0

There is a network with five nodes on one interface. These nodes should not be accessible to each other. An option is to use an ACL, but is there another way?

Improve this question
1
  • "these are virtual hosts on server." That, unfortunately, is off-topic here. You could try to ask about that on Server Fault for your business network. Hosts on the same network do not send traffic to a router or firewall where the ACL could be applied, they send traffic directly to each other.
    – Ron Maupin ♦
    Commented Jun 26, 2020 at 12:48

1 Answer 1

Reset to default
6

If the hosts are in the same VLAN and the switch they are connected to support it, there's a feature made precisely for this case: private vlan

This allow the devices to communicate with remote networks but not with each other.

As explained in the linked article private VLAN is the name of the feature in Cisco world. Some other vendors have the same feature with another name, mainly port isolation

Improve this answer
2
  • Thank you for answer. Yes, I know about Privat VLAN, but these are virtual hosts on server. And I don't have access to it. I think the support group for these VMs is not going to configure the Privat VLAN on its own and asks the NOC for this.=))
    – Ruslan
    Commented Jun 26, 2020 at 12:45
  • 3
    The ASA is a gateway, communication between hosts in the same layer 2 network doesn't go to the gateway, but is done directly between host, so you can only act on the hosts or the (virtual) switch. If the team that manage the switch is not cooperative, we cannot help you much.
    – JFL
    Commented Jun 26, 2020 at 13:10

Not the answer you're looking for? Browse other questions tagged or ask your own question.