SSH need to block in vlan gateway

[vinoth13.c]

Hi ,

is there any way to block ssh in vlan gateway .. 

for example .

vlan 101

ip address 172.18.1.1/24

vlan 102

ip address 172.18.2.1/24

i want to block ssh for vlan 102 gateway ip(172.18.2.1) address . 

Please let me know .

[balaji.bandi]

You looking to block SSH from IP range (ip address 172.18.2.1/24)  - then below ACL help you.

access-list 100 deny tcp any  172.18.2.0 0.0.0.255 eq 22

access-list 100 permit ip any any

Then on your layer 3 SVI under the vlan interface apply it in or outbound

Interface vlan 2

XXXXXXXXXXXXXXXXXX

ip access-group 100 in

ip access-group 100 out