Haris,
My reading of your requirment is basically you
want to prevent the students from acessing the staff vlan
May be this would help
Apply on the intervlan router (3560)
!
ip access-list extended BLOCK-STUDENTS-TO-STAFF
deny ip any 192.168.10.0 0.0.0.127
permit ip any any
!
!
!
interface vlan 2
description *** STAFF VLAN 2 ***
ip address 192.168.10.1 255.255.255.128
!
!
!
interface vlan 3
description *** STUDENT VLAN 3 ***
ip address 192.168.10.129 255.255.255.192
ip access-group BLOCK-STUDENTS-TO-STAFF in
!
!
Regards,
Alex.
Please rate useful posts.
Regards,
Alex.
Please rate useful posts.