Block traffic per interface

You can block network traffic to or from specific IP addresses or Classless Inter-Domain Routing (CIDR) ranges across all Cloud Connector network interfaces.

This feature allows you to restrict communication with specific IP addresses or CIDR blocks directly on the Cloud Connector. When configured, the edge node blocks matching traffic across all network interfaces, helping enforce network security policies and prevent unwanted or malicious connections.
This feature blocks traffic from LAN to WAN and between different LAN subnets.

Note:

The block traffic feature does not block traffic within the same subnet (intra-subnet). Use MAC address blocking for that use case.

Procedure

  1. On the Edge Nodes Details page, click the Network tab.
  2. On the Network tab, select an interface from the interface chooser.
  3. On the More Action menu, click Block traffic.
    Oracle ECP opens the block traffic drawer.
  4. Click Add setting.
  5. In the IP or IP with CIDR or FQDN field:
    • By default, IP or IP with CIDR is selected
    • Optionally, open the drop-down and select FQDN
  6. In the input field below, enter:
    • An IP address or CIDR block, or
    • A fully qualified domain name (FQDN), based on your selection
  7. Select the check mark (✓) in the Actions column to add the blocking rule.
  8. (Optional) Repeat steps 4–7 to add additional blocking rules for up to 100 IP addresses or CIDR blocks.
  9. Click Update to apply the configuration for this edge node.