VLAN on ProCurve 1800-24G

[NGFireball]

Hi,

 

I am trying to set up a vlan on a ProCurve 1800-24G and i am really getting lost with it.

 

I have setup a new vlan and added the two ports i would like on that vlan, i have also removed them from the default vlan.

 

Next i have set the PVID of the two ports to the new vlan but i can still ping this from other ports on the switch that are not on the vlan, i thought having it on a separate vlan would not allow it to be pinged, am i missing something?

 

any help would be appreciated.

[AngryTechnician]

Have you enabled ingress filtering on the VLAN ports?

[NGFireball]

no i have not, will this stop all packets that dont have my new vlan id?

[AngryTechnician]

I believe so. IIRC, the 1800 has a bit of an odd VLAN implementation; without ingress filtering turned on, any packets not expressly tagged as part of a VLAN (i.e. in the default VLAN) will still be accepted on tagged ports. This is not the way it works on most other switches.

[NGFireball]

Ok,

 

I have gone to my port and enabled ingress filtering, set the packet to mode to tagged only with new vlan id, i can still however ping it from other ports.

[AngryTechnician]

Do you have other switches/routers plugged into the switch or is it standalone?

[NGFireball]

Hi,

 

Thanks for all your help, i finally got it working.

 

Setting i used are as follows: Ports to be Vlaned: VLAN Aware, Ingress Filtered, Packet Type All PVID (New VLAN ID)

 

I removed the Vlan ports from default Vlan so they only belong to new vlan and all is working as i want.

 

Thanks again for your help.