cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
341
Views
0
Helpful
3
Replies

Blocking ip traffic on BVI interfaces

tijojose
Level 1
Level 1

Is there any way to block traffic on a BVI interface using IP (not mac or any layer 2 method). I am using a 2948G-L3 (which i believe is a special case) with bridge irb. I have a 2950 connected to it using etherchannel and all access layer switches are dlink dumb switches.

1 Accepted Solution

Accepted Solutions

milan.kulik
Level 10
Level 10

Hi,

I think it should be possible to apply IP access lists on BVI interfaces if you want to block some IP traffic not to be routed through.

But no way of blocking an IP traffic inside one bridge-group, I'm afraid.

Regards,

Milan

View solution in original post

3 Replies 3

benhur.p
Level 1
Level 1

I believe there is no other way other than using Layer 2 method....

milan.kulik
Level 10
Level 10

Hi,

I think it should be possible to apply IP access lists on BVI interfaces if you want to block some IP traffic not to be routed through.

But no way of blocking an IP traffic inside one bridge-group, I'm afraid.

Regards,

Milan

Note that BVI is Layer 2 only. You may find some ACL for MAC addresses. Have you consider to redesing, spliting the LAN traffic in multiple BVI and using routing protocol to have Layer 3 option for traffic control?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: