Internet only access

[ttanemori]

I have VLAN2 just for VoIP.

Any to Any works, but I want to restrict the access to other VLANs.

My idea is like this:

On VLAN2 interface, allow VLAN2 net to "Internet". But I do not see an option to choose "Internet."

"WAN net" did not work.

Is it something like 0.0.0.0./32?

Deny from VLAN2 net to the other VLANs net could be possible, but there are many other VLANs.

May I have some advices?

Thank you very much.

[johnpoz]

Create an alias, call it othervlans for example.. Put in this alias all the vlans you don't want this vlan to go to.  Then in the dest put ! othervlans (! = NOT)  This way as long as they are not going to these vlans they will be allowed.

see attached example - this is my guest wireless vlan