NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
autoitaus
Dec 07, 2018Tutor
M5300 oneway VLAN Routing
 I have two VLANs, VLAN 1 and VLAN 2 
   
 I want to allow computers in VLAN 1 to access the computers in VLAN 2 
 I DO NOT want computers in VLAN 2 to be able to access computers in VLAN 1 
   
 How ...
DaneA
Dec 09, 2018NETGEAR Employee Retired
Hi autoitaus,
Welcome to the community! :)
Let me share the article below and use it as a guide to implement the network setup you want:
VLAN Routing on a NETGEAR Smart Switch
Regards,
DaneA
NETGEAR Community Team
- autoitausDec 18, 2018TutorThanks for the reply Dane, but I've already tried this previously and it hasn't worked. I've just tried again and confirmed that to be the case. When I add these rules in, traffic will not flow in either direction. Refer screenshots. 
 Thanks- autoitausDec 18, 2018TutorThe article provided blocks ALL communication between VLAN 10 and VLAN 20. As mentioned in my original post, I need VLAN 10 to be able to access VLAN 20 but I do not want VLAN 20 to access VLAN 10. Thanks 
 
- DaneAJan 02, 2019NETGEAR Employee RetiredKindly delete the previous ACL command then try this: (M5300) #config 
 (M5300) (Config)#access-list 1 deny 192.168.19.0 0.0.0.255
 (M5300) (Config)#access-list 1 permit any any(M5300)#interface [VLAN 1 port members] 
 (M5300) (Interface [VLAN 1 port members])#ip access-group 1 in
 (M5300) (Interface [VLAN 1 port members])#exit
 (M5300) (Config)#exitLet us know how it goes. Regards, DaneA NETGEAR Community Team - autoitausJan 02, 2019TutorError as per attached 
- DaneAJan 03, 2019NETGEAR Employee RetiredKindly delete the previous ACL commands then try this below: (M5300) #config 
 (M5300) (Config)#access-list 1 deny 192.168.19.0 0.0.0.255
 (M5300) (Config)#access-list 1 permit 0.0.0.0 255.255.255.255(M5300)#interface [VLAN 1 port members] 
 (M5300) (Interface [VLAN 1 port members])#ip access-group 1 in
 (M5300) (Interface [VLAN 1 port members])#exit
 (M5300) (Config)#exitLet us know how it goes. Regards, DaneA NETGEAR Community Team - autoitausJan 03, 2019TutorHi Dane, I need to attach the ACL to a VLAN, not individual ports. What is the syntax for this? 
 
 
Related Content
NETGEAR Academy
 
 Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 
Join Us!
