TRIBHUVAN UNIVERSITY
INSTITUTE OF ENGINEERING
THAPATHALI CAMPUS
A Lab Report
On
VLAN Setup and Inter-VLAN Routing
Submitted By:
Ramesh Kathayat(THA078BCT034)
Submitted To:
Department of Electronics and Computer Engineering
Thapathali Campus
Kathmandu, Nepal
August, 2025
LAB 8: VLAN Setup and Inter-VLAN Routing
OBJECTIVE
• To configure and assign VLANs to switch ports for segmenting network traffic.
• To implement Inter-VLAN routing through a router-on-a-stick configuration us-
ing sub-interfaces.
• To validate successful communication between hosts belonging to different VLANs.
• To enforce network security policies by applying Access Control Lists (ACLs) on
the router.
THEORY
A VLAN (Virtual Local Area Network) allows the logical segmentation of a physical
network into multiple broadcast domains. Devices within the same VLAN can commu-
nicate directly, even if connected to different switches, provided VLANs are properly
configured and trunk links are established. VLANs help enhance security, optimize
network traffic, and improve overall manageability.
Since VLANs isolate traffic by default, Inter-VLAN communication requires a routing
solution. The router-on-a-stick approach is a cost-effective method, where a single
physical router interface is configured with multiple sub-interfaces—each assigned to a
specific VLAN and IP subnet. This enables routing between VLANs through a single
trunk link.
To further refine access between VLANs or specific devices, Access Control Lists
(ACLs) are implemented. ACLs define rules that either permit or deny traffic based on
source or destination IP addresses, port numbers, or protocol types. Combined with
VLANs and routing, ACLs help enforce granular network security and traffic control.
IMPLEMENTATION AND RESULTS
1. VLAN Configuration on Switch
The switch was configured to create multiple VLANs and assign ports to each VLAN.
This segmented the network into logical groups.
2. Network Topology and VLAN Setup
The following topology shows how devices were connected across VLANs. The router
is configured to handle Inter-VLAN routing.
3.Inter-VLAN Ping Test
Ping tests were conducted between devices in different VLANs to verify successful
communication through router-on-a-stick configuration.
DISCUSSION
In this lab, VLAN technology was used to logically separate network segments, im-
proving organization and traffic control. The router-on-a-stick technique facilitated
inter-VLAN communication by assigning multiple sub-interfaces on a single physi- cal
router port, each linked to a distinct VLAN. As expected, devices within the same
VLAN communicated seamlessly, while devices in different VLANs were able to ex-
change data after enabling routing. This method enhances both security and network
management, especially in complex environments. Additionally, the use of access con-
trol lists provides further capability to regulate and filter traffic between VLANs when
necessary.
CONCLUSION
VLANs are an effective means to segment a network logically, thereby increasing per-
formance and security by limiting broadcast domains. Implementing Inter-VLAN rout-
ing through the router-on-a-stick approach enables devices across VLANs to commu-
nicate without needing multiple physical interfaces. The lab successfully demonstrated
correct VLAN configuration and verified inter-VLAN connectivity. This foundational
knowledge supports building scalable, well-organized, and secure network infrastruc-
tures.
