02-21-2002 09:57 PM - edited 03-01-2019 08:35 PM
I have to setup 32 Vlan, which will represent 32 seperate offices. I wish to allow each of the VLANs to access the internet and VLAN 1, but not to access the other client VLANs.
Does any know if this is possible?
Thanks in Advance
02-21-2002 10:17 PM
Yes, apply ACL to RSM.
02-21-2002 10:27 PM
Sorry I should have explained this better,
it is going to be an external 2651 w/ daul 10/100 ports and 2 x Cisco 2950T 24 x 10/100 2x 10/100/100
Would I have to apply access list to each virtual interface?
02-21-2002 10:51 PM
Yes. You have to enable ip routing for other VLAN to access VLAN 1 and Internet, and ACL must be used to block traffc between those VLANs.
For example, if you use following address scheme:
VLAN1: 192.168.1.0 /24
VLAN2: 192.168.2.0 /24
...
VLAN32: 192.168.31.0 /24
Configuration of the router:
interface f0/1.2
encapsulation dot1q 2
ip address 192.168.2.254 255.255.255.0
ip access-group 101 in
interface f0/1.2
encapsulation dot1q 3
ip address 192.168.3.254 255.255.255.0
ip access-group 101 in
access-list 101 permit ip any 192.168.1.0 0.0.0.255 ;allow VLAN 1 access
access-list 101 deny ip any 192.168.0.0 0.0.31.255 ; deny traffic to other VLANs
access-list 101 permit ip any any ; allow Internet access
02-21-2002 11:29 PM
Thank you very much
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide