WAN Traffic only concept
-
Hi guys
I have a general question regarding the firewall concept. At the moment I have two VLAN definied:
VLAN 100 = Client Network
VLAN 110 = Server Network
WAN = Internet AccessI need that VLAN100 (Clients) have access to some stuff in the VLAN110(Servers) like DNS. But they need also WAN Access to any public address. If I add just a WAN Rule to any destination I got full access to the Server Network. In a final state I need restricted access to the Server Network and full access to the WAN.
Have somebody done something like that ?
regards
supermega
-
"If I add just a WAN Rule to any destination I got full access to the Server Network."
Huh?? So your not natting, are you talking IPv6?
Firewall rules are placed on the interface the traffic will first be seen by the firewall, top down first rule to fire wins.
Why would you put butting any rules on the wan? Do you need the internet to access servers on server segment? This would be done with port forwarding, unless your not natting or talking ipv6?
Is it is very simple to allow your clients some access to your server network, and all access to internet, etc.
Do you want your server network to be able to access your client network?
