I am using the business Clearos with the latest version. I have many vlans. I want my vlans to not be able to see each other. For instance v60 is for guest, v30 voip, v20 wireless students, 01 default.

All are tagged except the default.

I was reading on this page. https://www.clearos.com/resources/documentation/clearos/content:en_us:7_ug_network

I do use 1 to 1 Nat.

Will these instructions work flawlessly. I wish vlans were issolated by default.

below are the instructions incase the link does not work

Thanks,
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Configuration Extras
Isolating LAN's and VLan's
By default all LAN's and VLAN's can communicate with each other. It you want to isolate them, create a file /etc/clearos/firewall.d/05-isolatedlans and in it put:

#!/bin/bash

# Source networking configuration.
. /etc/clearos/network.conf

# Bail if not ipv4
if [ "$FW_PROTO" != 'ipv4' ]; then
return 0
fi

if [ -n "$LANIF" ]; then

# Add isolation rules
for iLAN in $LANIF; do
for oLAN in $LANIF; do
if [ "$iLAN" != "$oLAN" ]; then
$IPTABLES -I FORWARD -i $iLAN -o $oLAN -j DROP
fi
done
done

fi

# Really all the above should be inserted below the existing "RELATED,ESTABLISHED" rule
# but this is a dirty fix. Delete the existing and add a new one.
$IPTABLES -D FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
$IPTABLES -I FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
Then restart the firewall with a:

systemctl restart firewall.service