prevent vlan traffic per port or inside vlan

[yann.boulet]

Hi all,

I want to know what is the best way to black traffic inside the same VLAN, this VLAN is a user VLAN, it means that I am talking about access layer.

I wanted to use private vlan, but C2960S doesn't support this feature.

can you advise me another way to prevent any to any traffic in the user vlan, this vlan only have to speak at the Layer 3.

thank you

[Reza Sharifi]

Hi,

You can try using VACL.

Here is the config guide:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/15.0SY/configuration/guide/vlan_acls.html

HTH

[benjammin]

You can use the mac filtering for non-IP traffic and normal access-list for IP traffic.

http://www.cisco.com/en/US/products/hw/switches/ps646/products_configuration_example09186a0080470c39.shtml