I would like to know how to block routing between subnets on my Ubiquiti EdgeRouter. These subnets are on 6 different VLANs, and the layout goes like this:
VLAN 1 - 10.0.0.1/24 (management)
VLAN 100 - 10.1.1.1/24
VLAN 200 - 10.2.1.1/24
VLAN 300 - 10.3.1.1/24 (guest network)
VLAN 400 - 10.4.1.1/24
VLAN 450 - 10.4.2.1/24 (guest network)
I want VLAN 1 to have access into all the other networks, since it is the management network, and access to it is heavily secured, but I do not want any of the other networks to be able to talk to each other at all.
I would also like to allow a group of admin computers access to any subnet either from VLAN 200's subnet, or ideally, from any subnet (based on MAC address I suppose..)
I feel like this should be fairly simple to implement via some form of ACLs or Firewall rules, but I do not have a strong enough grasp of these concepts to implement this at this point in time.
Thanks in advance for your help!