Thanx Martin

I'll give it a try

bridge 10 protocol vlan-bridge

!

vlan 2

!

int vlan 2

bridge-group 10

!

vlan 3

!

int vlan 3

bridge-group 10

!

This snippet doesn't seem to work for me. At least I couldn't ping host 192.168.0.1 on vlan 2 from 192.168.0.2 on vlan 3.

As far as I understand bridging the bridge has to forward frames from one vlan to another and build a summarized arp table. So far I haven't seen a host from vlan 3.

Any ideas?

I have a similar setup but I want to do the opposite. I have two VLANs on the same subnet but I want to block certain broadcast traffic from one vlan to the other. I currently do this with a patch cable and access lists on the physical ports.

If I bridge the ports using the above commands, can I place an access list on the vlan interface with the same effect? Also, how does briding work if you are running vtp? Is the bridge local to every switch in the domain, only on the VTP domain master, or only on the switches where it is configured?

ougryphon -> you could use private-vlans with communities to achieve this.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_25_see/configuration/guide/swpvlan.html

let me know if this helps!