Allow new connection one way, block new connections the other way. (between vlans)
Last week I dove in to Omada, as a good replacement for my pfSense setup that was running on my server.
The short reason behind is, when I needed to update the server, I wont have any internet access. Together with the comming of 1gbit fiber, I found it a good idea to set this up.
Sofar my experience has been great, I see that some stuff is still mising, or nog fully finished. One of these I want to point out.
As noted above, I have the router 7206. Where Wan & Wan/Lan 1 are my Wan ports, and Wan/lan 2, Wan/lan 3 & LAN are my lan ports.
I currently have connected my server directly to my router on Wan/lan 2 and my switch (SG2008P) on LAN.
To block traffic between vlan's I have setup Switch ACL. But what I want to do: Block connection made from Linux VLAN to Windows VLAN, but allow connection made from Windows VLAN to Linux VLAN. To manage the Linux servers. The same goes for connections made from Linux/Windows to Lan should be blocked, but connection made from LAN to Linux/Windows should be allowed.
Any tips on how to set this up in the omada software?
I also noticed that Switch ACL doesn't apply between LAN ports on the router, would be nice if that worked to.