Controling traffic within the Guest vlan

[m-mneimneh]

Hi all,

• Setup: lab envt that includes a Cisco ACS 5.3, a 2960 switch and a couple of host devices;
• Scenario: host devices fail to authenticate on Cisco ACS, and are redirected to a Guest vlan/zone;
• Objective: prevent host devices from seeing each other once in the guest zone.

How can this be achieved?

Thank you,

-Mohamad.

Is there a way for Cisco ACS to push/assign an isolated   private VLAN to the switch to prevent the 2 devices from talking to each  other?

[Jatin Katyal]

I think this is what we can try;

Switch(config)# vlan 101
Switch(config-vlan)# private-vlan isolated

Where 101 is your guest vlan.

http://packetlife.net/blog/2010/aug/30/basic-private-vlan-configuration/

Regards,

Jatin