Isolate groups in the same switch

Dears...
I am new in Cisco, I have a good knowledge in Mikrotik and trying now to work with Cisco
I have a Cisco 3560G catalyst 24 ports + 4 SFP ports
what I need is to make groups of ports where in each group the ports can communicate withe each other but the groups must be isolated from each other except one group who can see and communicate with all groups and ports 
the scenario are :
group 1 : port 1 to port 12
group 2 : port 17 to port 20 + SFP 25
group 3 : port 21 to port 24 + SFP 26
group 4 : port 13 to port 16 ( can communicate with all groups and ports )

Hi Mon,
You can achive this with VLAN configuration , All you have to do is create 4 VLAN and configure the ports to respective VLAN. And you have to configure VLAN-ACL to stop Inter-VLAN communication
As you said only one segment should be communicating with the others, you may also have to configure VLAN interface for that particular VLAN.
Here VLAN interface is needed if you have to communicate to a different network segment i.e Group or vlan
I couldnt give you the VLAN configuration example. But a simple googling should help you!!

Similar Messages

  • How to put a few pages together as a panel group in the same screen ?

    Dear Friends,
    Hello. I am developing the accounting application of Journal Entry module. I have developed 5 pages for a journal entry: Journal header, Journal Line, Journal total, Journal Error and Journal Approval. I want to put 5 pages together as a panel group in the same screen so that users are convenient to use them. The format is as follows:
    Header | Lines | Total | Error | Approval
    When a user click on Header or Lines or Total or Error or Approval, its related page is displayed below it on the screen. But I don't understand how to put "Header", "Lines", "Total", "Error" and "Approval" together as above format and link them to its related page. Can anybody tell me how to do that ? Thanks.
    Lucy

    Mike,
    It's correct to make 5 pages as a seperate component.
    I am developing an accounting system using PeopleTools by myself.
    Because you understand PeopleSoft financial application, please tell me the 2 questions as follows:
    First, In Journal Line page, when select "edit Journal" and click button "process", the system check the Journal against Budget, if it's Ok, the System assign Journal ID for the Journal and put "valid" into the field of "Budget Status" and "Journal Status" in Total page. If it's not OK, the system send error message into Error page. Do you know how developer do that ?
    Second, In Journal Line Page, when select "Submit Journal" and click button "process", the system send the Journal to Approval page for approval. Do you know how developer do that ?
    Lucy

  • Two groups with the same name in File and LDAP realms

    Hi,
    I configured WLS 6.0 SP1 to use an LDAP caching realm
    as default one. In the LDAP server (Netscape Directory)
    I have a group called Administrators. There is a group
    with the same name in WLS own File Realm. When I click
    on the Groups menu item in the administration console
    I only get the Administrators group from the File Realm
    listed. Is that expected? What will happen if I protect
    a resource ti the Administrators group? Which one will
    prevail - the one from the LDAP or the one from File
    Realm? Or maybe the two will be merged?
    Regards,
    Plamen Petrov
    AstraZeneca
    Sweden

    Hi
    First of all I want to know that where you created your class, In SE24 or in any programm.
    if in SE24, then go to se24 open that class go to methods tab and check if that method name accurs at two places, if not, then
    click on that method and check the code.
    or if in a program.
    then you must have defined like
    class <class name> definition.
    public section
    method <method name>
    endclass.
    class <class name> implementation.
    method <method name>
      code for that method.
    endclass.
    It might be possible you have set the implementation part twice for that particular method, So please check and delete one implementation for that method.
    Thanks
    Lalit Gupta

  • Traffic Between 2 Ports on Different VLANs on the Same Switch

    Hi,
    This question probably results from a flaw in my understanding of network layer 2 versus layer 3 and VLANs so any additional context in that regard would be very welcome
    If I've got 2 systems on difference VLANs that are connected to ports on the same switch (e.g. 2950), with that switch being connected via an uplink to a router or layer 3 switch and i want to pass traffic between the 2 systems (e.g. copy a file from a folder shared on one system to another), will the traffic pass directly from one port on the 2950 to the other? Or will it need to go through the uplink? I guess it will need to go through the uplink initially as layer 3 needs to be involved for inter-VLAN routing but wondering if layer 2 MAC address will ultimately be learned, allowing traffic to pass directly between the systems, not over the uplink.
    Thanks in advance,
    cisco_reader.

    If the hosts are on different Layer 2 Vlans and you want to pass data between them, that data needs to be 'Routed'.
    In order to Route data from one Layer 2 Vlan to another, you need a device capable of Layer 3 Routing. That device can be a traditional Router or can be something called a Layer 3 switch.
    A 2950 switch is Layer 2 only so has the ability to create many Layer 2 Vlans which is what you have done. In order to route traffic between those Vlans, you can either use a router or a L3 switch.
    If you decided to use a router, look up something called 'Router on a Stick' which involves creating a Trunk link from the 2950 to the Router and then setting up Subinterfaces on the Routers port to act as the 'Default Gateway' for each of your Vlans.

  • Risks of two development groups in the same system

    Hi,
    I need your help.
    I'm looking for a document about the risks having two development groups in the same system.
    The point is: An external party will come soon and start the implementation of a mini H2R in the same system as we (the internal team) are working for SD, MM, CO,... As the developments are cross-client, I'm asked to write a document explaining the risks in such cases like:
    conflicts: working on the same objects
    authorisations: each group should be assigned to different packages
    planning: the go-live should be at the same time
    transports: there can be conflicts on a transport-level
    If you have any documentation that can help me, please let me know.
    Kind regards, Gilles.

    I hope this is not considered a link farm:
    Potential conflicts between already released transports:
    Program to validate transport sequence
    Uwe Schieferstein's blog on "Dangerous Liaisons in User-Exits and How to Avoid Them":
    /people/uwe.schieferstein/blog/2008/11/11/dangerous-liaisons-in-user-exits-and-how-to-avoid-them
    Just two of many things to observe...
    Thomas

  • Is it possible to use the same Switch for two different clusters.

    I have 10g Rac setup on windows.
    Now I am planning to install 11gR2 on different servers.
    Is it possible to use the same Switch for two different clusters.

    user9198027 wrote:
    I have 10g Rac setup on windows.
    Now I am planning to install 11gR2 on different servers.
    Is it possible to use the same Switch for two different clusters.
    Yes.  Technically there will not be any conflict as long as the private addresses used by the 2 clusters do not collide, and provided that the switch's port capacity and bandwidth will not be exceeded.
    Your NA (netadmin) can also configure the switch to separate the 2 Interconnects from one another (called partitioning when using Infiniband) - if the switch supports such features.
    A major consideration is not to make the switch, public. That typically cause a range of problems and can have a serious impact on an Interconnect. But using 2 private networks on the same infrastructure should not have the same problems - if configured and implemented correctly.

  • Mixing public and private networks on the same switch

    Hello Everyone,
    I know this may get some security engineers in frenzy but wanted to know if there is a safe way to mix public and private networks on the same switch. 
    We have many remote offices that we want to add public wifi and a couple of other services that would be completely outside of our internal network.  Each office has a 3750 with plenty of open ports.  How can I safely create a vlan for public access on these switches which currently have our internal network on.  I have read that people are doing this to save on the cost of purchasing a dedicated switch.  Some people are using access lists and one person mentioned creating a private vlan for the public network.  I looked up private vlan and it seemed bit confusing.
    Is this recommended?  If not what would be the safest way to do this?
    Thanks Everyone

    Disclaimer
    The  Author of this posting offers the information contained within this  posting without consideration and with the reader's understanding that  there's no implied or expressed suitability or fitness for any purpose.  Information provided is for informational purposes only and should not  be construed as rendering professional advice of any kind. Usage of this  posting's information is solely at reader's own risk.
    Liability Disclaimer
    In  no event shall Author be liable for any damages whatsoever (including,  without limitation, damages for loss of use, data or profit) arising out  of the use or inability to use the posting's information even if Author  has been advised of the possibility of such damage.
    Posting
    How "safe" is relative.  If your running just one VLAN on a switch, that's would be the safest (basically the same as mixing traffic on the same wire - separation is done else where).
    If you multiple VLANs on a switch, then you need to determine how likely someone might figure out a way to breach the VLAN barriers.  (This isn't so easy on newer switches.)  If the VLAN isolation is breeched, then you need to examine what does that imply from a security perspective (for example can someone now inject or receive other VLAN traffic).
    For most purposes, I don't see mixing public and private VLANs, alone, on the same switch as much of a risk.  More of a concern is what can be reached on either VLAN and how well it's protected.

  • Error: all members of structure are assigned to the same switch

    Hi,
    I have transported my query to QA environment sucessfully with error code (0). When I execute my query is runs fine but it gives me error "all members of structure 'Key Figures' are assigned to the same switch, query will fail if switch is not active" when I open it in Bex Designer.
    Any idea what could be the reason.
    Regards,
    Divy

    Hi,
    any idea what´s behind this "error message" if re-importing the query seems to solve it? We only face this issue with a query in our productive system, but not in the development or test system. And because we can not test it, we have not implemented the note yet.
    Has anyone implemented the note already?
    Regards
    Lars

  • HT2486 how do I copy an existing Group in Contacts to create a new group with the same contacts in it?

    How do I copy an existing group in Contacts to create a new group with the same contacts in it?

    Hi there,
    Unfortunately the use case you describe hasn't been implemented in Firefox. It's not possible to move a tab group out to its own window at this point. Generally the tab groups feature hasn't been worked on much recently, not sure why.
    As to TabMixPlus, that's a third-party add-on which Mozilla doesn't directly support. You can find support links from the add-on page: https://addons.mozilla.org/en-us/firefox/addon/tab-mix-plus/
    Hope this helps.
    Cheers,
    David

  • Cdp neighbour shows the same switch as neighbour and the connected switch

    Hi
    I have a problem here , cdp neighbor  shows the same switch as the neighbor and the real connected switchh . I know it will show only the real connected switch if i shut and no sh . What i just want know is it a symptom for something else 
    Dist#sh cdp neighbors   Gig 10/10       
    Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
                      S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone,
                      D - Remote, C - CVTA, M - Two-port Mac Relay
    Device ID        Local Intrfce     Holdtme    Capability  Platform  Port ID
    Sw1
                     Gig 10/10        130              S I   WS-C3560- Gig 0/3
    Dist
                     Gig 10/10         156             R S I  WS-C6513    Gig 10/10
    Thank you

    HI,
    Did you did shut and no shut in the interface. ?
    Is it working fine.?
    is it fiber connected cable connected with these devices ?
    Regards,
    Gurudath K S

  • Can I use DHCP snooping and IOS DHCP server on the same switch stack

    Hello,
    I am shortly going to be deploying a Cisco CallManager solution for a customer whose network comprises stacks of Catalyst 3850 switches.
    There is no separate core/server farm switch so the CallManager servers, voice gateways and IP phones will all plug into the same stack and be in the same VLAN (not my choice!).
    For security we want to enable DHCP snooping and were planning on using the IOS DHCP server on the Catalyst switch stack.
    Will this work? - when I enable DHCP snooping in networks with separate access layer switches I set the uplinks to the core as trusted links.
    I am not sure whether DHCP snooping will work in this case. Do I need to set the VLAN interface on the switch as trusted, is this even possible?
    Unfortunately I do not have access to a layer 3 switch to test this at the moment.
    Thanks

    Nope.  That's the issue.
    They'll sync on a third device acting as a hotspot, but the device sending a signal is not "on" the network it creates so the airport is all by itself on that network.  At least that is what it looks like to me.  Anyone have another take on it?  Seems pretty silly that an iPad can put out a wifi signal, an Airport Express can receive a wifi signal, and yet there is no simple way to get them to communicate under this particular condition.

  • CProjects - Partition for two or more groups on the same system

    Hi,
    Our business requirement for cProjects implementation is such that we have two groups (two companies infact) under an umbrella brand. We have already impemeneted cProjects for one of them. It's time now to have this implemented for the other group.
    How can we ascertain that there's a partition in the system by which one group is completely independent of the other? One group should not see the projects/data of the other group and vice versa. Authorizations to projects helps but in a system, a user can fetch (in project search) the names of all projects in the system (irrespective of whether one has authorization). How can we take care of this?
    Summary:
    We are looking for the ssytem where one group of cProjects users works in the system as if it were the only group working. We intend to ensure the same for the second group as well.
    Please suggest.
    Regards...

    Hi Zhenbo,
    You get points for the "very helpful answer". Thanks.
    I have not been able to make a complete breakthrough though. Please see if you can help.
    There are three steps under "Structural Authorization"
    1. Create Authorization Profile: I see this defined in my system (comes from HR)
    2. Save user in SAP Memory (IMG has enough documentation on this.
    3. Assign Autorization profile to users: Here, I assigned one of the "Auth. Profiles" to the user (myself). At this, I see that the system (cProjects front end) returns an empty list.
    This means that the system expects the Business Partners, pertainig to that "Auth. Profile" (which I set in step 3 above). And because it does not find any, it returns an empty list.
    What I am not looking for is:
    How to bring in the Business Partners (we are using the HR Master Employees) under this "Auth. Profile" such that the system picks them when we do a resource search at cProjects front end?
    So... what I am looking for is: relation between this "Auth. Profile" assigned to the user and the Business Partners corrresponding to this "Auth. Profile".
    Please see if you can help.
    Regards,
    Bittu.

  • VLANs for multiple customers on the same switch accessing ISP

    I have multiple customers accessing the Internet from the same ISP through the same SRW 2016.  The switch is set completely at default, with all ports on VLAN 1.  I want to separate all the (3) customers' traffic into 3 VLANs for security, but I want them to still access the ISP through port 1.  Can I do that with this switch?  How would I set port 1 so that all VLANs can send and receive packets through port 1 but still be isolated from each other on the LAN?

    Hi,
    I had a simular situation. In the past I didn't have a VLAN-capable modem/router and just connected the modem as a normal device to the layer2 switch (Cisco 3548XL at that time). In my setup, I gave all separated LAN's its own multi-VLAN port(s) in its own unique VLAN and the modem a single-VLAN port in its own VLAN. Next I made all the ports who needed internet access member of the modem's VLAN. A nmap scan and testing showed me that the seperated LAN's couldn't connect to eachother.
    So, I don't know if i did something stupid (in security way), but it worked like a charm.
    Sorry for my English ;-)

  • Grouping all the same artists together in itunes

    i would like all the same artists to be grouped together. currently my songs are in alphebetical order, not accordign to the artists

    Just click the artist header and they will all be organized by artiest

  • Table  V_T500P- define different country grouping to the same company code

    Hello Gurus,
    When I try to update table  V_T500P with different country grouping to two personnel areas that have same company code I get the following message:
    "The country grpg of company code xxx has been changed. This company code is used in other pers. areas. The country grouping will also be changed. Make changes?"
    How can I define two different countries to the same company code in this table?
    For example-
    Personnel Area DE09 (Germany), Company Code 0234 (KPG EAMER)- country grouping 01
    Personnel Area DK05 (Denmark), Company Code 0234 (KPG EAMER)- country grouping 09
    when I try to change the country grouping of one of the countries it changes them both with the massage I wrote above.
    Thanks for your help,
    Ronit.

    Thanks for your answer!
    Actually, I know that there is a way because the initial definition in my system was: different country groupings to different company code (can I attach here a screen shot?)
    But when I try to change one of the country grouping it chnages all the countries from the same company code.
    Example:
    In the begining it was:
    Pers. Area SE01 Company code 0234, country grouping 06
    Pers. Area IL03 Company code 0234, country grouping IL
    Pers. Area DE03 Company code 0234, country grouping 01
    Now if I'm trying to chage the country grouping of Pers. Area IL03 from IL to 05 (for example), it changes everything. I know there is a way to change it without changing them all. I just don't know what is the way...
    I will appriciate if someone can help!
    Thanks,
    Ronit.

Maybe you are looking for