Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

How to create a fake VLAN

All, can you tell me how to create a fake VLAN, that if a end device was plugged into the switch, it wouldnt go anywhere?

3 REPLIES

Re: How to create a fake VLAN

Create a VLAN but do not create any corresponding SVI for that VLAN.

THis way the VLANS will not have any gateway and will not work

Narayan

Community Member

Re: How to create a fake VLAN

If you are worried about someone plugging into an unused port on a switch and gaining access to your network, would it not be better, safer and more manageable to shut the interface? However, physical access is access. They can unplug any in use port and access the network. To do it differently, you would need a NAC.

Cisco Employee

Re: How to create a fake VLAN

I agree with Narayan on this to create a vlan and donot create a corresponding SVI. Also, make sure that you donot assign any ports to Vlan1, which is default vlan and all the ports belong to it.

Please use the link for Vlan security and more info on this:

http://www.cisco.com/en/US/products/hw/switches/ps708/products_white_paper09186a008013159f.shtml

HTH,Please rate it it does.

-amit singh

399
Views
0
Helpful
3
Replies
CreatePlease to create content