Complete network segregation on a 2960 with a Comcast Business Gateway...

TomParker350 · ‎08-27-2009

What I'm trying to do here is take an office of 40 ports and make it so none of them can talk to each other on the network. They each still need to be able to access the internet but cannot be allowed to tansmit data to, or access each other.

Can this be accomplished with a Catalyst 2960 Switch and a Comcast business class Gateway IP (Modem)? Or would I need a CORE switch or router in between??

yagnesh_tel · ‎08-27-2009

This can be possible using either 'private vlan' or 'protected port' feature. 2960 doesn't seem to be supporting private vlan but you can use protected port.

Refer this for protected port feature:

http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/software/release/12.1_11_ea1/configuration/guide/swtrafc.html#wp1029319

Private VLAN Catalyst Switch Support Matrix:

http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a0080094830.shtml

Mohamed Sobair · ‎08-27-2009

Hi Tom,

The Protected port feature, by configuring (Switchport protected) command on the mentioned interface would achieve your desired objective.

HTH

Mohamed