Hi Rogerio,

If I understand that correct, you want that
- A can talk to B,C,D.
- B not to C
- C not to D
- B not to D

The Enterasys B3 unfortunately does not support private vlans, but you can play 
around with the ingress and egress vlans to create kind of pseudo private-vlans.
Something like this may work for you :

Port of Host A :
set port vlan ge.1.1 100 mod
set vlan egress 101 ge.1.1 un
set vlan egress 102 ge.1.1 un
set vlan egress 103 ge.1.1 un

Port of Host B :
set port vlan ge.1.2 101 mod
set vlan egress 100 ge.1.2 untagged

Port of Host C :
set port vlan ge.1.1 102 mod
set vlan egress 100 ge.1.1 untagged

Port of Host D :
set port vlan ge.1.2 103 mod
set vlan egress 100 ge.1.2 untagged

Uplink ports :
set vlan egress 100 ge.1.48 tagged
set vlan egress 101 ge.1.48 tagged
set vlan egress 102 ge.1.48 tagged
set vlan egress 103 ge.1.48 tagged


HTH and kind regards
Dennis



Mit freundlichen Grüßen / Best regards

Dennis Flemmig (Dipl.-Ing.)
Senior System Engineer




CANCOM DIDAS GmbH
Elisabeth-Selbert-Str. 4a<x-apple-data-detectors://0>
40764 Langenfeld<x-apple-data-detectors://0>
Deutschland<x-apple-data-detectors://0>

Phone    +49 2173 5966-470<tel:+49%202173%205966-470>
Fax    +49 2173 5966-610<tel:+49%202173%205966-610>
Mobile    +49 172 5219729<tel:+49%20172%205219729>
[email protected]<mailto:[email protected]>
www.cancom-didas.de<http://www.cancom-didas.de/>



CANCOM DIDAS GmbH
Sitz der Gesellschaft: Langenfeld
AG Düsseldorf HRB 63231, USt-Id Nr.: DE811548338
Geschäftsführer: Dirk Kiefer, Thorsten Eska

Diese E-Mail und alle mitgesendeten Dateien sind vertraulich und ausschließlich 
für den Gebrauch durch den Empfänger bestimmt!
This e-mail and any files transmitted with it are confidential intended solely 
for the use of the addressee!

Von meinem iPhone gesendet

Am 10.09.2014 um 19:13 schrieb "Johannsb" 
<[email protected]<mailto:[email protected]>>:

Hello guys,

I have two switches Enterasys and four computers as below:

switch 1 - Enterasys B3 with:

Computer A in port ge.1.1
Computer B in port ge.1.2

switch 2 - Entreasys B3 with:

Computer C in port ge.1.1
Computer D in port ge.1.2


The two switches are linked by port ge.1.48.

All computers are in same network 10.0.0.X/255.255.255.0.



I need this result:

Among Computer A, B and D: comunication it's permited

Between Computer A and C: comunication it's permited too

But among Computer B, C and D: no comunication it's permited



In ohter words:

If in machine A I type "ping 10.0.0.A" or "ping 10.0.0.B" or "ping 10.0.0.D" or 
"ping 10.0.0.C", the result must to be a answer

If in machine A or B or D, I type "ping 10.0.0.C", the result must to be no 
answer

If in machine C I type "ping 10.0.0.A", the result must to be a answer

If in machine C I type "ping 10.0.0.B" or "ping 10.0.0.D", the result must to 
be no answer



The question:

I tried to create a VLAN for machines A, B e D and other for C, but the result 
it isn't the above.

What I have to type in each switch for get the objective with success?



Tranks,

Rogerio

---
To unsubscribe from enterasys, send email to 
[email protected]<mailto:[email protected]> with the body: unsubscribe enterasys 
[email protected]<mailto:[email protected]>

---
To unsubscribe from enterasys, send email to [email protected] with the body: 
unsubscribe enterasys [email protected]

Reply via email to