Looking for a gigabit switch to connect to a Mikrotik PPPoE server. Needs to be rack mount with at least 16 gigabit ports. Need to be able to set it up so as port 1 and perhaps 2 are uplink to PPPoE server and they can talk to all ports. But ports 3 - 16 can only talk to ports 1 or 2. Anyone know of something like this they have had good luck with?

Canopy Cluster Management units have a simple check box to do this on there web config. Imagine may need to configure port based VLAN's on other switches.

How much are you looking to spend? Cisco and Juniper trivially do with this PVLANs (private VLANs). A Juniper EX2200 with 24 ports is around $1500 new, you can find them for cheaper than that or could buy used. Cisco 3560s are a little bit more.

Bit pricey. Was considering this Dlink unit:

http://www.dlink.com/products/?pid=759

According to the feature list it doesn't support client isolation. I'm personally not aware of any SoHo products that do.

I looked up a couple of Extreme, Brocade, and Foundry switches that I know support this but they're in the same price range.

I can't easily find whether the cheaper HP ProCurves support private VLANs. They are more affordable. Maybe contact a reseller or HP directly to find out.

HP switches do support port isolation, though it is well hidden in their documentation. I don't remember the command for them, but anything at the 2500 series or higher should. Also 3Com 4500 series (now HP though) also support it.

Looks as though this unit does?

http://www.netgear.com/business/product ... 4-200.aspx

More expensive too but not terrible.

They call it protected ports, but it is basically what you are looking for.

ftp://downloads.netgear.com/files/7200_CLI.pdf

Page 87 of the PDF

If ProCurve 2500s and up support it I'd rather get one of those. Been a while since I've priced them but they should compare nicely to the Netgear price. HPs are rock solid, have a lot of features, and come with life time warranties.

So the HP E2510-24 would support this? There manuals are not the easiest reading. What would the feature be called?

"Port based VLAN", or PVLAN.

It's called protected-ports.

This one is quit cheap Cisco SF-300

According to the feature list it doesn't support client isolation.

it supports asymmetric VLAN, so you can 'emulate' port isolation/traffic segmentation/whatever they call it

anyway, Web Smart series are recommended for SOHO, not for ISPs - they even don't have CLI usually, only web interface

According to the feature list it doesn't support client isolation.

it supports asymmetric VLAN, so you can 'emulate' port isolation/traffic segmentation/whatever they call it

Thats what I thought. Why would that not work?

anyway, Web Smart series are recommended for SOHO, not for ISPs - they even don't have CLI usually, only web interface

I think it will work, especially if used in controlled environment.

For example, we were using Web Smart series switch in our server room (AFAIR, it was something like DGS-1224T), it was working perfectly, except web interface sometimes became unreachable - but switch worked normally, we just couldn't control it until reboot

trying to set this up with the DGS-1210 series.

http://www.dlink.com/products/?pid=DGS-1210-24

It supports Asymmetric VLAN. I am trying to set this up so ports 21 - 24 can talk to any other ports while ports 1 - 20 can only talk too 21 - 24. Any pointers how to do this? I did this in past with Milan switches but these seem a bit different.

Got it working. Biggest issue was the unit must be rebooted after making certain changes. Apply alone did no seem to do it although for some changes it would.

If remembered it correctly, I have seen PVLAN in the administration of Accton Edge-Core ES4528V http://www.edge-core.com/ProdDtl.asp?sno=306, it also have complete IPv6 management. I got one for 400€ with VAT (in CZ).

Biggest issue was the unit must be rebooted after making certain changes

hmmm... are you on the latest firmware?..

<quote>hmmm... are you on the latest firmware?..</quote>

Yes.