Which is the correct way to filter/block traffic between vlans?

  Hi all. My question is: Which is the correct way to filter/block traffic between vlans?
i have a more than 15 vlans. I want to block traffic between them except 2 vlans.
source vlan 3 deny destination vlan 4
#access-list 100 deny ip 192.168.3.0 0.0.0.255 192.168.4.0 0.0.0.255
and the oposite:
#access-list 101 deny ip 192.168.4.0 0.0.0.255 192.168.3.0 0.0.0.255
I have to do this for all VLANs, ono by one. Is that right?
Thanks.

There are a couple of ways to achieve that. I assume that you have a Layer3-Switch. There I would configure one ACL per vlan-interface and allow/deny the traffic as you want. Sadly, the Switches don't support object-groups yet, so you have to use the IP-networks here. Only allow/deny traffic based on networks or hosts. Don't even try to be very granular with permit/denys based on ports. Because the switch-ACLs are not statefull you'll run into problems for the return-traffic if you woulf do that. And the return-traffic of course has to be allowed also.
Another way: with the help of 802.1x you can deploy port-based ACLs for every user. That takes some time for planning, but is one of the most powerful solutions.
For more control you could remove the L3-interface from your L3-switch and move that to your router or firewall. These devices support stateful filtering and you can control your traffic much tighter tehn with ACLs on the switch.
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

Similar Messages

  • Which is the correct way to program a Desktop Application???

    Hello all,
    I haven't programmed in a while and I just got the free Netbeans 6.1 CD just for kicks and to try it out. I'm making a basic application for a store that one of my family members has. I was programming away as I could and right now I came to a conclusion... I think I maybe doing this wrong.
    I have done all the GUI using the Netbeans IDE plugin visual designer and I just click on the button and add the event and then I program away. But just right now I noticed another file that is called NameOfProgramApp.java. Then I look to the right and I have NameOfProgramView.java where I have been placing most of my code. Is this the right place to put the code???
    I think I maybe missing something or maybe doing some lousy code writing. Any help would be awsome. Is this where I put my Object Oriented think hat on to accomplish the correct way??
    Thanks in advance and it feels good to be back :D

    A general rule of thumb that I use it to think in layers...
    --GUI {What you show the use}
    --GUI code logic {local rules and edits}
    --WEB/Network {interface for multiuser}
    --BUSINESS RULES {rules and coding to make your business work}
    --DATABASE {where do you store your durable data}
    Granted, this is a very simplistic look, but it will get you a start a thinking process for your app.

  • Which is the correct way to reload data in a partition?

    I have a partitioned table and there's a particular partition which i need to remove the data and reload it again since we found out that parts of that partition had invalid data. Which is the best (valid) way to remove the old contents of the partition:
    1) to truncate the partition and then drop the tablespace it points into, and building again the tablespace and partition?
    or
    2) to simply delete the partition and rebuild it ?
    thanks

    A general rule of thumb that I use it to think in layers...
    --GUI {What you show the use}
    --GUI code logic {local rules and edits}
    --WEB/Network {interface for multiuser}
    --BUSINESS RULES {rules and coding to make your business work}
    --DATABASE {where do you store your durable data}
    Granted, this is a very simplistic look, but it will get you a start a thinking process for your app.

  • HT1338 Hi I would like to know which is the correct way to upgrade my imac.

    My operating system is Mac OS X 10.4.11 with processor GHz Intel Core 2 Duo Memory 1 GB SDRAM 667 MHzDDR2
    Thanks for the help

    Start by checking if you can run Snow Leopard:
    Requirements for OS X 10.6 'Snow Leopard'
    http://support.apple.com/kb/SP575
    The OS 10.6 Snow Leopard install DVD is available for $19.99 from the Apple Store:
    http://store.apple.com/us/product/MC573/mac-os-x-106-snow-leopard
    and in the UK:
    http://store.apple.com/uk/product/MC573/mac-os-x-106-snow-leopard
    but nobody knows for how long it will be available.
    When you have installed it, run Software Update to download and install the latest updates for Snow Leopard to bring it up to 10.6.8, or download the combo update from here:
    http://support.apple.com/kb/DL1399
    Check via Software Update whether further updates are required.
    You should now see the App Store icon in iTunes, and you now need to set up your account:
    http://support.apple.com/kb/HT4479
    To use iCloud you have to upgrade at least to Lion, but some functions are only available in Mountain Lion:
    http://support.apple.com/kb/HT4759
    You can also purchase the code to use to download Lion (Lion requires an Intel-based Mac with a Core 2 Duo, i3, i5, i7 or Xeon processor and 2GB of RAM, running the latest version of Snow Leopard), or you can purchase Mountain Lion from the App Store - if you can run that:
    http://www.apple.com/osx/specs/

  • I would like to read a text file in which the decimal numbers are using dots instead of commas. Is there a way of converting this in labVIEW, or how can I get the program to enterpret the figures in the correct way?

    The program doest enterpret my figures from the text file in the correct way since the numbers contain dots instead of commas. Is there a way to fix this in labVIEW, or do I have to change the files before reading them in the program? Thanks beforehend!

    You must go in the labview option menu, you can select 'use the local
    separator' in the front side submenu (LV6i).
    If you use the "From Exponential/Fract/Eng" vi, you are able to select this
    opton (with a boolean) without changing the labview parameters.
    (sorry for my english)
    Lange Jerome
    FRANCE
    "Nina" a ecrit dans le message news:
    [email protected]..
    > I would like to read a text file in which the decimal numbers are
    > using dots instead of commas. Is there a way of converting this in
    > labVIEW, or how can I get the program to enterpret the figures in the
    > correct way?
    >
    > The program doest enterpret my figures from the text file in the
    > correct way since the numbers contain dots instea
    d of commas. Is there
    > a way to fix this in labVIEW, or do I have to change the files before
    > reading them in the program? Thanks beforehend!

  • What is the best way to filter an IP from being blocked?

    What is the best way to filter an IP from being blocked by a false positive? Event Action Filter?

    I'll assume you really mean "blocked" as opposed to "denied". You can either create an event action filter and subtract the blocked action, or you can add the address to the "never block" addresses.

  • Filter or Restrict on? Which is the best way to put it?

    Hello Experts,
    If there is a Characteristic/Key figure on a report in BEx, and I right click on it and find another data element say, 0FISPER it I EDIT. On right click on 0FISPER I a variable.
    My question is this, do we way that the key figure is RESTRICTED ON 0FISPER
    or, key figure is FILTERED by 0FISPER
    When do we use Filter or Restrict on? Which is the best way to put it? How best is it read, please include the variable in your discussion.
    I will appreciate this clarification.
    e.g. Company code EDIT shows Company codes ZPPTcomp: with nodes  8000, 9000
    Thanks.

    Hi Amanda,
    as per my understanding,
    you are checking the structure field, you have selected edit then you are viewing a key figure and 0fiscper restricted by varaible. am I right?
    if this is the case this is local selection and the key figure is restricted by fiscper variable means the restriction value user can enter in selection screen. if you select 0fiscper and select restrict there you can see single values, value range and you can also see varaible tab. by using varaible tab you can restrict to variable value.
    hope this gives you some understanding.
    Sathya

  • Which of of these two choices is the correct way to call a report ?

    Environment is 9iAS.
    Which of of these two choices is the correct way to call a report from the menu?
    Choice 1) CGNV$INVOKE_REPORT('W02226.adinfra.net:8888,reports9i', 'rv043knd.rdf', CACHE, '', 'HTML',NULL );
    Coice 2) qms$menu.set_current_action('LAUNCH_REPORT','rv043knd.rdf'); execute_trigger('QMS$MENU_ITEM');

    although the menu-preference MNUDRC has the value qms$menu.set_current_action('LAUNCH_REPORT','<MODULE>'); execute_trigger('QMS$MENU_ITEM');
    the generated code for calling the report in the menu is like the code under option 1).
    What else do we need to set (in the preferences or elsewhere) to use the Headstart Report Launch Form ???
    thanks! Bart

  • What is the correct way to set up a new Mac

    A friend of mine recently migrated from Windows and bought himself an iMac. He got the local Apple store to set up his iMac and migrate his data from his Windows to his iMac. I was  recently helping him set up a few a additional things on his iMac and was supprised to see how the Apple store had set up the machine.
    There was only one account set up on the iMac and all of the user data had been loaded into this admin account. Now I've only been a Mac user for about 5 years, but I was always taught create an admin account with no data on it and then set up a separate user account(s) which contain all the user data and these are used by the users to log in.
    Now my question is who is right the Apple shop or me? I would e intertested to hear any experts views on the correct way to set up an OSX machine. 

    Both of you. Either way is acceptable. However, for a single user machine there's really no need to have more than the admin account.

  • 1.4.2 - What is the correct way to format output in the java.io.PrintStream

    With Java 1.4.2:
    What is the correct way to format output in the java.io.PrintStream?
    The following is incorrect, even though it is still used in the The JavaTM Tutorial at: http://java.sun.com/docs/books/tutorial/essential/
    System.out.formatThis returns "cannot resolve the method 'format'"
    Any detailed suggestions or information is greatly appreciated.

    The following is incorrect, even though it is still
    used in the The JavaTM Tutorial at:
    http://java.sun.com/docs/books/tutorial/essential/
    The whole format thing has been introduced in 1.5. The tutorial also states it's been "updated to 1.5.".
    That's all I've got to say for I don't know how you can format a PrintWriter, let alone a PrintStream, prior to 1.5. I'm not really sure there is any way. Any "legacy way", that is. There almost certainly are third-party API which achieve similar results.

  • OBIEE 11G Calculation the Correct Way

    Hi All,
    My requirement is like this that I want to calculate value Gross Profit which is simple Total Revenue - Total Expense. Now I want this to act as a Hierarchy i.e Gross Profit should be drill able to Total Revenue followed by Total Expenses. For this I created a Accounts Dimension table since no Drill Down facility is available on Fact Table(Therefore I had to move my Accounts to Dimension table rather than Fact Table). Now the problem is that there is no minus based aggregation present in OBIEE BMM layer because of which my all other sum based aggregation work correctly except where there is a negative based aggregation required like in the case of Gross Profit. Kindly Suggest what is the correct way to approach this problem. I am working on OBIEE 11g in this case.
    Warm Regards
    Abhishek Kapoor

    Financial reporting is difficult in BI because of the user preference of how to see signs on different accounts and requirements for adding/subtracting depending on the type of account.
    A few ways to approach:
    a. Use case statement to make total rev and total expense columns. Subtract to build a gross profit column. You can do this in the presentation services front end or the BMM.
    b. If you have opposite natural signs for rev and exp, you can create an account hierarchy in the account table which will net out to gross profit. Ex:
    Column 1 – account number
    Column 2 – hierarchy level 1, ex Gross Profit
    Column 3 – hierarchy level 2, ex Rev or exp
    Column 4 – account name
    Etc…
    c. Remember you can always build your own drilldown using navigation links to a report instead of the built-in drilldown.
    Good luck!

  • Is there one tell  me the correct way to access remote SQL server

    Hi
    I have tried to access a remote SQL server by many ways but all failed
    here is my trying :
    String driver = "com.microsoft.jdbc.sqlserver.SQLServerDriver";
    String url= "jdbc:microsoft:sqlserver://217.52.98.102:1433";
    Class.forName(driver);
    Connection conn = DriverManager.getConnection(url,"sa"," " );
    String selectStr = "select * from FleetWatch..table_name";
    Statement st = conn.createStatement();
    ResultSet rs = st.executeQuery(selectStr);
    DriverManager.registerDriver(new com.microsoft.jdbc.sqlserver.SQLServerDriver());
    // connect to the DB by using the driver.
    String connString = "217.52.98.102:1433;databasename=FleetWatch";
    String strDBConnect = "jdbc:microsoft:sqlserver://" + connString;
    conn = DriverManager.getConnection(strDBConnect, "sa", "");
    String driver = "com.microsoft.jdbc.sqlserver.SQLServerDriver";
    Class driverClass = Class.forName(driver, true, jdbcLoader);
    Driver currDriver = (Driver)driverClass.newInstance();
    Properties prop = new Properties();
    prop.setProperty("sa", (String)paras.get("sa");
    prop.setProperty("password", (String)paras.get(" ");
    String url= "jdbc:microsoft:sqlserver://217.52.98.102:1433";
    conn = currDriver.connect((String)paras.get(url, prop);
    pls tell if you know the correct way to access a remote sql server and
    access it befor tell me its step to ensure it's connect

    String driver = "com.microsoft.jdbc.sqlserver.SQLServerDriver";
    String url= "jdbc:microsoft:sqlserver://your servername:1433";
    Class.forName(driver);
    Connection conn = DriverManager.getConnection(url,"username ","password " );
    this user name and password may be diff becoz if u have only sql authentication then u have to know that user name or it can have windows nt authentication so if it is so then no probs can use ur windows nt login..
    know the server name where ur sqlserver is connected to.
    set the classpath for the sqlserverdrivers jar files which u have downloaded where ur working on.
    then it works
    i did the same and worked for me.
    try it.

  • What's the correct way to handle changes in RDBMS/DBadapter?

    In my project all changes to the database are not done via Jdeveloper but via TOAD. This means DBadapters must be made aware of changes in the database.
    I tried to re-run the DBad.apter wizard twice (2 different services) - to make it aware of changes in the DB. Both times it failed. I think was after the import database tab. The next tab was just blank.
    So what's the correct way of reconile changes in the db backwards into Jdev?
    BTW, in the DBadapter wiz its not possible the remove a already imported table. How do I come across the situation where I want the DBadapter to point to af different table? - and possibly remove old references to another one - which might have been removed in the DB.
    As It is now - I have to re-work all my DBadapters, which is not very much fun...
    Rgds, Henrik

    Trust me, I hv done that umpteen nbr of times.
    I hate BA's coming to me with changes, for which I hv to modify the DB adapter.
    One big loop-hole with BPEL is if we try to modify the adapters/toplink, it doesnt tend to work properly.
    The manthra for such modifications is ... "recreate", which is definetely not a good practise.
    You may not like but gottu live with it, my friend.
    Pointing to a different table, I achieve it by doing a "Shift+Delete" to all the references of the old table in the BPEL project ... :|
    There isnt a specific provision in the wzd (I am not sure of the latest version, though).

  • Ok, does anyone know the correct way to do this

    Hi all
    would someone beable to explain the correct way of attaching dynamic text to a rotaing menu so that the text moves with the image as it rotates,
    I am now being told that in order to have dynamic text rotate/move I have to embed the font, by placing a text field on the stage outside my flash area and then set embedFonts property to true, and then apply a textformat.
    first, is this the correct way of doing it?
    second, can someone please explain(by breaking down into steps, as I am a newbie) how I go about setting embedFonts property to true and applying a textformat.
    what I have created;
    1.)I created a movieclip called 'textHolder' inside this has two dynamic text fields called 'headerText'  & 'bodyText'  <<<<< IS THIS CORRECT?
    2.)I have an xml file which will load the text in as well as the images with the rotating menu, see below;  <<<IS THIS CORRECT????
    <?xml version="1.0" encoding="utf-8"?>
    <data>
      <image name="image 1" path="img/img1.jpg"
        textHolder.headerText="Sunset"
        textHolder.bodyText="The hour of night is near, as the skies get blood-filled" />
    <data>
    3.What I am missing is what script I need for the main.as file, can anyone help here?
    so to break down.
    I have a rotating menu that is driven by xml, that loads images on the menu. I would also like to load text to the left of each image, and have the text be fixed with the image as it rotates.
    I can post the as, but I would like to know if the above is correct first, if you would like to see the main script please say.
    I have attached a jpg layout to give you an idea as to what I am trying to explain. can someone please help!!!!!!!!!
    (this is my previous post: http://forums.adobe.com/thread/463213?tstart=0  but I feel its got lost a little along the way)

    MY CURRENT SCRIPT, CAN YOU SEE HOW TO ATTACH THE TEXT WITH THE IMAGE?
    package 
    import flash.display.DisplayObject;
    import flash.display.MovieClip;
    import flash.display.Loader;
    import flash.display.Sprite;
    import flash.events.Event;
    import flash.events.MouseEvent;
    import flash.net.URLLoader;
    import flash.net.URLRequest;
    import flash.net.URLLoaderDataFormat;
    import soulwire.ui.CircleMenu;
    public class Main extends Sprite
      //————————————————————————————————————————————— CLASS MEMBERS  VALUE
      public var circleMenu:      CircleMenu;
      public var xmlLoader:      URLLoader;
      //——————————————————————————————————————————————— CONSTRUCTOR
      public function Main()
      circleMenu = new CircleMenu( 300, 32, 14 );
      circleMenu.x = 150;
      circleMenu.y = 300;
      addChildAt( circleMenu, 0 );
      // Use URLLoader to load XML
      xmlLoader = new URLLoader();
      xmlLoader.dataFormat = URLLoaderDataFormat.TEXT;
      // Listen for the complete event
      xmlLoader.addEventListener(Event.COMPLETE, onXMLComplete);
      xmlLoader.load(new URLRequest("data.xml"));
      /*for (var i:int = 0; i < 20; i++)
        // MyMenuItem can be a symbol from your library
        // or any class which extends DisplayObject!
        var item:MyMenuItem = new MyMenuItem();
        item.txt.text = 'Menu Item ' + (i + 1);
        item.txt.mouseEnabled = false;
        item.buttonMode = true;
        item.addEventListener( MouseEvent.CLICK, onMenuItemClick );
        circleMenu.addChild( item );
      circleMenu.currentIndex = 4;*/
      // Enable the mouse wheel
      stage.addEventListener( MouseEvent.MOUSE_WHEEL, onMouseWheel );
      // Set up the UI
      ui.spacingSlider.addEventListener( Event.CHANGE, onSliderChange );
      ui.radiusSlider.addEventListener( Event.CHANGE, onSliderChange );
      ui.minAlphaSlider.addEventListener( Event.CHANGE, onSliderChange );
      ui.minScaleSlider.addEventListener( Event.CHANGE, onSliderChange );
      ui.scaleSlider.addEventListener( Event.CHANGE, onSliderChange );
      ui.itemsSlider.addEventListener( Event.CHANGE, onSliderChange );
      ui.spacingSlider.dispatchEvent( new Event( Event.CHANGE) );
      ui.radiusSlider.dispatchEvent( new Event( Event.CHANGE) );
      ui.minAlphaSlider.dispatchEvent( new Event( Event.CHANGE) );
      ui.minScaleSlider.dispatchEvent( new Event( Event.CHANGE) );
      ui.scaleSlider.dispatchEvent( new Event( Event.CHANGE) );
      ui.itemsSlider.dispatchEvent( new Event( Event.CHANGE) );
      //———————————————————————————————————————————— EVENT HANDLERS
      private function onXMLComplete(event:Event):void
      // Create an XML Object from loaded data
      var data:XML = new XML(xmlLoader.data);
      // Now we can parse it
      var images:XMLList = data.image;
      for(var i:int = 0; i < images.length(); i++)
        // Get info from XML node
        var imageName:String = images[i].@name;
        var imagePath:String = images[i].@path;
      //  var textInfo:TextInfo = new TextInfo(); 
    //      textInfo.headerText.text = images[i].@headerText; <<<<THIS IS WHAT i HAVE TRIED, GET ERRORS SO COMMENTED OUT
    //    textInfo.bodyText.text = images[i].@bodyText;
    //    addChild(textinfo);
                  //textInfo.x=120;
        //textInfo.y=300;
        var sp:Sprite=new Sprite();    <<<<<<<< THIS IS SCRIPT JUST ADDED
        var tf:TextField=new TextField();
        tf.wordWrap=true;
        tf.width=200;
        var ldr:Loader=new Loader();
        addChild(sp);
        sp.addChild(tf);
        sp.addChild(ldr);
        ldr.x=tf.width+10;
        // Load images using standard Loader
        var loader:Loader = new Loader();
        // Listen for complete so we can center the image
        loader.contentLoaderInfo.addEventListener(Event.COMPLETE,onImageComplete);
        loader.load(new URLRequest(imagePath));
        // Create a container for the loader (image)
        var holder:Sprite = new Sprite();
        holder.addChild(loader);
        // Same proceedure as before
        holder.buttonMode = true;
        holder.addEventListener( MouseEvent.CLICK, onMenuItemClick );
        // Add it to the menu
        circleMenu.addChild(holder);
      private function onImageComplete(event:Event):void
      var img:Loader = event.currentTarget.loader;
      img.content["smoothing"] = true;
      img.x = -(img.width/2);
      img.y = -(img.height/2);
      private function onMouseWheel( event:MouseEvent ):void
      event.delta < 0 ? circleMenu.next() : circleMenu.prev();
      private function onMenuItemClick( event:MouseEvent ):void
      circleMenu.scrollToItem( event.currentTarget as DisplayObject );
      private function onSliderChange( event:Event ):void
      switch( event.currentTarget )
        case ui.spacingSlider:
        circleMenu.angleSpacing = event.currentTarget.value;
        break;
        case ui.radiusSlider:
        circleMenu.innerRadius = event.currentTarget.value;
        break;
        case ui.minAlphaSlider:
        circleMenu.minVisibleAlpha = event.currentTarget.value;
        break;
        case ui.minScaleSlider:
        circleMenu.minVisibleScale = event.currentTarget.value;
        break;
        case ui.scaleSlider:
        circleMenu.activeItemScale = event.currentTarget.value;
        break;
        case ui.itemsSlider:
        circleMenu.visibleItems = event.currentTarget.value;
        break;

  • XFI Drivers - Whats the correct way

    Considering that after I installed my XFI Extreme music card into my PC and installed the drivers from the CD played games, rebooted and it asks me to reinstall the drivers for the multimedia device.
    What is the correct way to install drivers for these cards so that you can reboot your computer without it freaking out?
    The only way i've been able to successfully keep the XFI installed is by doing these things in order.
    Uninstalling the software
    Uninstall the drivers via the CD uninstall tool
    Cleaning the registry with aggressi've options (JV 6 power tools)
    Using Driver Cleaner Pro and removing all creative audio and Creative audio lite files.
    turning the machine off and moving the Sound blaster card to another PCI slot.
    Turning back on and using the drivers off the CD.
    If i use any other drivers, the Web update 2 or Beta 3, the card will not install.
    this is on this system:
    AMD Barton CPU 2500+
    ASUS A7n8X-x motherboard 00 bios rev
    WD800 80 GB hard dri've
    Nvidia Geforce 6600 GT vid-card
    GB IBM ram

    Well this is a strange problem... So what you are essentially saying, is that Windows doen't keep the the records of your newly installed hardware... Or the hardware may be assigned to new resources after restart, which might cause the Installation to commence.
    The 2nd can happen pretty often on an ACPI System, or if you change the "Plug and Play OS" section in your BIOS Setup. But even if this happens, Windows should have still kept the Installation Information in its registry, so it wouldn't bother you searching for the drivers.
    So I believe it has to lie with your Windows installation...
    What exactly do you mean with "the card will not install" with the newer drivers? Are you getting an error message?
    Have you tried the?infamous manual installation? (Extract your downloaded drivers, then go to the \Drivers subfolder and execute Setup from there. Select the "...Creative shared files" option.)

Maybe you are looking for

  • One of the USB devices have malfunctioned and windows does not recognize it---MESSAGE

    Upon plugin, One of the USB devices attached  has malfunctioned and window does not recognize it message is displayed.  I have tried different settings with the USB driver.  Have reset the ipod. Have reinstalled itunes on computer and ipod. HELP PLEA

  • BBM NOT WORKING! URGENT

    For about 3 weeks now my bbm has been very unstable. all of a sudden at times it stops functioning, Recent updates stop coming through, messages stop coming through.. please help, it is Extremely Urgent!!

  • HP Photosmart 7450 Driver

    Please can some-one provide me with a link to download a driver for  an HP Photosmart 7450 for Windows 7 (64). I have tried the HP site, but said not available as a download and other sites want you to first downloaded all there crap which I have to

  • I recently downloaded Photoshop Elements 9. Should I buy Elements 11?

    Should I first try to grasp all the major fundamentals in "9" or go right to "11"? Is it earier or more user friendly?

  • Camera 9320 cannot take pictures

    my bb is not even ^ months old and my camera first started showing error 5 pictures remaining even though there were no pictures in the folder. when i remove my battery after i have taken a pic it deletes the camera pics automatically. now there is n