In case router-on-stick you don't need to do anything on switches, all the configuration should be done on the router, but in overal it will look like in previous example - use filtering ACLs on Vlan-interfaces. I am an HPE employee 0 Kudos lee_sa2 Occasional Contributor 06-...