VLAN routing firewall rules

Routers
1

Alta newbie here. I’d like to restrict IOT traffic requests to the default VLAN but have the ability for the default VLAN device to request/control a IOT device and get the communication. back. Does any one have a sample on how to set that up on the Alta Route 10?

Would love to see something like this YouTube video.

2

Setup 2 firewall rules in the order:

  1. ALLOW Secure VLAN to IOT VLAN
  2. DROP IoT VLAN to Secure VLAN

This allows anything from 10.10.10.0/8 (secure / trusted vlans) to Iot VLAN on 192.168.20.1/26 subnet

allow def to iot
allow def to iot564×914 56.9 KB

This rule stops IoT VLAN communicating with the secure/Trusted subnets

dropiot
dropiot542×910 57.8 KB

3

Isolation option should be set to off by default, but in any event this was set to on, ensure the slider is set to “off” for those respective vlans.

@anon77415413 referenced this concern not too long ago.

https://forum.alta.inc/t/network-isolated-question/3922

4

How is the unspecified Protocols interpreted. All/Any or Nothing?

5

As of now, not specifying a protocol is equivalent to specifying UDP and TCP.. That’s a bug though and presumably in the next release will instead be equivalent to any.

6

Ah, ok. :+1: