Forum Discussion

Amit_Grover_171's avatar
Amit_Grover_171
Icon for Nimbostratus rankNimbostratus
Jan 30, 2017

How can I apply packet filter on managment vlan of guest

Hi,

 

I have setup in which guests of viprions are in bridge mode and I need to stop inter-guest communication using packet filter. Can someone guide me how can I apply packet filter on management VLAN or if you can suggest any better option to avoid inter-guest communication.

 

Thanks and regards Amit Grover

 

AFM
big-ip
security

1 Reply

  • Leonardo_Souza's avatar
    Leonardo_Souza
    Icon for Cirrocumulus rankCirrocumulus
    Jan 31, 2017

    Packet filters do not apply to the management interface. I could not find any solution that states that, so I did a quick test and confirmed that.

     

    You can apply filter to the SSH/HTTPS access, for example. For SSH just go to system/platform. For HTTPS, here is the solution:

     

    https://support.f5.com/csp/article/K13309

     

    Another option is to use AFM, as AFM rules can be applied to the management interface.