OLD VLAN and New VLAN - Want no communication

[SCC]

Hi All,

I have a bunch of servers and users in OLD VLAN currently. The requirement is that i need to move the data from OLD servers to new VLAN but i can't have the OLD VLAN talk to the New VLAN. But once everything is copied to the new servers on the new VLAN. I can then remove the OLD VLAN and OLD Servers completely.

During this process , I am going to have the NAS drive also which needs to be talk to the OLD VLAN as well as to the New VLAN. I think that can be acheived as NAS is going to have the two NIC's. So i will configure each NIC in the OLD and NEW VLAN. So that i can access the NAS from OLD and New VLAN both.

Please advise if this is something possible.

[Wickus]

Hi SCC

How will you get the data from the old vlan to the new vlan. From my understanding is you want to copy the data from the old servers to the new servers so you need access between the 2 vlans unless you copy the data to he NAS then from the NAS to he new vlan.

If that's the case then I'm sure you can create an access-list denying any ip traffic between the 2 vlans.

Is it a MX or Switch

Thanks

[SCC]

The thing is that there is some issues with the domain controller. Therefore, I dont want the old VLAN talk to the new VLAN. This has to be done under Firewall rules, to block the communication between the OLD VLAN and New VLAN, except RDP is allowed between OLD and New VLAN.

[Wickus]

What meraki device are you using

[SCC]

MX84 and MS120 switches.

[Wickus]

Is the layer3 / gateway ip address configured on the MX84 or is the switch enabled for L3

[SCC]

MX84

[Wickus]

On the MX84 goto Security & SD-WAN. under Configure click Firewall

under Layer 3 you can add the following

[SCC]

Is this what i am supposed to do on the MX84

OLD VLAN 10
NEW VLAN 20

Firewall Rule

Source 10.10.10.0/24 Deny All except 3389 to Destination 10.10.20.0/24

Source 10.10.20.0/24 Deny All except 3389 to Destination 10.10.10.0/24

[cmr · Accepted solution]

You'll need to allow 3389 as per @Wickus comment for both then underneath deny all for both, so 4 rules in total.