https://community.cisco.com/t5/network-access-control/broadcast-control-with-sgts-and-microsegmentation/m-p/4641625#M575826 Not exactly. So punted traffic toCPU won't be blocked by SGACLs. But<BR />hardware switched traffic will be blocked by SGACLs.<BR /><BR />**** please remember to rate useful posts<BR /> Thu, 30 Jun 2022 13:48:31 GMT Mohammed al Baqari 2022-06-30T13:48:31Z https://community.cisco.com/t5/network-access-control/broadcast-control-with-sgts-and-microsegmentation/m-p/4641450#M575816 <P>Hi,</P> <P>&nbsp;</P> <P>In a Trustsec environment where devices within the same VLAN are not allowed to communicate, layer two traffic like ARP would be also blocked, right? This approach would allow us to have larger subnets without the caveats of the increase on the broadcast traffic that endpoints would have to process, is that correct?<BR /><BR />Thanks.</P> Thu, 30 Jun 2022 09:37:10 GMT https://community.cisco.com/t5/network-access-control/broadcast-control-with-sgts-and-microsegmentation/m-p/4641450#M575816 Antonio Macia 2022-06-30T09:37:10Z https://community.cisco.com/t5/network-access-control/broadcast-control-with-sgts-and-microsegmentation/m-p/4641625#M575826 Not exactly. So punted traffic toCPU won't be blocked by SGACLs. But<BR />hardware switched traffic will be blocked by SGACLs.<BR /><BR />**** please remember to rate useful posts<BR /> Thu, 30 Jun 2022 13:48:31 GMT https://community.cisco.com/t5/network-access-control/broadcast-control-with-sgts-and-microsegmentation/m-p/4641625#M575826 Mohammed al Baqari 2022-06-30T13:48:31Z https://community.cisco.com/t5/network-access-control/broadcast-control-with-sgts-and-microsegmentation/m-p/4642710#M575884 <P>For traffic destined to the switch itself I understand it will be punted to the CPU, but from the endpoints perspective they won't receive other's ARP traffic if not allowed by the matrix, right?</P> Sat, 02 Jul 2022 06:33:09 GMT https://community.cisco.com/t5/network-access-control/broadcast-control-with-sgts-and-microsegmentation/m-p/4642710#M575884 Antonio Macia 2022-07-02T06:33:09Z https://community.cisco.com/t5/network-access-control/broadcast-control-with-sgts-and-microsegmentation/m-p/4644784#M575949 <P>Traffic not allowed to destination groups by the TrustSec matrix... should not be allowed (or received) by the destination endpoints.</P> Wed, 06 Jul 2022 06:36:17 GMT https://community.cisco.com/t5/network-access-control/broadcast-control-with-sgts-and-microsegmentation/m-p/4644784#M575949 thomas 2022-07-06T06:36:17Z