03-04-2004 02:58 PM - edited 03-02-2019 02:02 PM
Is there any way to block traffic on a BVI interface using IP (not mac or any layer 2 method). I am using a 2948G-L3 (which i believe is a special case) with bridge irb. I have a 2950 connected to it using etherchannel and all access layer switches are dlink dumb switches.
Solved! Go to Solution.
03-10-2004 11:58 PM
Hi,
I think it should be possible to apply IP access lists on BVI interfaces if you want to block some IP traffic not to be routed through.
But no way of blocking an IP traffic inside one bridge-group, I'm afraid.
Regards,
Milan
03-10-2004 09:05 AM
I believe there is no other way other than using Layer 2 method....
03-10-2004 11:58 PM
Hi,
I think it should be possible to apply IP access lists on BVI interfaces if you want to block some IP traffic not to be routed through.
But no way of blocking an IP traffic inside one bridge-group, I'm afraid.
Regards,
Milan
03-11-2004 08:26 AM
Note that BVI is Layer 2 only. You may find some ACL for MAC addresses. Have you consider to redesing, spliting the LAN traffic in multiple BVI and using routing protocol to have Layer 3 option for traffic control?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide