topic Re: Mimic Protected Port with private vlans? in ICX Switches

Mimic Protected Port with private vlans?

corey_costello — Sat, 23 Oct 2021 05:42:50 GMT

Hi,

I need to isolate ports in a vlan, ala "protected port" but I can't use protected port because it disables the multicast paging feature of the voip set.

I tried to setup private vlans, but you can't create a router-interface under a private vlan, from what i understand.

Is there another way to achieve sub-vlan isolation without private vlans or protected port?

Re: Mimic Protected Port with private vlans?

hashim_bharooc1 — Sat, 23 Oct 2021 17:38:39 GMT

Hi Corey,

Hope you are doing great!!!

You can use Access-list, but then you specify based on IP or MAC address, so all device IP addresses will have to be managed via the ACL. But has to managed and wiht limited scopes if you do not have too many devices to configure.

https://docs.commscope.com/bundle/fastiron-08090-securityguide/page/GUID-03EF4662-6E2D-4A56-9A1C-6B415BF56F7B.html

Hope this helps.

Thanks

Hashim