Good afternoon!
On a Flint2 with -op24 firmware ( V4.7.5-op24), I would like to restrict access to an XVR device connected to say lan5 using 802.11q, another RFC1918 range and the DMZ feature to allow restricted access from external monitoring points to limit the blast radius should the XVR gets compromized. Since I've not been using DSA and swconfig for more than 3 years, I would be grateful for guidance or answers of the following questions:
- What is the proper sequence of steps to create a VLAN on the router so that the router itself acts as a switch and isolates the L2 traffic to the lan5 port from the remaining LAN ports and leave the rest unaffected or in another VLAN if not possible.
- Shall I create the DMZ first or the L2 VLAN?
Many thanks!