Router vs Firewall

Quick question: Can a router be told not to route from specific subnets to other subnets, or is that a firewall only thing? EG:

192.168.30.x -> 192.168.100.x allowed 192.168.30.x -> 192.168.101.x not allowed
Reply to
timbrigham
Loading thread data ...

In article , snipped-for-privacy@gmail.com wrote: :Quick question: :Can a router be told not to route from specific subnets to other :subnets, or is that a firewall only thing? :EG: :192.168.30.x -> 192.168.100.x allowed :192.168.30.x -> 192.168.101.x not allowed

It depends on the router. Cisco's term for this would be Policy Based Routing (PBR). It would look something like (approximately)

access-list 101 permit 192.168.30.0 0.0.0.255 192.168.101.0 0.0.0.255

route-map RestrictMap 10 match address 101 route-map RestrictMap 10 set interface Null0

That is, you would take the flows you do not want, and send them to the bit bucket.

Reply to
Walter Roberson

If there is no corresponding entry in the routing table, then a router will not route into a network.

If you want routes like "from A to B, from A to C, but not from B to C" then sometimes you need filtering.

Yours, VB.

Reply to
Volker Birk

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.