c/mikrotik · by Corsair@programming.dev · 1y

Router, Route traffic in one way ?

Hi,

Is it possible in a router to route traffic from one specific node ( here the laptop to the DVR) but not the other way around ( DVR to 192.168.10.0/28 ) ?

        192.168.10.1/28             
            ┌──────┐                
            │laptop│                
            └───┬──┘                
                │                   
                │                   
                │                   
                ▼                   
             ┌──────┐               
        ┌────┤router├──┐            
        │    └──────┘  │            
        │              │            
        ▼              ▼            
     ┌──────┐        ┌───┐          
     │server│        │DVR│          
     └──────┘        └───┘          
192.168.10.2/28      192.168.20.1/28
                             ──

Meaning, I want to keep the DVR in it's subnet only. But allow the laptop to reach it.

Thanks.

5 points · 4 comments · view on lemmy.world

4 Comments

fraksken@infosec.pub · 2 pts · 1y (2 replies)

Yes. With either VLAN or simple firewalling.

Corsair@programming.dev · 1 pts · 1y (1 reply)

Thanks @fraksken@infosec.pub

with Firewall I get how to do it, but with VLAN ??
I was thinking an access port could be only on VLAN at the time no ?

fraksken@infosec.pub · 1 pts · 1y

Port trunking allows a port to allow multiple VLAN tags to pass over it.

Corsair@programming.dev · 1 pts · 1y

a more accurate diagram of what I'm targeting..

┌──────┐       ┌───────┐         ┌───┐  
│Node 1│       │Node 2 │         │DVR│  
└──┬───┘       └┬──────┘         └─┬─┘  
   │            │                  │    
   │            │                  │    
vlan10         vlan10             vlan20
   │            │                  │    
   └─────────□  □  □───────────────┘    
             ┌───────────┐              
             │hEX refresh│              
             │E50UG      │ □            
             └───────────┘              
                 □                      
                 │                      
                 │                      
                 │                      
              trunking                  
                 │                      
                 │                      
                 │                      
                 □                      
               ┌───┐  □                 
               │hEX│  □                 
               └───┘  □                 
                      □

□ = port

So it should be possible for Node 1 to reach DVR ? Either trough Firewall or VLAN rules ?