I have a Catalyst 3750 switch acting as a core switch. I want configure access list on the switch to allow only specific ports to be accessible and deny all others.
Here is my access list
access-list 100 permit tcp any host 192.168.20.20 eq 25
access-list 100 permit tcp any host 192.168.20.20 eq 110
access-list 100 permit udp any host 192.168.20.20 eq 53
access-list 100 permit tcp any host 192.168.30.100 eq 80
access-list 100 permit tcp any host 192.168.30.30 eq 445
access-list 100 permit ip any host 192.168.10.10
access-list 100 deny any any log
When I apply this list to the VLANs incoming there is no internet access to that VLAN clients.
192.168.10.10 is connected to the ISP, and configured as default route on the core switch.
How can I accomplish this without breaking the internet access?
Thanks
