Hi all,
I' like someone to confirm if my conception about configuring and applying VACL is correct.
Suppose on SW-1 which connects through a trunk to SW-2 there are several access ports in different vlans.
Also in SW-2 there are except the trunk port towards SW-1 other ports that connect to servers belonging to several vlans or have a trunk port toward SW-2.
I want to ensure that traffic inside vlan 100 (in which belong some ports of SW-1 and SW-2) is originated only from subnet 192.168.16.0/24
#access-list 1 permit 192.168.16.0. 0 0.0.255
#vlan access-map vlan100 10
#match ip address 1
#action forward
#vlan access-map vlan100 20
#action drop
#vlan filter vlan100 vlan-list 100
I suppose that these commands should be applied to both switches.
Is that correct or do i miss something?
thanks in advance
Athanasios
