Dear All,
Please advise on the below.
Say in vlan 3 i have hosts 10.1.1.1 and 10.1.1.2. I have applied the vlan filter as below. According to the Cisco DOC for VACL, even if there is a deny for the host, it will still check the next sequence and if there is a permit any time below for those IP, it will still allow th traffic. Can someone please advise if my understanding is correct?
So can the two hosts communicate with each other?
vlan access-map testing 10
match ip address testing
action forward
vlan filter test vlan-list 3
And my Access list is as below
ip access-list extended testing
deny ip any any
permit ip any any
Thanks
