Isolate specific ports on 3500

[Mikecl]

I have a 3500 switch running as a client in a vtp domain with a trunk linking to a 4506. I would like to replace some hubs onto the switch but I need to segment 2 or 3 ports so they do not communucate wirh aything other than the ports I want.

Any ideas?

 

[ADB100]

Just add another VLAN to the 3550 (or to the VTP domain), don't allow it on any trunks and don't create a Layer-3 interface for it on the 3550. That way it will be an isolated Layer-2 VLAN.

vlan 999
name Layer-2-Only

interface FastEthernet0/1
switchport mode access
switchport access vlan 999

etc.


Andy

 

[Mikecl]

Thanks for that, I wans'nt sure if it was best to use protected ports or there was a recommended way of isolating ports?