I am trying to set up multiple VLANs on Cisco 3500, route them via FreeBSD machine with DHCP server on it out to the Internet. My primary goal(s) are:
1) to assign a correct IP to an appropriate VLAN (based on the Cisco's port), and
2) disable interVLAN routing (i.e., users from different VLANs shouldn't be able to see each other).

Although I have succeeded with goal#1, my Cisco/BSD tandem still routes packet forth and back. I can block that by using an ACL, of course, but I've read that it can be achieved without one.

My Cisco trunk is configured as follows:

interface FastEthernet0/6
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 1-12
 switchport mode trunk
 spanning-tree portfast
 no cdp enable

Any idea what can be modified to block interVLAN traffic?

Thanks,

M.S.

I thought the point of a Vlan was that users couldn't see each other, even though they are connected to the same device