3550 as firewall

[lagartijo]

Hi, i´m using a 3550 - 12G switch router as a core switch at my companys office, i have configure a series of vlan and the switch is making intervlan routing by default, the problem is that a i need to setup per vlan security, the classic extended acl´s are not an option because the scenario needs to have all vlan outbound traffic open and the inbound traffic restricted with just some ports open (www, ftp, Databases, ssh, etc.), i have tryed with reflexive acl but 3550 doesn´t support this feature neither CBAC and this is an urgent case. What can I do??

1 x Cisco 3550 - 12G (EMI) (core - InterVLAN Routing)

10 x Cisco 2950-SX Access Switch

3 x Cisco 2950-T Access Switch

[wong34539]

3550 cannot be used as firewall.

Try:

http://www.cisco.com/en/US/products/hw/switches/ps646/prod_release_note09186a00801a63af.html

[Fernando_Meza]

mmm ... It seems you might need to use another device for your intervlan routing such a PIX or an ASA .. but I guess that will not make the customer very happy ..