Hello

I'm considering purchasing a 2860, but I need to know whether it's possible to block/allow specific ports between vlans?

For example, allow a PC on vlan 1 to only access port 80 on a PC on vlan 2 whilst everything else is blocked between the two vlans.

I have seen the option in the manual for inter-vlan routing, but it's very important that I can lock down specific ports.

Is this possible?

Thanks

Matt

It is, just create filter rules with the Source and Destination IPs of the subnets and set the filter rule's direction to LAN/RT/VPN > LAN/RT/VPN for it to affect inter-VLAN routed traffic. Inter-VLAN routing needs to be enabled between the two VLANs, you would need to set up one rule to allow traffic and another rule to block traffic.

That's great, thanks!