Setup a Seperate Guest SSID

StarOfWest · Created Aug 8, 2018 14:51:33

Hello,

You can use ACL to deny the traffic from one vlan to another.
If you consider 192.168.1.0 belongs to vlan 10 and 192.168.2.0 belongs to vlan 20, the following config, will deny the traffic from VLAN 10 to VLAN 20.
In the same fashion, you can deploy a mirror configuration for traffic originating from vlan 20 to vlan 10.

<HUAWEI> system-view
[HUAWEI] acl 3000
[HUAWEI-acl-basic-3000] rule permit ip source 192.168.1.0 0.0.0.255 destination 192.168.2.0 0.0.0.255
[HUAWEI-acl-basic-3000] quit
[HUAWEI] traffic classifier c1
[HUAWEI-classifier-c1] if-match acl 3000
[HUAWEI-classifier-c1] quit
[HUAWEI] traffic behavior b1
[HUAWEI-behavior-b1] deny
[HUAWEI-behavior-b1] quit
[HUAWEI] traffic policy p1
[HUAWEI-trafficpolicy-p1] classifier c1 behavior b1
[HUAWEI-trafficpolicy-p1] quit
[HUAWEI] interface vlanif10
[HUAWEI-vlanif10] traffic-policy p1 inbound

S_Noch · Created Aug 30, 2021 02:51:09

Nice

kunthea · Created Aug 30, 2021 03:07:17

Good post

IndianKid · Created Aug 31, 2021 12:57:01

good question, thanks for asking

Unicef · Created Aug 31, 2021 13:18:40

Setup a Seperate Guest SSID

Third Party’s Trade Secret

My Followers

Enterprise

Consumer

Corporate

Carriers

Setup a Seperate Guest SSID

Third Party’s Trade Secret

My Followers