<html><body bgcolor="#FFFFFF"><div>Alternatively, if using normal vlans, this can also be achieved by enabling access list on the switch and restrict traffic flows. Generally this is done on a layer 3 switch, don't think it will support on your switch model. <br><br><div><br></div><div>Rgds,</div><div><br></div><div>Vineet Bhojnagarwala RCDD, NTS, OSP</div><div>Spear Networks Pvt Ltd</div><div>Integration & Consultancy</div><div>+91-9831436607</div></div><div><br>On May 7, 2010, at 8:39 AM, Vineet Bhojnagarwala <<a href="mailto:vbhoj74@gmail.com">vbhoj74@gmail.com</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div><div>I think this is a motel kind of situation and a PVLAN serves the situation right. Put all the ipphones in the voice vlan as suggested, make a seperate isolated vlan for the PCs, this will restrict traffic between the clients. <br><br><div><br></div><div>Rgds,</div><div><br></div><div>Vineet Bhojnagarwala RCDD, NTS, OSP</div><div>Spear Networks Pvt Ltd</div><div>Integration & Consultancy</div><div>+91-9831436607</div></div><div><br>On May 6, 2010, at 11:30 PM, "David White" <<a href="mailto:David.White@watchguard.com"><a href="mailto:David.White@watchguard.com">David.White@watchguard.com</a></a>> wrote:<br><br></div><div></div><blockquote type="cite"><div>
<!-- Converted from text/plain format -->
<p><font size="2">-----Original Message-----<br>
From: <a href="mailto:asterisk-users-bounces@lists.digium.com"><a href="mailto:asterisk-users-bounces@lists.digium.com">asterisk-users-bounces@lists.digium.com</a></a> on behalf of Noah Miller<br>
Sent: Thu 5/6/2010 10:41 AM<br>
To: Asterisk Users Mailing List - Non-Commercial Discussion<br>
Subject: Re: [asterisk-users] OT: NAT in SPA922<br>
<br>
>>> It is a building, with 24 separated rooms, each room will have a PC and a IP<br>
>>> Phone. Every room connected to a switch Cisco 2950.<br>
>>> I want keeping all PCs isolated behind a NAT (no access to neighbour's PC),<br>
>>> and still keep communication in same LAN between all IP Phones.<br>
>>><br>
>>> Should I take another approach on that?<br>
>>><br>
>> Put each PC in its own VLAN. Keep all the phones in one VLAN.<br>
>><br>
>> Although having a $30 router in each room hanging off the phone would<br>
>> accomplish what you want also.<br>
><br>
> Take j's suggestion to use VLANs. This is not a good situation for<br>
> NAT. Cisco 2950's can do VLANs.<br>
><br>
<br>
to be clear, the only way this will work with the PCs is if each PC vlan is *also* a unique ip subnet (else how do all the vlans access a common default gw?)<br>
<br>
place the phones in a voice vlan, and the phone problem is solved.<br>
as for the PC isolation, you might get better feedback on a cisco or other networking forum.<br>
<br>
-david</font>
</p>
</div></blockquote><blockquote type="cite"><div><span>-- </span><br><span>_____________________________________________________________________</span><br><span>-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com"><a href="http://www.api-digital.com">http://www.api-digital.com</a></a> --</span><br><span>New to Asterisk? Join us for a live introductory webinar every Thurs:</span><br><span> <a href="http://www.asterisk.org/hello"></a><a href="http://www.asterisk.org/hello"><a href="http://www.asterisk.org/hello">http://www.asterisk.org/hello</a></a></span><br><span></span><br><span>asterisk-users mailing list</span><br><span>To UNSUBSCRIBE or update options visit:</span><br><span> <a href="http://lists.digium.com/mailman/listinfo/asterisk-users"></a><a href="http://lists.digium.com/mailman/listinfo/asterisk-users"><a href="http://lists.digium.com/mailman/listinfo/asterisk-users">http://lists.digium.com/mailman/listinfo/asterisk-users</a></a></span></div></blockquote></div></blockquote></body></html>