VLAN security

[sprocket10]

How secure are VLANs? Reason I ask is I am creating several vlans on our network that must not be able to talk to each other, or be hacked to access another vlan. I have never really worried to much, but this setup is a little different.

I have access rules on the switch to limit access and also on the ASA.

[paul driver]

Hello

I would say the most elegant way would be PVLANS, however Routed Access-control list (RACL's) are also effective and less complex to setup.

ip access-list extended novlan_20
deny ip 20.20.20.0 0.0.0.255 any
permit ip any any

ip access-list extended novlan_10
deny ip 10.10.10.0 0.0.0.255 any
permit ip any any

int vlan 10
ip access-group novlan_20 out

int vlan 20
ip access-group novlan_10 out

res
Paul