Switches, Hubs, and Modems
cancel
Showing results for 
Search instead for 
Did you mean: 

how to block traffic between servers in the same vlan

natef
Occasional Visitor

how to block traffic between servers in the same vlan

I have a server vlan and one particular server with ip add 10.99.66.30/23 which should not communicate with any other server in the same vlan. This server should only communicate with  an external server located outside my network and connected via mpls. The external connectivity is working fine. However, i am not able to prevent commmunication within the same server vlan.

Could i use policy based routing for this particular IP address and set it to forward traffic directly to the gateway ip 10.99.66.1  ?

access list 1 permit10.99.66.30 255.255.255.255

route-map test-route permit 1

      match ip address 1

      set next-hop 10.99.66.1

exit

vlan 10

ip policy route-map test-route

Will this work?

Can anyone help?

 

 

 

2 REPLIES
Vince-Whirlwind
Honored Contributor

Re: how to block traffic between servers in the same vlan

This is what host-based security is for. Security should be configured on the server.

Dunky
Regular Advisor

Re: how to block traffic between servers in the same vlan

Sounds like it ought to be sat in a DMZ.