svi vlan acl question

[unique3ziz]

hello guys

i have a core switch that has 2 vlans configured as svi

vlan 101 for ip cameras

vlan 10 which is data vlan

now i want to create an ACL to block access from vlan 10 to vlan 101, and only allow host 192.168.10.7 to access the cameras vlan. however, im finding some difficulties regarding where to put the acl-group. when i try to put it as inbound in vlan 101 it doesn't work.

i hope someone can explain to me what is the best approach in the scenario.

thank you,

[balaji.bandi · Accepted solution]

You need to configure this on VLAN SVI - depends on which direction the traffic going - so you will decide IN or OUT

IN - inbound means traffic coming to the SVI ie. traffic from clients in that vlan.

OUT - traffic going from the SVI ie. traffic going to clients in that vlan.

Some example explained here :

https://community.cisco.com/t5/switching/pls-explain-svi-acl-source-and-destination-direction/td-p/2365577

Still not working - post the configuration here to understand the issue.,

[unique3ziz]

Thank you. Good explanation