how to filter traffic from VLAN 10 to VLAN 20, but allow traffic from VLAN 20 to VLAN 10??

[marinarios]

Hi everyone, i have a doubt...

I have vlan 10 and vlan 20

I want filter traffic from VLAN 10 to VLAN 20, but allow traffic from VLAN 20 to VLAN 10...

Do I need to use acl or vacl?

Thanks

[paul driver]

Hello

For tcp traffic -You can use a SVI acl to accomplish this:

Example:
vlan 10= 10.10.10.10.0/24
vlan 20= 20.20.20.0.0/24

 
Ip access-list extended Stan
permit tcp 10.10.10.0 0.0.0.255 any established
deny tcp 10.10.10.0 0.0.0.255 any
permit ip any any


int vlan 20
Ip access-group Stan out

res
Paul

[marinarios]

Thanks Paul Driver

[Ganesh Hariharan]

Hello Marinarios,

As suggested by Paul , You can apply ACL on SVI to allow or deny traffic for specifc VLAN.

Have a look on the below link for basic of ACL for more clarity.

ACL Basics

Hope it Helps..

-GI