VLAN Security

[londint]

I want to implement security on most of our VLANs. As we have all our VLANS connected via MSFC, they are very open to each other but then I do not want some VLAN to be able to access other VLANs.

Also I do not want third parties to access all our VLANS as wehn we give them a gateway to a VLAN, they can inadvertently access other VLANS.

Is there a way I can implement this.

Thanks

[daniel.bowen]

You can create access-lists on the VLAN interfaces on the MSFC's, and permit or deny access between them in that way. The only other option is to place a firewall in your design and route your inter-VLAN traffic through that.

Daniel,

[steve.barlow]

If money isn't an issue (and when is it ever?!) you can look into the 6500's firewall module: http://www.cisco.com/en/US/products/hw/modules/ps2706/ps4452/index.html

Very nice.

Hope it helps.

Steve