Security on VLAN

[amit.g]

Hi All,

Need suggestions on the following scenario

We have vlan1 for Dept A and Vlan 2 for Dept 2

How can I make the vlan secure such that users on either vlan cannot communicate with other Vlans.

Regards

Amit

[daniel.bowen]

VLANS do inplement a small level of security on their own, like not permitting traffic from VLAN 1 to be forwarded to a wks on VLAN 2. But as you need a router to link the two VLANs, I would place an access list on the VLAN 1 and VLAN 2 interfaces detailing the level of access you need between the two

Daniel,

[ty.masse]

Not enough info about your network topology for a complete answer. The key is that vlans need a router between them in order to communicate with each other. So, if you have one switch, and you put all deptA users on one vlan, and all deptB on another, they will not be able to communicate between them. Same thing with two switches. All A on one All B on another, they will not be able to communicate between them.

Good Luck

Ty