I have two 4900's that are core switches with various vlans on them. One of these vlans has an edge router and a firewall connected on each core switch and the vlan is allowed on the trunk between the 4900's.
So 4900#1 and 4900#2 both have vlan xyz1 with two ports assigned to this vlan. There is a firewall in one port and an edge router in the other port so they may communicate rather than them being directly connected. Then the VLAN is allowed on the trunk between the two cores. The subnet is a /28 to accommodate the devices in the "DMZ".
I have been advised that we should implement a VACL to further secure the traffic in this vlan.
Can anyone explain how or why we would do this?
Thank you!!!
