> If you want to stop them on the LAN segment, you can point their MAC out > the > wrong port with a static entry (Native mode: mac-address static > 1234.5678.90af vlan 1 int g1/1). What would be the layer-2 equivalent of Nul0 ? Rubens