Switch Security

[lincolnp]

Hi, can anyone pls tell me how to setup security on a Cisco switch so that a router connected to a switch port will only be able to be get out via the default gateway.

Is it possible to use access-lists? How can VLAN's assist since there will be no ports that will be 'common'.

Thanks

Lincoln

[cmarinos]

-add a static route to router

-disable http server on router and switch

-add a access list to vty 0 4 (telnet session) to help with admin access only allowing specific ip's to administer them

-add access list to VLAN on switch

[alain.desnoyers]

How do you add access lists to VLANs on a Catalyst 5500, I know you can add access list to the RSM module but I don't where one can add access list to VLANs on the actual switch

Thanks

\ALain