3.2.2.3 VLAN Groups Access Control
The administrator can specify the Internet access permission for all VLAN groups and configure which VLAN groups are
allowed to communicate with each other.
3.2.2.4 VLAN Group Internet Access
The administrator can allow or deny Internet access to specific members of a VLAN group. For example, VLANs VID-2 and
VID-3 can access the Internet but VID1 cannot access the Internet. The following is an example where VLAN IDs 2 and 3 can
access Internet but the one with VID is 1 cannot access Internet. That is, visitors in the meeting room and staff in the office
network can access the Internet but the computers/servers in the data centre cannot access the Internet due to security
considerations. Servers in the data centre are only for trusted staff or are accessed via secure tunnels.
Figure 86 – VLAN Group Internet Access example
To Next Page
Loading...