Re: How to block a vlan from accessing another vlan?

On Sun, 2009-10-25 at 23:42 -0400, slamp slamp wrote:
> thanks for the input.
> 
> to get internet working on OPT1 i had to add a rule to allow from OPT1
> to any. i had to add a block rule above this to block traffic from
> OPT1 to LAN. is there another way getting internet working on OPT1?
> something like allow interface OPT1 to WAN but i couldn't figure this
> out from the gui and i have been searching list archives/forum/etc and
> not found an answer.

Put a rule on the LAN interface that stops incoming traffic from OPT1 to
LAN.  Leave OPT1 open.  That will allow it to pass through the WAN, but
not LAN.

> 
> 
> On Sun, Oct 25, 2009 at 5:43 AM, Thomas Koch <[email protected]> wrote:
> > The Default-Rule allows accessing everything, even other networks.
> >
> > 2009/10/25 slamp slamp <[email protected]>
> >
> >> i wanted to separate my wifi from my internal lan.
> >>
> >> vlan 5 - LAN - 192.168.1.0/24
> >> vlan 10 - OPT1 - 192.168.2.0/24
> >>
> >> i have a cisco 2950.
> >>
> >> i can access each network from each side. i dont know why as i dont
> >> have rules allowing them to access one another. i only have the
> >> default rule. any ideas?
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: [email protected]
> >> For additional commands, e-mail: [email protected]
> >>
> >>
> >
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>