ACCESS LIST (NEXUS 7706)

[slimer411]

Created an access list that will give vlan 100 (192.168.100.0/24) access to only 192.168.50.3/32 IP only. The rest will be denied. 

ip access-list Test

11 permit ip 192.168.50.3/32 any

Vlan interface 100
ip access-group test out

Note that the gateway of 192.168.100.0 and 192.168.50.3 are on the same switch.

I tried the ip access-group test in 

Still able to access all network in the switch which should not be. 

[Jon Marshall]

Your access list does not match your description. 

ip access-list Test
permit ip 192.168.100.0/24 192.168.50.3/32

vlan interface 100
ip access-group test in

Jon

[slimer411]

Tried testing again. Other IPs in the vlan are now denied except for the gateways, x.x.x.1. I think this is working now. Just wondering why I can still able to ping the gateway?

[Jon Marshall]

Do you mean you can ping all the other SVIs on the switch or just the vlan 100  SVI ? 

Jon

[slimer411]

I can ping all the other svi on the switch but not the other IPs on its network segment.