Mimic Protected Port with private vlans?

[corey_costello]

Hi, 

I need to isolate ports in a vlan, ala "protected port" but I can't use protected port because it disables the multicast paging feature of the voip set. 

I tried to setup private vlans, but you can't create a router-interface under a private vlan, from what i understand. 

Is there another way to achieve sub-vlan isolation without private vlans or protected port? 

[hashim_bharooc1]

Hi Corey,

Hope you are doing great!!!

You can use Access-list, but then you specify based on IP or MAC address, so all device IP addresses will have to be managed via the ACL.  But has to managed and wiht limited scopes if you do not have too many devices to configure.

https://docs.commscope.com/bundle/fastiron-08090-securityguide/page/GUID-03EF4662-6E2D-4A56-9A1C-6B4...

Hope this helps.

Thanks

Hashim