Hi,
Hoping for a little help here. I'm trying to restrict traffic from certain vlans to a licence dongle server.
To make it easy, I've gone with a nice simple extended access list in a lab. I want to stop host2 (10.10.10.2) from pinging host1 (10.10.10.1). here is my access list.
IP access list TEST
10 deny ip any host 10.10.10.1/32
Host1 is plugged into Eth1 and Host2 is plugged into Eth2.
interface Ethernet1/1
ip access-group TEST out
spanning-tree port type edge
no shutdown
However, this doesn't seem to work. Is the answer simple, you can't do Outbound ACLs? If I test this within IOS, the option to enable outbound access lists on the port doesn't even exist; only inbound.
Thanks
