Cisco 2950, Private VLANs & Protected Interfaces

[randal]

Hey everyone,

I am looking at deploying some cisco 2950C-24s into a hotel. Each port will be protected from the others by having "switchport protected" on each port. This will work fine.

Issue is that they sometimes have conferences, where multiple ports will need to be able to talk to eachother, but not to the rest of the ports. In this case, is it possible to unprotect the individual ports, put the individual ports into a new VLAN, and then "switchport protected" the VLAN interface? I don't know if this can be done, and don't have a switch nearby to test on.

Thanks!

Randal Kohutek

[Prashanth Krishnappa]

You cannot have a VLAN interface in protected mode

[randal]

However, creating the new VLAN should remove the ability of the other protected ports to see that VLANs traffic because it creates a new broadcast domain, yes the ports inside the VLAN can see eachother, but not the external protected ports, correct?

Thanks,

Randal

[Prashanth Krishnappa · Accepted solution]

Correct