Set up a network, as shown in figure, there is a bridge, and vlan, use external IP that same segment to ping vlan IP (192.168.3.2) equipment, bridge, will respond to the ICMP reply, how to set up can make bridge will not respond to external access to a vlan IP?
Bridge, there are other useful, can not take away,

CodePudding user response:

Write the ACL.. Don't let the message out to cough up

CodePudding user response:

Content is wrong, should be, external ping vlan 192.168.50.3, bridge, receive message and reply, is this why?

CodePudding user response:

The network diagram didn't see, brige is a kind of connection mode, a vlan is a virtual subnet, where no picture on this picture? A device is located? Is also a device eth0.2? Br0? A device is also three?

CodePudding user response:

reference Iforgetmyid reply: 3/f

didn't see the network diagram, brige is a way of connection, a vlan is a virtual subnet, where no picture on this picture? A device is located? Is also a device eth0.2? Br0? A device is also three?

the three are nic device,

CodePudding user response:

reference 1st floor QCJQTVB response:

writing acls.. Don't let the message go out to cough up

ACL not too clear, filtering the iptables, want to know why respond to external Vlan IP, in addition to the other other firewall have?

CodePudding user response:

Through the ACL can realize control

CodePudding user response:

Solved using iptables,

CodePudding user response:

Solved using iptables,