ACL not working

[FabioLanza89974]

Hi,

I have three vlans: user, wireless, dmz. I want to prevent traffic from dmz to user and from dmz to wireless. I implemented these ACLs but it's not working. Traffic is still being allowed. Can you please let me know if I'm doing anything wrong?

ip access-list extended "dmz -> user"
deny ip 10.0.0.0 0.0.0.255 10.0.1.0 0.0.0.255 ace-priority 1
exit
ip access-list extended "dmz -> wireless"
deny ip 10.0.0.0 0.0.0.255 10.0.2.0 0.0.0.255 ace-priority 1
exit

Thanks,

Fabio

[Muhammad Awais Khan]

Hi,

Did you apply it to interface at interface level command " Access-Group input dmz -> user  ? If so which interface you applied ?

[FabioLanza89974]

I am not very skilled with the CLI so I did everything via the GUI. I don't think that I applied it at interface level. If you share the command with me to try out via CLI I could execute it. Thanks.

[Georg Pauwen]

Hello,

whar device is this GUI screenshot from, which router/switch model ? Somewhere in the GUI there should be a 'Save' and/or 'Apply' button, make sure you have that checked...

[FabioLanza89974]

I did save. Device model is Small Business Cisco SG350-10MP.

[balaji.bandi · Accepted solution]

have you bind the ACL to VLAN ?

[FabioLanza89974]

No, after binding it started working. Thanks.

[balaji.bandi]

Glad all working as expected after binding ACL to VLAN. Cheers!