Possible to create a PVLAN on a layer 3 switch

[jimontherock]

Hi,

I have a Catalyst 4510 that is my core switch for my network and is performing routing for my various subnets. Is it possible to create a PVLAN so that workstations on the various subnets can only communicate with my servers and out to the Internet and can NOT communicate with each other? The problem that I am running into is that based upon my understanding of private vlans, you need to have the uplink port to the router set to promiscuous mode. However, in my case, I don’t have an uplink as the 4510 handles all switching and routing. I tried to apply promiscuous mode to an SVI but was unable to do so.

Any and all information is appreciated!

Thanks,

Jim

[Steven Clinton]

I do not believe that you need a promiscuous port, it is just common. You can also make the handoff ports to the servers promiscuous and then place the user ports in an isolated vlan.

Otherwise, you could also use vacls to filter at the vlan level



Sent from Cisco Technical Support iPhone App