3650 VLAN ACL - LAN BASE or IP BASE

[mlsc]

Hello

A quick question. There is some confusion on the Cisco web sites about the VLAN ACL function. I am purchasing a 3650, do I need a LAN Base or IP Base for this functionality?  My needs are pretty basic, I have 4 VLANs, I just want to be able to stop traffic from entering 1 VLAN on occasion. In other words, I need to turn on traffic and trun off traffic to one of the VLANs.

Thanks, Michael

[Seb Rupik]

Hi there,

Are you configuring the 3560 as the router for these VLANs? If so it sounds like you just need ordinary ACLs configured on the SVIs, not VACLs.

cheers,

Seb.

[mlsc]

Hi Seb

Yes, ordinary ACL on ISV, not VACL. Sorry for the confusion. Is this a basic function found in the LAN base image of the 3650?

thanks, Michael

[Seb Rupik · Accepted solution]

Hi Michael,

SVIs are supported under the LAN Base feature set. Although not explicitly listed, ACLs will be included under 'Enterprise access security' ;

https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3650-series-switches/q-and-a-c67-729531.html

...see table 3

cheers,

Seb.

[mlsc]

Perfect. Thank you.