I need the ability to restrict traffic between 2 LAN segments. I want to do this with dedicated hardware. I acheieved this using a 48 port 3750 switch with ACL's configured (spare hardware at the time), with 2 ports used (one connected to LAN A, one to LAN B). This is a waste of hardware.
I don't need any routing capablity in this device, so I am thinking I will replace it with the smallest (cheapest) switch capable of running ACL's on ports. I'm not sure all CISCO switches can do this ?
I currently apply the restrictions by host-host ip and the rules are not protocol specific. If I wanted to make the rules specific to certain protocols, can ACL's in switches do this ? or would that require a router ?
If the 3750 worked for you, so should the 3560s. If you don't need multiple gig ports nor many ports, there's the 8 port model. A 2960 -L switch might work for you too. Available modules also include 8 port variants; in both 100 or gig models.
Python based Script to BULK Import/Delete devices using Cisco Prime API
Check my Repo on GitHub for all the details ( see below link )
ASR9001 DC chassis doesn't prints a syslog incase voltage for one of the Power Modules goes below certain threshold. Because of this the monitoring of PowerModule for any failure becomes difficult. This may cause outage incase of double fa...
16.6.4 Beta Release for Catalyst Switches
Enterprise Switching Business Unit is happy to announce availability of first Beta release of 16.6.4. This will be the first beta rebuild on the 16.6.4 targeted towards Catalyst 9500/9400/9300/3850/36...