Policy to deny traffc between vlan

Giuseppe_Montan — Sat, 01 May 2021 15:48:51 GMT

Good Morning, a customer ask if is posible to create a policy ( on XMC ) to permit or deny the communication betwwen VLAN.

I am finding the old documentation about ACL or Policy on XOS, do you have something to help me ?

Thanks

Giuseppe

Re: Policy to deny traffc between vlan

Tomasz — Fri, 07 May 2021 02:44:47 GMT

Hi Giuseppe,

I’d consider to isolate inter-VLAN traffic on a routing device, using Policy rather to deny all and access specific protocols and hosts for the roles. That way the router takes care of inter-VLAN and Policy is about surgically precise access to protocols even within a VLAN, even on the same switch.

I shared some food for thoughts regarding this inter-VLAN communication issue here:

Hope that helps,

Tomasz

topic Re: Policy to deny traffc between vlan in ExtremeSwitching (EXOS/Switch Engine)

Policy to deny traffc between vlan

Re: Policy to deny traffc between vlan