Home > IT Answers > Networking > Can you be annonymous on a guest VLAN?
Lukesacramento
30 pts.
0
Q:
Can you be annonymous on a guest VLAN?
Network, VLAN, Security, Switches, Routing and switching, Guest VLAN
We have a network with multiple Vlans seperating departments etc. We have a guest Vlan for people to use that need access to the internet.

We need to find a way of stopping the guest users from being able to 'see' each other within the guest Vlan.

I can only think of seperating each user into their own Vlan but this is not possible due to locations etc.

So is there a technique of keeping systems seperate but within the same Vlan (e.g you cant ping the other machines, cant brows to the other machines).

Hard question I know but maybe someone will have some ideas.

Thanks
ASKED: Jun 19 2009  2:29 PM GMT
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
RELATED QUESTIONS
0
BlankReg
11270 pts.
0
A:
 RATE THIS ANSWER
+2
Click to Vote:
  •   2
  •  0
  • AddThis Social Bookmark Button
Other people have also had this issue, so there is now something called a Private VLAN, where you can only 'see' one uplink port, which is usually the gateway. The member ports can not 'see' each other. This achieves exactly what you are wanting.

It is supported by several manufacturers equipment, you just need to see if it is supported on yours :-)

For configuring this on a Cisco 3750, please have a look at the following link http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_25_see/configuration/guide/swpvlan.html

Hope this helps.
Last Answered: Jun 19 2009  3:56 PM GMT by BlankReg   11270 pts.
  •   
0
0
RSS - Discussions Help
Discuss This Answer:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Lukesacramento   30 pts.  |   Jun 19 2009  3:46PM GMT

Genius, I am using 3com switches and I have a feeling they have a setting called ‘Private Ports’ and your suggestion is exactly that. Thanks a lot for the help.

 
0