Hello, I use in a test envirnoment a CISCO Catalyst 3550 and 3 PCs. One PC is connected to the Catalyst through a Trunk, each of the other PCs is configured with an IP address of different class C subnets (PC A: 10.1.1.0 VLAN 2, PC B 10.1.2.0 VLAN3). The "Trunk"-PC has two IP addresses on the Trunk interface ( eth0.2 10.1.1.1 and eth0.3 10.1.2.1). My problem is that PC A can ping to 10.1.1.1 AND 10.1.2.1 even if IP forwarding on the Trunk-PC is disabled (it works as expected that without IP forwarding I can NOT ping to PC B). Is it normal that the eth0.3 answers even if it doesn't belong to that VLAN 2 (in this case I have to use iptables)? Thank you in advance, W. Beck -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.candelatech.com/pipermail/vlan/attachments/20050407/a5c9bcdc/attachment.htm