Thanks Edison,

But, as the first line of the document says "Use the switchport protected interface configuration command to isolate unicast, multicast, and broadcast traffic at Layer 2 from other protected ports on the same switch.", this switchport will be isolated from other protected ports of the same switch locally. Doesn't that mean that the PC in question will be able to communicate with the device of its vlan but on different switch? Help me understanding it if I'm wrong somewhere?

--gaurav

interfaces with protected enabled, won't be able to communicate with other protected enabled interfaces.

protected enabled interfaces are able to communicate to non-protected interfaces.

If I recall correctly, this information isn't carry from switch to switch, for that you need Private Vlans.

__

Edison.

But as per "Private VLAN Catalyst Switch Support Matrix" document 2950 switch does not support pvlan-isolated/community vlans. Is there any other way out? I want just one PC to get isolated.

--gaurav

The only option you have is with switchport protected, no other choices are provided with the 2950.

__

Edison.