VLAN Inter-Zone accessibility control configuration example

From Teltonika Networks Wiki
Main Page > General Information > Configuration Examples > Router control and monitoring > VLAN Inter-Zone accessibility control configuration example

Introduction

In this example we will show how to manage VLAN to VLAN communication with either one firewall zone or multiple firewall zones.

If you're having trouble finding any page or some of the parameters described here on your device's WebUI, you should turn on "Advanced WebUI" mode. You can do that by clicking the "Basic" button under "Mode" which is located at the top-right corner of the WebUI. Basic WebUI Advanced.gif

Setting up VLANs

In this example, we are assuming that the VLANs are already set up, we will configure the firewall accordingly. If you need information on how to create VLANs on your device please refer to this artice: VLAN set up. For this article we have 3 separate VLANs created:

  • lan | IP 192.168.1.1/24
  • lan2 | IP 192.168.2.1/24
  • lan3 | IP 192.168.3.1/24

Created VLANs in the WebUI should look similar to this:

File:3vlansforintervlan.png

VLAN to VLAN communication with one firewall zone

Initially, when we create VLAN interfaces, all VLANs are able to communicate with each other, for example pinging from lan to lan2:

Allowlan1tolan2pingoriginal.png

To disable VLAN to VLAN communication, navigate to Network -> Firewall -> General Settings. Press Edit on the LAN zone (lan -> wan), click on Forward and select Drop or Reject. Make sure that all created LAN‘s are added in the Covered networks tab:

Disablevlantovlandefault.png

Now if we try to reach lan2 from lan, here's what happens:

Hereswhathappens.png

Retrieved from "https://wiki.teltonika-networks.com/index.php?title=VLAN_Inter-Zone_accessibility_control_configuration_example&oldid=100295"