• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 498
  • Last Modified:

Can we restrict output to an interface using MAC filter on Cisco Catalyst 2950

Using switchport port-security we can restrict input to an interface.
I would like to restrict output to an interface. Is that possible?
In fact I have a device connected to the switch interface and I want the device to receive packets from only 2 PCs, nothing else.
This is important to me because the device is being flooded with irrelevant packets and that is affecting its performance.
Thanks in advance for the help.
Regards,
Brian.
0
brianvanschellebeck
Asked:
brianvanschellebeck
2 Solutions
 
lrmooreCommented:
Unfortunately, not on a 2950.
VLAN's might be an option for you. Put these 2 PC's and this one host in their own VLAN. You might need some L3 device to allow these 2 PC's to connect to everything else at the same time. Cisco does have a concept of Private VLANS that would do what you need, but is only supported on higher-end switches and not the 2950.
0
 
Don JohnstonInstructorCommented:
0
 
brianvanschellebeckAuthor Commented:
Can I still do it with VLAN if the two PCs are not directly connected to that switch?
In fact the twp PCs are connected to another 2950 and the two switches are connected together.
Thanks for advising.
Regards,
Brian.
0
Cloud Class® Course: Microsoft Office 2010

This course will introduce you to the interfaces and features of Microsoft Office 2010 Word, Excel, PowerPoint, Outlook, and Access. You will learn about the features that are shared between all products in the Office suite, as well as the new features that are product specific.

 
lrmooreCommented:
Yes, you can use VLAN's as long as the two switches are connected by a trunk port and one is set to VTP server and one is VTP client or transparent.

0
 
btassureCommented:
Do you know if you have an enhanced or a standard image on the 2950s?

If it is enhanced you can use an ACL to block access to one ip from several for example. The 2 or 3 workstations that need access would need to be on static IPs for it to work though.
0
 
lrmooreCommented:
Are you still working on this? Can you close out this question before the cleanup crew gets around to it?
Thanks!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: CompTIA Cloud+

The CompTIA Cloud+ Basic training course will teach you about cloud concepts and models, data storage, networking, and network infrastructure.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now