[170463] in North American Network Operators' Group
Re: Link Layer Filtering not supported on popular equipment?
daemon@ATHENA.MIT.EDU (Mark Tinka)
Thu Mar 27 16:39:40 2014
From: Mark Tinka <mark.tinka@seacom.mu>
To: nanog@nanog.org
Date: Thu, 27 Mar 2014 22:39:02 +0200
In-Reply-To: <CAHDg04tpZPdy5zbqDbNqpBVFj55V2YtCkVtxOKTzx+xEqvxvnQ@mail.gmail.com>
Reply-To: mark.tinka@seacom.mu
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--nextPart1956914.SNUe6vNGkd
Content-Type: Text/Plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
On Thursday, March 27, 2014 06:42:12 PM Michael Loftis=20
wrote:
> Similar issues with ACLs. There are some options in
> Cisco (not certain if any of dell's products have this)
> that basically keep ports from talking to eachother, but
> allow them to talk to the upstream port (usually a
> router that can then enforce deeper ACLs and such).
Those would be private VLAN's in classic solutions, and=20
split horizon bridge domains on carrier Ethernet platforms.
I find the latter simpler and more elegant, but limited to=20
specific hardware.
Mark.
--nextPart1956914.SNUe6vNGkd
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)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=8GSx
-----END PGP SIGNATURE-----
--nextPart1956914.SNUe6vNGkd--