VLAN Security

[Umar]

Hi Team,

We have multiple VLANs I want to know what security feauters we can use to block traffic between two VLANs i.e. Admin VLAN should not able to communicate with IT VLAN?

Thanks

[FredrikB]

You could use separate VRs (virtual routers). Depending on which routers you have, those are the ones that need to support VRs. A typical scenario is to have management (in-band and out-of band) in a separate VR and have all other VLANs in another VR. What switches/routers do you have in your core?

/Fredrik

[Umar]

We have firewalls however they are edge firewall and Cores are doing the all routing. Do we need to add ACLs on the Cores if yes do you have a guide for the ACLs?

[jeronimo]

I hope they are 😉
Well then you need to either configure ACLs on your routers or purchase a firewall.

[Umar]

We have Core switches which are doing all the routing and currently I can ping and connect to all hosts? Both VLANs are on different IP ranges.

[jeronimo]

Unless you are using a router to communicate between those VLANs there won't be any traffic between them anyway.