Vlan Security- Need advice

[rcasta]

Hello,

My scenario is way straight forward in which port Fa0/0 is configured as trunk 802dot1q and the rest of them (ports 0/1-0/11) as access ports. Each access port was assigned a different vlan. This is because each port has a special set of users and by no means I must make sure traffic from one port may be seen in another port whatsoever.

My question is that if by configuring PVLAN Protected Ports might be enough at the L2 lever plus configuring ACLs at the L3 level on the router receiving vlans via trunking.

Hope you can help,

 

[rcasta]

"This is because each port has a special set of users and by no means I must make sure traffic from one port may be seen in another port whatsoever."

Let me rephrase it so as not to confuse anyone:

This is because each port has a special set of users and I must make sure traffic from one port does not be seen, by perhaps some malicious attack or something, into another port of the switch.

Kindly let me know your comments,