atomicgia wrote:
Hi i have this situation with a router 877 ios 12.4T:
interface vlan 2
ip address 192.168.1.0 255.255.255.0
interface vlan 1
ip address 192.168.0.0 255.255.255.0
interface Lo1
ip add 10.10.10.0 255.255.255.0
1)i would like to block any type of traffic to vlan 2(internet,vlan1 ftp etcc)
2)i would like to permit only to 192.168.0.200/201/202 ip address of vlan 1 to access into vlan 2
3)i would like to permti lo1 user to access into vlan 2 and vlan 1
Tx for help
Bye
interface vlan 2
ip address 192.168.1.0 255.255.255.0
ip access-group vlan2_restrict out
ip access-list extended vlan2_restrict
permit ip host 192.168.0.200 any
permit ip host 192.168.0.201 any
permit ip host 192.168.0.202 any
permit ip host 10.10.10.0 any
Note that this still allows unidirectional access from VLAN2, just not to VLAN2.
-Ryan
