I have Class C networks 192.168.1.0 - 192.168.40.0
192.168.40.0 is a remote location connected via T1 to another T1 router and then connects my network via VLAN 555. On the 6509 MSFC interface VLAN 555. I want add access group in where only 192.168.1.0, 192.168.3.0, and 192.168.5.0 can access 192.168.40.0.
First should I use a VACL or a regular ACL
Would it look like this
int VLAN 555
ip access-group 10 in
access-list 10 permit ip 192.168.1.0 0.0.0.255
access-list 10 permit ip 192.168.3.0 0.0.0.255
access-list 10 permit ip 192.168.5.0 0.0.1.255
or do I have to add 192.168.40.0 as well, I am thinking no but I am not sure. Also, say the WAN Links are 10.200.100.2 and 10.200.100.3. Woud I have to add that net to the access-lists.
Thanks
