Switch Port to Port VPN

[kingofshadows86]

Hi,

I wonder if I can configure port to port VPN on switch 3560, if so is there any documentation for that?

[tprendergast]

I don't believe there is a port-to-port VPN feature on a switch, but you can use Private VLANs:

http://www.cisco.com/en/US/products/hw/switches/ps700/products_tech_note09186a008013565f.shtml

Hope that helps,

Tim

[gatlin007 · Accepted solution]

Not sure I understand the desired functionality.  VPN has many different definitions.  A VPN can be an isolated network (VLAN) or it may mean encryption in the form of IPSEC.  These are just two examples, there are many methods.

If you want two ports to only be able to communicate with each other they can both have membership in the same VLAN that other ports don't participate in.

If these two ports require connectivity to other VLAN's then a dot1q trunk could be used that allows common VLAN's plus a unique VLAN that only they utilize.

There are other techniques such as PVLAN's (Private VLAN's)

If this traffic needs to be encrypted, they 3560 doesn't support encryption.

Chris