Best solution for isolate traffic on same vlan

[mostafa.z]

we have servers vlan and secure , how can i isolate treaffic on vlan ?

private vlans ? pv is complexive?

plz other solotion for security and isolate traffic

[Seb Rupik]

Possible solutions discussed earlier today:

https://community.cisco.com/t5/switching/block-traffic-between-users-computers-on-one-vlan/m-p/3882463

[Martin L]

Private Vlans work fine and often.

[alex.perkins1]

Hi Mostafa,

As the thread Seb provided talks about- there are a couple of different options. VACL's would definitely work but to your question about PVLAN's, they're really not that complicated once you understand how they work. Here's a good guide about them: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_52_se/configuration/guide/3560scg/swpvlan.html

[mostafa.z]

tnks,

PVlan is Best solution ?

or there is other solution ??

in DC we configure best solution . wahte is best solution for 100 servers ?

[alex.perkins1]

Hi Mostafa,

There won't be just one best solution. Every environment is different and has different requirements. I would recommend you read through the link that I posted above and also do a bit more research on things like VACL's. It's your responsibility working on the network to come up with the solution that best fits for your environment. Find a couple of good reasons to go with one option over the other and then develop out a plan and implement it. Any of the options available could end up being the "best" one.