Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

How do I disable Rx on specific ports on Cisco 2960

I would like to prevent specific PC's connected to the Cisco 2960 switch from transmitting, want those machines to Receive network data only. Thinking simplest way is to disable Rx (or would it be Tx from ports perspective?) on port connected to the target PC. How do I do this. Suggestions for a more elegant way to achieve this?

Thanks

2 REPLIES
New Member

Re: How do I disable Rx on specific ports on Cisco 2960

Just use an access-list to block incoming traffic to those PCs.

Re: How do I disable Rx on specific ports on Cisco 2960

You should be able to apply an ACL containing Layer 3 criteria on the 2960's Layer 2 ports. We do this on 2950Ts.

e.g.:

interface FastEthernet0/1

switchport mode access

ip access-group Receive-Only in

ip access-list extended Receive-Only

deny udp any any

deny tcp any any

deny icmp any any

You'd want to permit (i.e.: not deny) IP so that the receiving host could respond to ARP requests, and also allow the switch to learn the host's MAC address (to associate the host with the switch port to which it is connected).

130
Views
0
Helpful
2
Replies