Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Blocking ip traffic on BVI interfaces

Is there any way to block traffic on a BVI interface using IP (not mac or any layer 2 method). I am using a 2948G-L3 (which i believe is a special case) with bridge irb. I have a 2950 connected to it using etherchannel and all access layer switches are dlink dumb switches.

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Blocking ip traffic on BVI interfaces

Hi,

I think it should be possible to apply IP access lists on BVI interfaces if you want to block some IP traffic not to be routed through.

But no way of blocking an IP traffic inside one bridge-group, I'm afraid.

Regards,

Milan

3 REPLIES
New Member

Re: Blocking ip traffic on BVI interfaces

I believe there is no other way other than using Layer 2 method....

Re: Blocking ip traffic on BVI interfaces

Hi,

I think it should be possible to apply IP access lists on BVI interfaces if you want to block some IP traffic not to be routed through.

But no way of blocking an IP traffic inside one bridge-group, I'm afraid.

Regards,

Milan

New Member

Re: Blocking ip traffic on BVI interfaces

Note that BVI is Layer 2 only. You may find some ACL for MAC addresses. Have you consider to redesing, spliting the LAN traffic in multiple BVI and using routing protocol to have Layer 3 option for traffic control?

118
Views
0
Helpful
3
Replies
CreatePlease to create content