Is it possible for a device on one VLAN to connect to a web server on a different VLAN on FWG.

Follow

jdunn213

• January 07, 2022 20:12

I have my home network segmented into several different VLANs.  I have a home network, and IoT Network, Home lab network for work related things, and a Proxmox server network.  All on separate VLANs.  I was wondering if its possible for me to have my lab computer on my home lab network to be able to access a Web Server VM hosted on my Proxmox server VLAN?  I have other things running on my Proxmox server and only want specific things to be accessed by specific devices on different VLANs.  I've created rules that "Allow" my work device on my Home Lab VLAN to access my Proxmox VLAN but I can not ping the server and when I try to connect to the server ip in a web browser it times out. Just trying to figure out if this is possible with the Gold before I continue down the rabbit hole. 

0

• 

  James Willhoite

  • January 07, 2022 20:31

  Depends, do you have a block rule for every LAN/VLAN?

  Ex: LAN 1 block to and from VLAN1
  VLAN 1 block to and from LAN 1

  Or is it just VLAN1 block to and from LAN1?

  0

  Comment actions Permalink
• 

  jdunn213

  • January 07, 2022 20:36

  I have `to and from` block rules between certain VLANs such as my IoT VLAN and my Home Network VLAN.  But when it comes to my Home Lab VLAN and Proxmox VLAN I have allow from both to each other and no blocks in place.  

   

  0

  Comment actions Permalink
• 

  Pcpartsg

  • January 11, 2022 12:21

  I have segmented my network with several VLANs and established specific rules for one device to access devices on another VLAN.

  example: using mopidy / snap clients, which are in there own VLAN (5), no need for internet.

  this means updates have to be provided by another system (using Apt-Cache-NG) in LAN, which is on another VLAN (3).
  because raspberries have no Real Time clock, they also need to get the time from an NTP Server (same as the update server). I have cron jobs running, which are based on time and so it has to be correct.

  my rule for this scenario is in the VLAN 5
  - block Traffic from & to Internet
  - alllow VLAN 5 to ip@ of device in VLAN3 bi-directional.

  with that I can update the raspberries, using the  multiroom audio system and get the time updated.

  0

  Comment actions Permalink

Please sign in to leave a comment.