Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Adding switch in to production network and isolate traffic on switch

Hi all,

I have to add a switch in production network through  VTP domain. I need to seprate the traffic from each clients.

So scenario is like this -

I have to connect two server on this switch and other ports on this switch is  connected to client end.

So  my concern is what we need to do when we are adding a new switch in  network and second how can we seprate the traffic for each client so  that they can not access each other traffic.

Thanks

Saurabh

  • WAN Routing and Switching
2 REPLIES
VIP Super Bronze

Adding switch in to production network and isolate traffic on sw

Duplicate post

New Member

Adding switch in to production network and isolate traffic on sw

Hi,

Configure the Switch interface connected to Server as a promiscous port.

And rest of the ports that are connected to client as a isolate port.

Promiscuous port communicates with all other PVLAN ports. The promiscuous port is the port that you typically use to communicate with external routers, LocalDirectors, network management devices, backup servers, administrative workstations, and other devices. On some switches, the port to the route module

An isolated port has complete Layer 2 separation from other ports within the same PVLAN. This separation includes broadcasts, and the only exception is the promiscuous port. A privacy grant at the Layer 2 level occurs with the block of outgoing traffic to all isolated ports. Traffic that comes from an isolated port forwards to all promiscuous ports only.

284
Views
0
Helpful
2
Replies