How to Block communication between two same vlan

[irfan_1505]

I want block to Pc from communicating in the same vlan

[Collin Clark]

Take a look at Private VLANs

http://www.cisco.com/en/US/products/hw/switches/ps700/products_tech_note09186a008013565f.shtml

or Protected Ports

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_46_se/configuration/guide/swtrafc.html#wp1175133

Hope that helps.

[mohammedrafiq]

Mac access list might also do the trick

Regards,

[cisco_lad2004]

PVLAN are great for this purpose, just keep in mind that they area acting as L2..so if you are using SVI then you need ACL on top of PVLAN.

[Danilo Dy]

Depends on you switch model and IOS installed, you can use PVLAN as mentioned by Colin.

Here is the matrix of switches and IOS that supports PVLAN http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a0080094830.shtml

[Jayakrishna Mada]

You can also use Vlan access-lists (VACL).

[irfan_1505]

Hi jamada,

Can you Vacl configuration with an example.

[norman_santana]

Hello, thanks for start conversation, the post from the others budies was very usefull for me.

So I would like to ask if somebody test pvlan with catalyst 35XX or 29xX

I'll be expecting for your comments

Regards

Norman Santana

[Leo Laohoo]

If you checked Danilo's link, you will notice that the 2900XL/3500XL cannot support PVLAN.

http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a0080094830.shtml#topic1

2900XL/3500XL also cannot support VACL.

Hope this helps.