cancel
Showing results for 
Search instead for 
Did you mean: 

Mimic Protected Port with private vlans?

corey_costello
New Contributor III

Hi, 

I need to isolate ports in a vlan, ala "protected port" but I can't use protected port because it disables the multicast paging feature of the voip set. 

I tried to setup private vlans, but you can't create a router-interface under a private vlan, from what i understand. 

Is there another way to achieve sub-vlan isolation without private vlans or protected port? 

1 REPLY 1

hashim_bharooc1
Contributor III

Hi Corey,

Hope you are doing great!!!

You can use Access-list, but then you specify based on IP or MAC address, so all device IP addresses will have to be managed via the ACL.  But has to managed and wiht limited scopes if you do not have too many devices to configure.

https://docs.commscope.com/bundle/fastiron-08090-securityguide/page/GUID-03EF4662-6E2D-4A56-9A1C-6B4...

Hope this helps.

Thanks

Hashim