I'm trying to build secure backup network, where each server should only be able to send and recieve packet to and from backup server. The servers are spread over a couple of switches and backup server is connected to a separate switch. Have tryed to use protected ports function, mac address functions in a switch but none of this functions are archiving what I want. Which Cisco switches do wee need.
We'll need more details on the topology and the traffic flow requirements. Surely the servers provide services to clients, so they'll need to be able to send packets to clients as well as the backup server.
Each server have dual networkcard one handling normal services and the second one are only for backup from server to backup server. My problem is that if I apply for example new vlan and new IP/net mask, servers will be able to see each other on that network. One option maybe should be that assign new vlan for every server/port but have problem with that because wee have over 70 servers.
Ok, that clears things up. Cisco's Protected Port feature would do what you want if the backup network only consisted of one switch, but if the workstations are spread out over several switches, things get a bit more complex.
Which model switches do you have? The 2950 series for example, despite being layer-2 from a packet forwarding standpoint, supports IP ACLs that would solve your problem here.
We have 3 identical switches configured by someone else and would like to claim some of the Gigabit ports(G1/G2/G3/G4) for use on servers. When we try to change the wiring and configuration, we run in to connectivity issues. Attached is a des...
This is actually a pretty cool feature, i didn't even know it existed until I was looking for a solution to advertise a subnet (prefix in BGP talk), only if a certain condition existed. This is exactly what conditional advertisements does
j ai une question j ai achete un routeur cisco 887VA-k9 , je le configuré avec la configuration ci- dessous
si je le lier avec mon pc portable sur l un de ses ports directement ça marche toute est bien ( la connexion internet + m...