Page 1 of 1

Help with firewall rule - Deny access to internet from vlan

Posted: Wed Feb 02, 2011 10:27 pm
by 3BABY
Hi Guys,

im sorry but i cant seem to work this out.. basically i just want to deny access to the internet on a certain vlan.. i have my switch connected to Vr0 and my modem on Vr1 and all i want to do is drop packets if say "VLAN number 27" try's to go through Vr1.. any help would be much appreciated :-)

Re: Help with firewall rule - Deny access to internet from v

Posted: Wed Feb 02, 2011 10:34 pm
by fewi
Not much detail to go by. You have a VLAN interface somewhere on the router. Let's assume it's called 'vlan27'. You also have a WAN uplink interface. Let's assume it's called 'WAN'.
/ip firewall filter
add chain=forward in-interface=vlan27 out-interface=WAN action=drop