Newbie issues with layer 3 on SG250-08 switch.

[admin28373]

I would be grateful if I could be pointed in the right direction.

I have Vlans configured. Is it possible to route between PC(Vlan1) and pc(Vlan20) but only based on their ip address or macid?

I dont want all devices in both vlans to be accessible to each other.

[balaji.bandi]

check the ACL on SG series Switch :

https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-small-business-200-series-smart-switches/smb1440-bind-access-control-list-acl-to-an-interface-on-200-300-seri.html

https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-350-series-managed-switches/smb3025-configure-ipv4-based-access-control-list-acl-and-access-cont.html

[admin28373 · Accepted solution]

Thank you for acl info. How do I enable inter lan routing?

[Georg Pauwen]

Hello,

since you apparently have access to the command line, just configure 'ip routing' in global config mode (page 405 of the attached CLI command reference):

--> To enable IP routing, use the ip routing command in global configuration mode. To disable IP routing, use the no form of this command.

https://www.cisco.com/c/dam/en/us/td/docs/switches/lan/csbms/250_/2_4_5/cli_guide/cli_sx250_2_4_5.pdf

[balaji.bandi · Accepted solution]

based on the information you posted originally assuming that your Layer3 working now you want to block IP to IP communication by putting ACL, 

If this is not the case, then you need to enable Layer 3 feature in the SG switch

https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-small-business-300-series-managed-switches/smb5073-switching-to-layer-3-mode-on-the-sf-sg-300-series-switches.html