I believe what you will want to do is use an Access Control List(ACL). Page 209: support.dell.com/.../cli_en.pdf Here is a white page that takes you through different scenarios and step by step on what commands to run and how to implement an ACL. I would recommend looking through is and seeing what scenario best fits yours. www.dell.com/.../pwcnt_IP_ACLs.pdf Let us know if this information helps, or of any other questions you have. Thanks. Other ACL links. www.dell.com/.../app_note_3.pdf www.dell.com/.../app_note_10.pdf
Hi, I have an issue that I have been wrestling with for a couple of days and I am still no closer to finding a solution. What I want to do is create a number of VLANS that are isolated from each other apart from one. I have created a number of VLANs on  the 6248 and can quite happily route traffic between them all the problem the problem I'm having is stopping the two client VLANs talking to each whilst still being able to talk to the infrastructure VLAN. I'll outline the topology below:   VLAN 161 (Infrastructure) 172.16.1.0/255.255.255.0 VLAN 162 (Client) 172.16.2.0/255.255.255.0 VLAN 163 (Client) 172.16.3.0/255.255.255.0 VLAN 168 (external) This is used to connect to the outside world and can be ignored for now. VLANs 161-163 are hosted on HYPER-V R2 and the guests have the "Enable VLAN identification" property set to the correct VLAN ID   There are 3 switch ports configured with access to the VLANs 161-163. Port 1/g13 is a single port connected to the HYPER-V server and g26/g28 are Teamed ports configured on the hyper-v server. Ultimatley my live setup will use the teamed network but for purpose of simplifying the issue I have connected the guests to a non teamed network port (1/g13) I have three guests on the HYPER-V Server DC01 (VLAN 161) 172.16.1.16/255.255.255.0/172.16.1.254 PC01 (VLAN 162) 172.16.2.1/255.255.255.0/172.16.2.254 PC02 (VLAN 163) 172.16.3.1/255.255.255.0/172.16.3.254 So to recap what I need is for VLAN 161 to talk to 162 and 163 but VLAN 162 and VLAN 163 should not be able to talk to each other. Here is the current running config, any assistance would be welcome as I am stuck. Thanks in advance Paul   console#show running-config!Current Configuration:!System Description "PowerConnect 6248, 3.3.1.10, VxWorks 6.5"!System Software Version 3.3.1.10!Cut-through mode is configured as disabled!configurevlan databasevlan 161-163,168vlan routing 168 3vlan routing 161 4vlan routing 162 5vlan routing 163 6exitstackmember 1 2exitip address 192.168.2.254 255.255.255.0ip routingip route 0.0.0.0 0.0.0.0 192.168.1.1interface vlan 161routing ip address 172.16.1.254 255.255.255.0exitinterface vlan 162routingip address 172.16.2.254 255.255.255.0exitinterface vlan 163routingip address 172.16.3.254 255.255.255.0exitinterface vlan 168routingip address 192.168.1.254 255.255.255.0ip netdirbcastbandwidth 10000ip rip send version rip1ip rip receive version rip1ip mtu 1500exit interface ethernet 1/g13switchport mode generalswitchport general allowed vlan add 161-163 taggedexit!interface ethernet 1/g26switchport mode generalswitchport general allowed vlan add 161-163 taggedexit!interface ethernet 1/g28switchport mode generalswitchport general allowed vlan add 161-163 taggedexit!interface ethernet 1/g37switchport mode generalexit!interface ethernet 1/g38switchport mode general exit!interface ethernet 1/g48switchport mode generalswitchport general pvid 168switchport general allowed vlan add 168exit  
6248 VLAN routing and segmentation query