Looking for a switch that can do isolation by port

h2009 · 5 Aug 2010 at 16:53

Hi there,

I'm wondering if anyone know of a switch that can do port based client isolation (which can be port selected?).

Thanks

Sp00n · 5 Aug 2010 at 17:03

So you want a managed switch?

h2009 · 5 Aug 2010 at 17:07

Yes - but when I say isolation, I don't mean using vlans, just port isolation.

I.e. much like an AP you can set it to isolation so clients cant see each other.

I'm using Netgear Pro GS724AT's and i cant find the option for this on this switch.

Trifid · 5 Aug 2010 at 17:10

so you want private vlans in isolated mode so they can only get to the gateway?

wij · 5 Aug 2010 at 21:28

Well I think just about any recent Catalyst will support port security, and their AP's all support OSPF as far as I know.

Makhaira · 5 Aug 2010 at 21:36

It's been a long time since I've wandered into a technical thread and thought "wtf?".

wij · 5 Aug 2010 at 21:44

http://www.cisco.com/en/US/docs/swi...ee/configuration/guide/swtrafc.html#wp1029319

That would be a simple way of doing it on a Cisco, no idea for Netgear though as I don't use them.

pVLAN would also be a means to do this, but it sounds like you want something simpler.

#Chri5# · 5 Aug 2010 at 21:53

h2009 said:
Yes - but when I say isolation, I don't mean using vlans, just port isolation.

I.e. much like an AP you can set it to isolation so clients cant see each other.

I'm using Netgear Pro GS724AT's and i cant find the option for this on this switch.

The GS724T is only a Smart Managed switch. If you want to stick with NetGear, look at the GSM7224 which is layer 2 managed and can be configured for Private VLANs.

h2009 · 6 Aug 2010 at 07:14

Hmm. I did say I can't use vlans?!
Everything needs to based on the same ip range and I route tables will not work with what I need.

I actually need port isolation.

Trifid · 6 Aug 2010 at 07:20

h2009 said:
Hmm. I did say I can't use vlans?!
Everything needs to based on the same ip range and I route tables will not work with what I need.

I actually need port isolation.

From what you have asked for you need PVLAN's. Below is a short over view of what they are.

http://www.cisco.com/en/US/tech/tk389/tk814/tk840/tsd_technology_support_sub-protocol_home.html

#Chri5# · 6 Aug 2010 at 07:29

h2009 said:
Hmm. I did say I can't use vlans?!
Everything needs to based on the same ip range and I route tables will not work with what I need.

I actually need port isolation.

Different vendors call it different things

HP call that Protected Ports on the ProCurve 2810.

ftp://downloads.netgear.com/files/GSM72xxPS/7000_SWA_8.0.2_10Mar10.pdf

The private VLAN Group allows network administrator to create groups of users within a VLAN that cannot communicate with members in different groups but only within the same group. There are two modes for the private group. The mode can be either “isolated” or “community.” When in “isolated” mode, the member port in the group cannot forward its egress traffic to any other members in the same group.