The only problem I see with Access lists on the router is the ports having to be in the same VLAN. This will allow them to see each other without going through the router. If the ports do not need to see each other why the need to be in the same VLAN, you could try put the ports in separate VLANS 41-45 and then use ACL at L3.
Michael -----Original Message----- From: John Brandis [mailto:[EMAIL PROTECTED]] Sent: 23 July 2002 08:46 AM To: [EMAIL PROTECTED] Subject: RE: How to keep multiple switch ports on the same VLAN from [7:49424] you thought about access lists on your router that will be doing the routing ? Some one else may be able to offer a better solution than this, I hope so at least. I would also like to know if there is a better way. John -----Original Message----- From: Don Claybrook [mailto:[EMAIL PROTECTED]] Sent: Tuesday, 23 July 2002 8:17 AM To: [EMAIL PROTECTED] Subject: How to keep multiple switch ports on the same VLAN from [7:49410] I have a customer who needs to have several ports on a 2924XL-EN in the same VLAN. The customer does not want these ports to be able to communicate with one another, but would like all of them to be able to go to/through another port. E.g., ports 1 to 5 would be on VLAN 50, they'd all be able to access port 6, on VLAN 60, but not each other. I did find something on CCO about Private VLANs, but I see that the 2924 is not on the list of hardware that supports PVLAN's. Does anyone know of a way to accomplish this segregation within the same VLAN, short of PVLAN's? Any help is much appreciated. Thanks, Don Claybrook ********************************************************************** visit http://www.solution6.com visit http://www.eccountancy.com - everything for accountants. UK Customers - http://www.solution6.co.uk ********************************************************************* This email message (and attachments) may contain information that is confidential to Solution 6. If you are not the intended recipient you cannot use, distribute or copy the message or attachments. In such a case, please notify the sender by return email immediately and erase all copies of the message and attachments. Opinions, conclusions and other information in this message and attachments that do not relate to the official business of Solution 6 are neither given nor endorsed by it. ********************************************************************* Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=49427&t=49427 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]