Basic ACE Rule testing fails on SG350-10P Switch

[Filomena]

Hi,

I configured a very basic ACE rule to debug switching issues I have on my network.

The switch is running on a single VLAN1, without extra modifications or services activated

Interface: VLAN1, IP Address type: DHCP, IP address: 10.0.0.11, Mask 255.255.255.0

I added an ACL rule with this ACE rule in GUI and saved the configuration:

Priority: 1, Action: deny,  Protocol: Any (IP)

Source IP : 10.0.0.109, Wildcard Mask: 0.0.0.0

Destination IP: 10.0.0.38, Wildcard Mask: 0.0.0.0

However, I can still access the 10.0.0.38 server from 10.0.0.109 client, both directly connected to the switch !

The problem is that it is the same with more complex rules using IP ranges.

Please help me debug the issue.

[balaji.bandi · Accepted solution]

have you mapped or bind  the ACL to VLAN ?

[Filomena]

Many thanks, I wasn't aware I need to map it in the GUI

Is there any way to group ACL rules to be able to apply more than one ACL group to a single interface ?