VLAN separation with common access to one vlan

[Juergen_Graefe]

Hello,
our customer has 18 tenants in a building which share a common it infrastructure. Each tenant should be able to access the common resource telephone system and internet. The tenant networks should be separated.
What I did:
a vlan for each tenant with an ip address as a tenant gateway
ipforwarding for all vlans
Is there a possibility to separate the tenant networks, without for each tenant a traffik deny for all other tenants to place?
Switch: X460 G2, FW: 22.3.1.4
Software: NetSight
Thanks in advance
Best Regards
Juergen Graefe

[Pascal_Lurquin]

Or use the ACL with ICMP redirect to force the Stream to (for example) a firewall.

Don't forget to implement the return of the Stream !

[Pascal_Lurquin]

configure private-vlan name add networkv lan_name

http://extrcdn.extremenetworks.com/wp-content/uploads/2014/04/Layer_2_Basics.pdf