505
edits
Changes
VLAN Inter-Zone accessibility control configuration example (view source)
Revision as of 12:33, 14 December 2022
, 12:33, 14 December 2022no edit summary
In this example we will show how to manage VLAN to VLAN communication with either '''one''' firewall zone or '''multiple''' firewall zones.
In this example we will show how to manage VLAN to VLAN communication with either '''one''' firewall zone or '''multiple''' firewall zones.
If you're having trouble finding any page or some of the parameters described here on your device's WebUI, you should turn on '''"Advanced WebUI"''' mode. You can do that by '''clicking''' the '''"Basic"''' button '''under''' '''"Mode,"''' which is located at the top-right corner of the WebUI.
If you're having trouble finding any page or some of the parameters described here on your device's WebUI, you should turn on '''"Advanced WebUI"''' mode. You can do that by clicking the '''"Basic"''' button under '''"Mode"''' which is located at the top-right corner of the WebUI.
[[File:Basic WebUI Advanced.gif|border|class=tlt-border|1004x1004px]]
[[File:Basic WebUI Advanced.gif|border|class=tlt-border|1004x1004px]]
==VLAN to VLAN communication with one firewall zone==
==VLAN to VLAN communication with one firewall zone==
Initially, when we create VLAN interfaces, all VLANs are able to communicate with each other, for example pinging from lan to lan2:
[[File:Allowlan1tolan2pingoriginal.png|border|class=tlt-border|]]
To disable VLAN to VLAN communication, navigate to '''Network -> Firewall -> General Settings'''. Press '''Edit''' on the '''LAN''' zone (lan -> wan), click on '''Forward''' and select '''Drop or Reject'''. Make sure that all created LAN‘s are added in the Covered networks tab:
[[File:Disablevlantovlandefault.png|border|class=tlt-border|]]
Now if we try to reach lan2 from lan, here's what happens:
[[File:Hereswhathappens.png|border|class=tlt-border|]]
