LAB 2 - Layer 2 Single IP subnet with Multiple vlan’s and rewriting vlan tags .

Layer 2 Single IP with Multiple vlan’s and rewriting vlan tags

As we can see  in below diagram we have used same IP subnet that has span's in multiple vlan’s.Using Palo alto L2 interface mode we can secure traffic between Vlan’s.

Diagram

Interfaces config 

Zone Config.

Vlan Config.

Security Policy 

In below security policy we can see that ping application is allowed to talk from vlan 100 to vlan 200 and vlan 300.

L2 Switch Config

eth0/0 is trunk is trunk interface.

eth0/1 , eth0/2 and eth0/3 is access ports.

Verification

Ping from PC1 (192.168.10.100) To PC2 (192.168.20.100)

Ping from PC2 (192.168.20.100) To PC1 192.168.10.100 failing  

-------------------------------------------------- ---------------END-----------------------------------------------------------------------------