
Options

Information

Helpful: 0

Views: 418

Replies: 4

About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.