Cisco 2950-48 port isolation

[myng94]

The following is a diagram of a network that I would like to isolate traffic from each port most efficiently. Thanks for any help!!

{pix 506e}
|
|
|
{cisco 2950-48}
|
|
|
{cisco 2950-48}

The PIX is providing DHCP and NAT for all users... How would I not allow communication between the users. Privacy is the key issue this will be in a public environment.

 

[baddos]

You don't want PCA to talk to PCB inside your network?

 

[myng94]

True, PC-A should not be able to talk to PC-B

 

[baddos]

You could create many vlans and assign each port a unique vlan. Version 6.3 of the PIX OS supports vlan trunking on it's inside interface. Seems a little messy though.