Firewall/NAT

Good Evening...

My configuration is as follows -- Cisco switch connected directly to my MW 1.3 router, I have 2 VLAN's (Network-Guest and Network-Private). I am trying to find a way to keep the two VLAN's completely separate... Do I need to create rules on each VLAN interface to block the other interface, or is there a simple way?

The goal is, objects on the Guest network cannot talk to objects on the Private Network and vice-versa.

Justin

[NOT]

It would be set in the firewall rules.

For VLAN1 outbound add destination NOT VLAN2 and for VLAN2 outbound add destination NOT VLAN1.

Link to an example in the MW docs. Not the same setup but will have the same effect.

http://doc.m0n0.ch/handbook-single/screens/firewall/rules/dmz-rule.png