1

I kinda forgot about CISCO in general, it had been quite a while since I last touched packet tracer. Now I'm on the PRE-deployment phase of a network at work. Long story short.

-I made 2 VLAN on CISCO Router and Switch, trunking, encapsulation, all good and working

Vlan 5 Student

Vlan 76 Office

At first, with just the Switch there was no talking beetwen VLAN, but i had to add a router so VLAN could talk to the internet and server for DHCP, DNS, and Group Policy.

in order to limit talking between VLANs at all, I created some Standards ACL. All good, each VLAN can talk to the internet and server, BUT NO the other VLAN.

But now I face another issue. I DONT WANT STUDENTS talking to each other on the same VLAN, how can I limit talking within the same VLAN

Network topology

Daniel Cruz
  • 11
  • 1

1 Answers1

0

The feature you're looking for is called Protected Ports in Cisco's terms. You have to add switchport protected interface configuration mode command on your switch Ethernet interfaces that should not be allowed to talk to each other. You can apply this command to a port range if needed. The documentation for it this feature is available i.e. here.

Peter Zhabin
  • 2,696
  • 9
  • 10