ProSafe M4100 and M7100 Managed Switches

In following example, PC 1 and PC 2 can access the Internet as usual, but PC 1 cannot see the traffic that is generated by PC 2, that is, no traffic is forwarded between PC 1 and PC 2.

Internet

10.100.5.34

Layer 2 switch

192.168.1.252192.168.1.252

PC 2

PC 1

192.168.1.192.168.1.

Figure 28. Protected ports

CLI: Configure a Protected Port to Isolate Ports on the Switch

1.Create one VLAN 192 including PC 1 and PC 2.

(Netgear Switch) #vlan database (Netgear Switch) #vlan 192 (Netgear Switch) #vlan routing 192 (Netgear Switch) #exit

(Netgear Switch) #configure

(Netgear Switch) (Config)#interface 1/0/23 (Netgear Switch) (Interface 1/0/23)#vlan pvid 192

(Netgear Switch) (Interface 1/0/23)#vlan participation include 192 (Netgear Switch) (Interface 1/0/23)#exit

(Netgear Switch) (Config)#interface 1/0/24 (Netgear Switch) (Interface 1/0/24)#vlan pvid 192

(Netgear Switch) (Interface 1/0/24)#vlan participation include 192 (Netgear Switch) (Interface 1/0/24)#exit

(Netgear Switch) (Interface-vlan 192)#interface vlan 192 (Netgear Switch) (Interface-vlan 192)#routing

(Netgear Switch) (Interface-vlan 192)#ip address 192.168.1.254 255.255.255.0 (Netgear Switch) (Interface-vlan 192)#exit

274 Chapter 15. Security Management

Page 274
Image 274
NETGEAR M7100, M4100 manual Create one Vlan 192 including PC 1 and PC, Protected ports