I want to divide my network into smaller segments.
I want to use our HPE FF 5700-40XG-2QSFP+ switch as the router. It runs comware 7.
VLAN 101 for servers, using 10.101.0.0/16, interface ip 10.101.1.100
VLAN 102 for building A, using 10.102.0.0/16 interface ip 10.102.1.100
VLAN 105 for building D, using 10.105.0.0/16 interface ip 10.105.1.100
At the moment all VLANs can talk to each other.
VLAN 102 to have access to VLAN 101
VLAN 103 to have access to VLAN 101
VLAN 105 to have access to VLAN 101
But I want to make sure they can not reach each other.
So no traffic from VLAN 102 to VLAN 103 or VLAN 104 etc.
I wanted to try this, but failed:
- create a VPN instance for each VLAN, so it will have its own routing table
- for each VPN instance: create a route between the VPN instance and the VPN instance of VLAN 101
I also tried doing it with policy based routing and ACL's but I was also not able to figure that out.
Maybe that's not the way to go, or maybe I'm not doing it right.
Who can help me figure this out? It seems so basic..