Comware

I have few devices that need to be isolated from rest of the network and ONLY talk to the server. Currently they are on main LAN (accessible by any client)

Normally I would move them to a separate dedicated VLAN (with restricted ACLs), but I cannot get to them (as I do not have management software)

The devices are connected via own unmanaged switch to a single port on satellite Procurve 2920 (which then connects via fibre to core 5900AF stack where the server VM connects)

devices to be isolated --> unmanaged switch --> Procurve 2920 -fibre_link-> 5900AF --> Windows Server VM

filter source-port could be used on Procurve, but how do I then do it in Comware?

Thanks

Seb

In the end (as there were no "takers" here with any suggestions), I had to pay external company to move the devices to different subnet (which also mean I could move them to own VLAN)

Seb

------------------------------
spgsitsupport
------------------------------

Original Message:
Sent: Dec 08, 2022 05:01 AM
From: spgsitsupport
Subject: Port isolation from satellite Procurve to core Comware

I have few devices that need to be isolated from rest of the network and ONLY talk to the server. Currently they are on main LAN (accessible by any client)

Normally I would move them to a separate dedicated VLAN (with restricted ACLs), but I cannot get to them (as I do not have management software)

The devices are connected via own unmanaged switch to a single port on satellite Procurve 2920 (which then connects via fibre to core 5900AF stack where the server VM connects)

devices to be isolated --> unmanaged switch --> Procurve 2920 -fibre_link-> 5900AF --> Windows Server VM

filter source-port could be used on Procurve, but how do I then do it in Comware?

Thanks

Seb