Can you remove access between sub-interfaces in router on a stick?

[lucas111]

In the packet tracer project, I have 6 divisions, IT, HR, finance, and one called public. Pcs from IT, HR, and finance divisions need to have access to the public. Each division also has its respective VLANs assigned except public. So, I created sub-interfaces for each division in the router under the router on a stick topology so that they can have access to the public. But, they can also access between divisions such as HR and finance which I need to restrict. Is there any way that I can configure the router so that the sub-interfaces cannot access each other? I am quite new to packet tracer and networking in general.

[M02@rt37 · Accepted solution]

Hello @lucas111 

Configure ACL and apply them on each sub interfaces.

@lucas111, please find example of access restriction here:

https://www.networkstraining.com/cisco-router-on-a-stick-with-switch/

[Joseph W. Doherty]

---

@lucas111 wrote:

Is there any way that I can configure the router so that the sub-interfaces cannot access each other?

---

Yes there is.

As described by M02@rt37, you would use ACLs, on the VLAN gateway interfaces, to control traffic as it leaves and/or enters the VLAN's subnet.