Web and Unmanaged
cancel
Showing results for 
Search instead for 
Did you mean: 

Isolate VLAN - 1910 - 500

it_ejvnior
Frequent Advisor

Isolate VLAN - 1910 - 500

Hi.

I would like to know how I can isolate a specific vlan from the other vlans without using an ACL to deny the traffic?

Denying the traffic through an ACL works but I would like to do the inverse. Isolate the vlan 202 and only permit through ACL the UDP because the DHCP service and the traffic to the firewall.

The access switches are 1910 and the core 5500 HI.

Thanks in advance.

2 REPLIES
16again
Respected Contributor

Re: Isolate VLAN - 1910 - 500

If  VLAN202 has a L3 interface on the switches, you do need ACL on the L3 switch. 
And for DHCP (relay) you need a L3 interface....

But if you move DHCP (relay) function to the firewall,  you can make VLAN202 L2 only on the switches, giving you isolation without switch ACLs.

it_ejvnior
Frequent Advisor

Re: Isolate VLAN - 1910 - 500

All switches uses the DHCP relay function.

So, the best way to block the inbound traffic from vlan 202 to 1 is denying the traffic through an ACL?

Thanks in advance.