Deny Switch Ports on 2924xl

[jmlady]

Hey all, i'm trying to deny ports 17-24 on my cisco 24-port switch from ports 2-16 and permit it to port 1...

1 = Internet Connection
2-16 = LAN
17-24 = Computer Repairs

I want to disable ports 17-24 from accessing all the ports but the internet port (1) so that in case a computer has a virus or worm on it, it doesn't infect the internal network, but allows me the leeway to access the internet to retrieve software updates, etc.

Any suggestions? Thanks in advance.

 

[ADB100]

Not really possible with a 2924XL. You could set up separate VLAN's but you would need a Layer-3 device to allow connectivity between the VLAN's. The 2924XL is a Layer-2 device only and has no filtering features.
What is your internet connection? If its a VLAN (802.1q) capable firewall or router then there may be something you could set up?

Andy