VACLs are configured as a VLAN access map, in much the same format as a route map. A VLAN
access map consists of one or more statements, each having a common map name
A VACL can either drop a matching packet, forward it, or redirect it to another interface. The
TCAM performs the entire VACL match and action, as packets are switched or bridged within
a VLAN, or routed into or out of a VLAN.
Finally, you must apply the VACL to a VLAN using the following global configuration
command:
Switch(config)# vlan filter map-name vlan-list vlan-list
For example, suppose that you need to filter traffic within VLAN 99 so that host 192.168.99.17
is not allowed to contact any other host on its local subnet. Access list local-17 is created to
identify traffic between this host and anything else on its local subnet. Then a VLAN access
map is defined: If the local-17 access list permits the IP address, the packet is dropped;
otherwise, the packet is forwarded
Switch(config)# ip access-list extended local-17
Switch(config-acl)# permit ip host 192.168.99.17 192.168.99.0 0.0.0.255
Switch(config-acl)# exit
Switch(config)# vlan access-map block-17 10
Switch(config-access-map)# match ip address local-17
Switch(config-access-map)# action drop
Switch(config-access-map)# vlan access-map block-17 20
Switch(config-access-map)# action forward
Switch(config-access-map)# exit
Switch(config)# vlan filter block-17 vlan-list 99
in ur case make it like
Switch(config)# ip access-list extended local-17
Switch(config-acl)# permit tcp host 192.168.99.17 192.168.99.0 0.0.0.255 eq 1761
and so the same idea for any source distination and port
good luck
if helpful Rate
