Please advise on the following question:
With 2 Cisco 2960G switches connected as in the diagram:
STP is not used.
How could the switches be configured in such a way that all the traffic HOST<->SERVER
will go like HOST->SW1->SW2->SW1->SERVER
as in the picture, but not HOST->SW1->SERVER
.
Is there a way to block "internal" ports on SW1?
Best Answer
To meet this requirement, you can configure switch ports as protected ports (also referred to as private VLAN edge ports). Protected ports do not forward any traffic to protected ports on the same switch
so configure port attached to host and server as protected port
. This means that all traffic passing between protected ports be forwarded through a Layer 3 device. so that justconfigure vlan 24 as a interface vlan on SW2
NOTE Protected ports can forward any type of traffic to nonprotected ports, and they forward as usual to all ports on other switches. Dynamically learnt addresses are not retained if the switch is reloaded.