Skip to main content
Norris
Norris
New Member
April 9, 2024
Solved

Block access to any IP in the same VLAN

  • April 9, 2024
  • 1 reply
  • 1652 views

Please guide me to block an IP 10.84.161.2 in the same vlan. I have created the rule as above but machines in the same vlan can still see each other. Please help me

Screenshot 2024-04-09 151425.png

 

Best answer by ozkanaltas

Hello @Norris ,

 

If you use FortiSwitch or Software Switch on FortiGate you can use the block intra-vlan feature.

 

if you don't use FortiSwitch, there is no option except this. Because this is normal behavior for the same broadcast domain Traffic.

 

https://docs.fortinet.com/document/fortiswitch/7.4.2/fortilink-guide/801169/blocking-intra-vlan-traffic#:~:text=Go%20to%20Network%20%3E%20Interfaces.,intra%2DVLAN%20traffic%20under%20Network.

 

 

1 reply

ozkanaltas
ozkanaltasAnswer
Valued Contributor III
April 9, 2024

Hello @Norris ,

 

If you use FortiSwitch or Software Switch on FortiGate you can use the block intra-vlan feature.

 

if you don't use FortiSwitch, there is no option except this. Because this is normal behavior for the same broadcast domain Traffic.

 

https://docs.fortinet.com/document/fortiswitch/7.4.2/fortilink-guide/801169/blocking-intra-vlan-traffic#:~:text=Go%20to%20Network%20%3E%20Interfaces.,intra%2DVLAN%20traffic%20under%20Network.

 

 

    Norris
    NorrisAuthor
    New Member
    April 9, 2024

    Thanks so much

    Terms & ConditionsAccessibility statement