ciscl acl
i have 3 core switches having 40 vlans
users in vlan 40 only communicate with vlan 40 and other should be deny except one ip 192.168.5.25 can access to vlan. no hsrp for the vlan 40 configured.
root bridge for vlan 40 is core 3 switch. i try various ways but i am not able to do exact and specific filtering. please suggest.
Software/Hardware used:
cisco 4506 switches
users in vlan 40 only communicate with vlan 40 and other should be deny except one ip 192.168.5.25 can access to vlan. no hsrp for the vlan 40 configured.
root bridge for vlan 40 is core 3 switch. i try various ways but i am not able to do exact and specific filtering. please suggest.
Software/Hardware used:
cisco 4506 switches
ASKED:
September 25, 2009 4:23 AM
UPDATED:
September 25, 2009 1:05 PM
Answer Wiki:
the access list will be
suppose the vlan 40 ip address range is 192.168.2.0/24
then
ip access list extended vlan 40
permit ip 192.168.2.0 0.0.0.255 192.168.2.0 0.0.0.255
permit ip 192.168.2.0 0.0.0.255 host 192.168.5.25
on root bridge
int vlan 40
ip access-group vlan 40 in
that's it
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
