I have the following VLANs setup on a Cisco SF300-24PP L3 Switch:
- VLAN 99: 192.168.99.254 255.255.255.0 [default]
- VLAN 101: 192.168.1.254 255.255.255.0
- VLAN 102: 192.168.2.254 255.255.255.0
I have the switch ports assigned to those VLANs as follows:
FE1 - VLAN101
FE2 - VLAN101
FE3 - VLAN102
FE4 to FE24 -VLAN99
I want a specific PC connected on FE1 (VLAN101), IP address 192.168.1.100, to be able to talk to all devices on VLAN102 (FE3) and also be able to talk to the switch itself (VLAN99 IP address 192.168.99.254).
All other devices should only see within their subnet.
How is this achieved please? With ACLs?
Examples would be good (I'm a relative novice).