topic Re: Restricting VLAN Access in Switching

Restricting VLAN Access

anish.gupta11 — Thu, 20 Jul 2023 07:06:38 GMT

Hi All,

I have 2 vlans say 50 (172.20.50.x) and 60 (172.20.60.x) and I want them to be accessible by following ip address from other vlans:

172.20.70.7 (Vlan-70)

172.20.80.8 (Vlan-80)

Also i want vlan 50 and 60 hosts to be able to communicate to all the network. I want to do this using ACL.

Can someone suggest it.

I am able to restrict the access to vlan 50 and 60 by the requested IP. But now vlan 50 and 60 cannot reach to any other ip in the network.

Can you please help.

Re: Restricting VLAN Access

Flavio Miranda — Thu, 20 Jul 2023 09:09:56 GMT

Hi @anish.gupta11

The information is not clear. You are mentioning on the first part you want the vlan to be accessible by vlan 70 and 80 and between 50 and 60 but then you are trying to restrict?

Is this a PacketTracer Project? If Yes, attach here. Zip it first

Re: Restricting VLAN Access

MHM Cisco World — Thu, 20 Jul 2023 09:19:40 GMT

Hard task especially with regular acl not FW.

Any way I need to know the traffic types between this vlan and other vlan

Re: Restricting VLAN Access

anish.gupta11 — Mon, 24 Jul 2023 02:54:28 GMT

172.20.70.7 (Vlan-70),172.20.80.8 (Vlan-80) can access vlan 50 (172.20.50.x) and vlan 60 (172.20.60.x)or any type of traffic is allowed.

Also 50 (172.20.50.x) and 60 (172.20.60.x) does not have any restriction while communicating anywhere irrespective of the traffic.

However

Re: Restricting VLAN Access

Richard Burts — Mon, 24 Jul 2023 14:15:07 GMT

I am not clear what is going on. Would you post the configuration (masking any sensitive information such as Public IP address or passwords).