<div>
That was my best guess and I can see where to setup simple ACLs in the GUI, but cannot see how to assign them to a VLAN. &nbsp;There is a binding option that looks like it is for assigning ACLs to ports. &nbsp;Is that the best or only method?
</div>


That was my best guess and I can see where to setup simple ACLs in the GUI, but cannot see how to assign them to a VLAN.  There is a binding option that looks like it is for assigning ACLs to ports.  Is that the best or only method?

<div>
Can you telnet into it or connect through the console?
</div>


Can you telnet into it or connect through the console?

<div>
Yes. &nbsp;I even got into some limited CLI mode to assign IPs to the VLANs.
</div>


Yes.  I even got into some limited CLI mode to assign IPs to the VLANs.

<div>
it seems that these small business devices do not support applying a access-list to a VLAN.
</div>


it seems that these small business devices do not support applying a access-list to a VLAN.

<div>
<div class="content wysiwyg-content">
I have a small business switch, SF300 series from Cisco, and I would like to set it up with 2 VLANs that should have no interaction. &nbsp;I will treat them as if they were 2 physically separate switches. &nbsp;There will be a few PCs and servers on each VLAN and each will connect to its own router/firewall. &nbsp;By default the layer3 switch wants to route all IP traffic between the 2 VLANs, what is the most straightforward way to stop all interVLAN traffic? &nbsp;Thanks.
</div>
</div>


I have a small business switch, SF300 series from Cisco, and I would like to set it up with 2 VLANs that should have no interaction.  I will treat them as if they were 2 physically separate switches.  There will be a few PCs and servers on each VLAN and each will connect to its own router/firewall.  By default the layer3 switch wants to route all IP traffic between the 2 VLANs, what is the most straightforward way to stop all interVLAN traffic?  Thanks.

VLAN traffic on a simple layer3 cisco switch

Network design and methodology, also known as network architecture, is the design of a communication network. It is a framework for the specification of a network's physical components and their functional organization and configuration, its operational principles and procedures, as well as data formats used in its operation. In telecommunication, the specification of a network architecture may also include a detailed description of products and services delivered via a communications network, as well as detailed rate and billing structures under which services are compensated.

Network Architecture

A switch is a device that filters and forwards packets of data between LAN segments. Switches operate at the data link layer or the network layer of the Open Systems Interconnection (OSI) Reference Model and therefore support any packet protocol. LANs that use switches to join segments are called switched LANs or, in the case of Ethernet networks, switched Ethernet LANs. A hub is a connection point for devices in a network. Hubs are commonly used to connect segments of a LAN. A hub contains multiple ports; when a packet arrives at one port, it is copied to the other ports so that all segments of the LAN can see all packets.