8600 - limit inter-VLAN communication

[toxadi]

Hello all,

I have two 8600s in terrabit configuration with IST interconnection and several internal VLANs. All VLANS have IPs and VRRP is enabled and by default all those internal VLANs can route to each other. How is it possible to limit that, so that only some specific VLANs can only talk to some other VLANs, and only those?

Thanks

 

[anthonyanderberg]

Today there is only one routing process and global routing table on the 8600. Multiple tables are one of the features they've talked about including in the 5.x code releases, but that's a way off. I'd say some kind of traffic filter is your only option. What kind of modules do you use (E, M or R series?)

 

[toxadi]

All modules are R-series,, and the software version is 4.1. I am trying to figure out ACLs, ACTs, ACEs but I am still very confused.

 

[anthonyanderberg]

Don't feel bad - its confusing... this is one portion of our configuration that I gave up and had to use the graphical interface tools. It sounds like your on the right track.