Help with ACL

[TvdR03]

Hello everyone,

I've been trying to make a network using a server, a switch and a router.

Now i want to create acl's so vlan 10 cant connect to vlan 20 and 50 but can still connect to vlan 30.

I also want that vlan 10 can't connect to the server for the TV. I also would like this for vlan 20.

I also want that vlan 20 can't connect to vlan 10 but can still connect to vlan 30.

I uploaded my network as a zip file.

I hope you guys can help me.

Greetings,

Tom

[M02@rt37 · Accepted solution]

Hello @TvdR03 

Regarding the different subnet on your PT:

ip access-list extended VLAN10_ACL
deny ip 192.168.10.0 0.0.0.255 192.168.20.0 0.0.0.255 
deny ip 192.168.10.0 0.0.0.255 192.168.50.0 0.0.0.255 
deny ip 192.168.10.0 0.0.0.255 host 192.168.100.100 
permit ip any any 

ip access-list extended VLAN20_ACL
deny ip 192.168.20.0 0.0.0.255 192.168.10.0 0.0.0.255 
deny ip 192.168.20.0 0.0.0.255 192.168.50.0 0.0.0.255 
deny ip 192.168.20.0 0.0.0.255 host 192.168.100.100 
permit ip any any 

Apply acl on sub-interfaces:

interface GigabitEthernet0/0/0.10
ip access-group VLAN10_ACL in

interface GigabitEthernet0/0/0.20
ip access-group VLAN20_ACL in