12-03-2020 03:44 AM
Hello everyone,
I have a SG300 (Layer 3 mode on) with 3 VLANs (1, 2, 3) and 2 DHCP pools enable on VLAN 2 and 3.
IPs are well attributed to specific VLANs and interVLANs routing is OK.
I would like to know if it is possible to filter according to IPSource and/or IPDest from a VALN to another ?
Thanks in advance.
All the best.
Cedders
Solved! Go to Solution.
12-03-2020 04:09 AM
yes you need to have ACL /ACP to restrict.
Follow below thread :
how to create ACL :
https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-confaccesslists.html
12-03-2020 04:09 AM
yes you need to have ACL /ACP to restrict.
Follow below thread :
how to create ACL :
https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-confaccesslists.html
12-04-2020 05:38 AM - edited 12-04-2020 05:49 AM
Hello Balaji Bandi
Thanks for your reply.
I have tried with ACLs but it comes with another "issue", IPs are not allocated to clients on VLAN / Ports I applyed the ACL to.
I have tried this but I definitly wrong somewhere :
[found my error :
interface gigabitethernet1
service-acl input ACL1 default-action permit-any <<Missing
switchport trunk native vlan 2
]
vlan database
vlan 2-3
exit
ip dhcp server
ip dhcp pool network_A
address low 192.169.17.1 high 192.169.17.10 255.255.255.0
exit
ip dhcp pool network_B
address low 192.168.17.10 high 192.168.17.15 255.255.255.0
exit
bonjour interface range vlan 1
ip access-list extended ACL1
permit 67 any any ace-priority 1
permit 68 any any ace-priority 2
deny ip 192.169.17.1 0.0.0.0 192.168.17.10 0.0.0.0 ace-priority 10
exit
!
interface vlan 1
no ip address dhcp
!
interface vlan 2
name "Test- 169.17"
ip address 192.169.17.254 255.255.255.0
!
interface vlan 3
name "Guest - 168.17"
ip address 192.168.17.254 255.255.255.0
!
interface gigabitethernet1
service-acl input ACL1
switchport trunk native vlan 2
!
interface gigabitethernet2
switchport trunk native vlan 2
!
interface gigabitethernet3
switchport trunk native vlan 2
!
interface gigabitethernet4
switchport trunk native vlan 2
!
interface gigabitethernet5
switchport trunk native vlan 3
!
Thanks for your time !
Stay safe
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide