topic Re: Blocking traffic between 2 SGT in the same VN. in Software-Defined Access (SD-Access)

Blocking traffic between 2 SGT in the same VN.

pham duy hiep — Sun, 12 Dec 2021 14:00:00 GMT

Hi all.

I plan to design a new VN in my Fabric, wich has 2 subnets for user and server. 2 subnets will have different SGT. But I want the users can't access to the server (I know that all endpoints in the same VN can communicate with each other by default).

So how can I do it with the easiest way?

Thank you.

Re: Blocking traffic between 2 SGT in the same VN.

Deepak Kumar — Sun, 12 Dec 2021 17:33:56 GMT

Hello,

In your policy configuration, make action Default or allow to Deny from your Group1 to Group1 or Gorup2 as you need.

Re: Blocking traffic between 2 SGT in the same VN.

pham duy hiep — Tue, 14 Dec 2021 09:08:51 GMT

Hi DeepPak,

Thank for your response.

Now, I'm waiting for testing environment to confirm it but this exactly is what I need to do, right?

Thanks again.

Re: Blocking traffic between 2 SGT in the same VN.

Deepak Kumar — Tue, 14 Dec 2021 10:42:34 GMT

In my above LAB, you can see I have two groups (custom created) IT DATA1 and IT DATA2. You can click on the required control Box and there will a popup. You can select as "DENY" or "DENY with logs" option as your need.

Save .. Deploy...

Re: Blocking traffic between 2 SGT in the same VN.

pham duy hiep — Tue, 14 Dec 2021 10:47:30 GMT

Hi Deepak.

Thank you so much.