PC to PC blocking (in same VLAN) in Cisco C2960X switch

[preetpeethambaran]

Hi,

I need to block PC to PC connectivity in the same vlan in Cisco C2960X series switch. Is there any way to block intra Vlan traffic in 2960X series switches, because as per my knowledge Private VLAN is not supported in this switches models.

[Julio E. Moisa]

Hi

The only thing on mind is using ACL on the access port, I have never made that but it could work.  The ports working as layer 2 can be configured to have an ACL in.

Hope it is useful.

:-)

[preetpeethambaran]

Hi,

switchport protected worked, but after applying switchport protected, Data and Voice traffic got disconnected between Client 2 Client PC.

Is there any way to block only data traffic between PC to PC and  allow voice traffic.

[paul driver]

Hello

That is correct it will block all communication with on between host that have this feature applied

Just prohibiting specific to data traffic would involve access-list (racal) on the l3 switch routed interface of the vlan this I believe already suggested by Julio  in some degree

res

paul

[Predrag Jovic]

If VLAN maps are supported, that would, most likely, be the best way to do implement blocking inter VLAN traffic.

VLAN Map Configuration Guidelines

[paul driver]

Hello

PC to PC connectivity in the same vlan

Host 1- 2
int x/x
Switchport protected

This will negate communication between the hosts in the same vlan

res

Paul

[Predrag Jovic]

Depending on feature set VLAN maps may be supported (not supported on devices with LAN base feature set). If supported, it would be the most flexible way to control inter VLAN traffic.