blocking addresses

carl_townshend · ‎03-07-2007

Hi all, is there anything I can do to stop certain pcs on my lan seeing servers, the servers are on the same subnet and cannot be changed? any ideas ?

Amit Singh · ‎03-07-2007

Carl,

Use Private Vlans:

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12225se/3560scg/swpvlan.htm

HTH,

-amit singh

carl_townshend · ‎03-07-2007

Is there any other way I can do this ?

cheers

Carl

Amit Singh · ‎03-07-2007

Carl,

You can use VACLS, vlan ACL's to block the traffic within a single vlan.

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12225se/3560scg/swacl.htm#wp1087276

HTH,Please rate if it does.

-amit singh

carl_townshend · ‎03-07-2007

can you show me how I could control access to some servers by using a map, how would i set that up, the servers are on the same subnet as my users, can this still be done, an example would really help?

cheers

carl_townshend · ‎03-07-2007

This is very good, can i do this on my 2950 switch? can you give me a config example of where I want to block traffic in the same vlan to my servers, ie my servers are in the same subnet as my clients, and in the same subnet, I want to block certain pc's on my lan going to the servers. hope someone can help as this will save me buying more equipment.

cheers