Simple Access List Not working

trippk · ‎10-31-2002

I am creating a simple access list on a Cisco Catalyst 3550 :

access 1 permit 192.168.168.254

access 1 deny 192.168.168.35

Then I apply it to the specific port:

access 1 in

But I can still ping IP address .35 from the machine on the port in question and from the computer with that IP address, I can ping back. This is very frustrating. Can someone tell me what I am doing wrong?

Thanks In Advance,

Tripp K.

o.hassairi · ‎11-01-2002

can u copy & paste exactly the config of your acl

Report Inappropriate Content · ‎11-01-2002

Is the net 192.168.168.0 subnetted or are the hosts on the same network?

Anike

trippk · ‎11-01-2002

The hosts are on the same network

glen.grant · ‎11-04-2002

If they are on the same subnet and switch then it's probably never even hitting the processor so the ACL will not work . ACL's are meant for traffic generally going off the subnet . If you are just trying to ping a computer on the same subnet the switch will just look in the mac table and switch it and it doesn't bother with the processor . Someone correct me if i am wrong . I am not real familiar with the 3550 so maybe i am missing something .