I'm looking to implement Private VLANs in a network consisting of multiple 48-port 2960 switches that are connected to a 4500 series switch via fiber. After reviewing the info in the PVLAN switch support matrix (http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a0080094830.shtml), I see that the 4500 will support Isolated PVLANs and the 2960 will provide only PVLAN edge. According to the document, PVLAN edge has only local significance to the switch, in that the ports on a particular switch wouldn't be able to see one another, but would be able to see ports on other switches. If I put the ports on the 2960s into PVLANs, they should be isolated from each other...If I put each of the ports on the 4500 that the 2960s trunk into in their own VLANs, shouldn't that keep every port on every switch isolated from the others? I hope that made sense, I've just been staring at the notes on this and trying to think of a way to make this equipment work to keep everything isolated.