Ok here is the scoop. I have a catalyst 6509 and prob about 20 vlans created on my 10.5.x.x network I would like to prevent all the other vlans to access vlan 101 --- however i still need to be able to get out to the internet--- all of my catalyst 2950's come into this one 6509. I would also like to limit only one certain mac address on a port on a 2950 I do not know how to do this either... Any advice would be greatly appreciated.