Forum Discussion

scarville's avatar
scarville
Icon for Nimbostratus rankNimbostratus
Sep 26, 2022

Restricting traffic between Vlans.

We have an F5 servicing our DMZ. It hosts the external IPs and acts a router for the DMZ servers.                                         +--- [ VLAN_2110 ] [ Internet ] ---- [ F/W ] ---- [ F5 ] --...
firewall
security
vlan
Dario_Garrido's avatar
Dario_Garrido
Icon for MVP rankMVP
Sep 26, 2022

Hello scarville,

From my perspective, the easiest way to achieve this is to configure two reject VS to deny the traffic between those vlans.

1. Configure one reject VS listening on VLAN_2110 and use the IP range of VLAN_2310 as destination.

2. Configure one reject VS listening on VLAN_2310 and use the IP range of VLAN_2110 as destination.