topic Layer 2 Port Isolation in Switches, Hubs, and Modems

Layer 2 Port Isolation

Tom Spappola — Mon, 07 Mar 2011 10:18:43 GMT

Hi all !

I would like to know if I can get Layer 2 port isolation on procurve switches.
I would like to have

ports 1-10 to talk to port 11 with full layer 2
but not seeing each others.

Is this possibile ?

Is available an example for

2510
26xx series
28xx series

What procurve switch can do this ?

Regads
Tom

Re: Layer 2 Port Isolation

Ian Vaughan — Tue, 08 Mar 2011 23:22:22 GMT

Hi Tom,
take a look at the "filter by source-port"
http://ftp.hp.com/pub/networking/software/Security-Oct2005-59906024-Chap10-Traf-Security-Filts.pdf

This functionality on the 2600's allows you to drop inbound traffic at a source port if it is destined for another port that matches the filter definition.

E.g. in your case port 1 would drop 2-10 and anything beyond 11. Port 2 drops 1,3-10,12-24 etc.
# filter source-port 1 drop 2-10,12-24
# filter source-port 2 drop 1,3-10,12-24
etc

I would test it out and see if it works for you. It's kind of port based zoning for LAN switches.

HTH
Ian

Re: Layer 2 Port Isolation

Tom Spappola — Thu, 10 Mar 2011 19:08:28 GMT

Thank you very much !

I`ll give filter a try !

Thanks
Tom

Re: Layer 2 Port Isolation

Hattim_Khaleel — Tue, 12 Nov 2019 12:09:59 GMT

Hi,

I have 2910 procurve switch , All ports from 1-20 is on Users VLAN and port 23 is the trunk to other switches.
I need to isolate the communincation between ports 1-20 and i used the command

filter source-port 1 drop 2-20
filter source-port 2 drop 1,3-20
filter source-port 3 drop 1-2,4-20
..... etc till port 20

but the issues is happend in the voice VLAN. telephone stoped to comminicate with each other to.

Any idea or trick to solve this issue ?