cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
738
Views
0
Helpful
2
Replies

SG300 - Filtering interVLAN routing

Cedders
Level 1
Level 1

Hello everyone,

 

I have a SG300 (Layer 3 mode on) with 3 VLANs (1, 2, 3) and 2 DHCP pools enable on VLAN 2 and 3. 

IPs are well attributed to specific VLANs and interVLANs routing is OK.

 

I would like to know if it is possible to filter according to IPSource and/or IPDest from a VALN to another ?

 

Thanks in advance.

All the best.

Cedders

1 Accepted Solution
2 Replies 2

Cedders
Level 1
Level 1

Hello Balaji Bandi

 

Thanks for your reply.
I have tried with ACLs but it comes with another "issue", IPs are not allocated to clients on VLAN / Ports I applyed the ACL to.

 

I have tried this but I definitly wrong somewhere :

[found my error :
interface gigabitethernet1
service-acl input ACL1 default-action permit-any <<Missing

switchport trunk native vlan 2
]


vlan database
vlan 2-3
exit
ip dhcp server
ip dhcp pool network_A
address low 192.169.17.1 high 192.169.17.10 255.255.255.0
exit
ip dhcp pool network_B
address low 192.168.17.10 high 192.168.17.15 255.255.255.0
exit
bonjour interface range vlan 1
ip access-list extended ACL1
permit 67 any any ace-priority 1
permit 68 any any ace-priority 2
deny ip 192.169.17.1 0.0.0.0 192.168.17.10 0.0.0.0 ace-priority 10
exit
!
interface vlan 1
no ip address dhcp
!
interface vlan 2
name "Test- 169.17"
ip address 192.169.17.254 255.255.255.0
!
interface vlan 3
name "Guest - 168.17"
ip address 192.168.17.254 255.255.255.0
!
interface gigabitethernet1
service-acl input ACL1
switchport trunk native vlan 2
!
interface gigabitethernet2
switchport trunk native vlan 2
!
interface gigabitethernet3
switchport trunk native vlan 2
!
interface gigabitethernet4
switchport trunk native vlan 2
!
interface gigabitethernet5
switchport trunk native vlan 3
!

Thanks for your time !

Stay safe