| 摘要 |
A method and an arrangement in an access network for preventing hosts ( 5 ;A,B) connected to the access network from communicating directly with each other. Said method comprises the steps of defining Virtual Local Area Networks, VLANs, in switches ( 3;12;12';35,36,37;83 ) such that traffic arriving in the switches from said hosts is forced to an access router ( 1;11;11';11'';81 ) and defining in the switches one asymmetrical downlink VLAN for downlink traffic from the access router to the hosts, said downlink VLAN being common to said hosts. According to the invention the method comprises the further steps of configuring the VLANs such that said hosts connected to the access network belong to the same IP subnet and configuring the access router to perform intra-subnet routing and to be an Address Resolution Protocol proxy. |
