Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi all,I have a Cisco WS-C3560X-24 with 6 VLANs:VLAN 1: 192.168.1.0/24VLAN 2: 192.168.2.0/24VLAN 3: 192.168.3.0/24VLAN 4: 192.168.4.0/24VLAN 5: 192.168.5.0/24VLAN 6: 192.168.6.0/24I want to configure ACL so that: All VLANs can access VLAN 1, only VLA...
Thank @Georg Pauwen and @Giuseppe Larosa again for your helpful advice.Please be noted that i just want to block interVLAN access.I already had another policy to allow all vlans go to internet.Let me try your advice and give feedback.Thank all again...
@Giuseppe Larosa Ok, thank for your comment. What i need is only one way blocking . Vlan 1, 2 can access each other and all vlansvlan 3,4,5,6 can access vlan 1 but cannot access each other Can you help me with simple extended ACL ?Thank you!
Thank @Giuseppe Larosa That's a nice explanation. But i confused something, can you help to explain more? You said: "I am afraid that reflexive ACLs may be not supported on a multilayer switch like yours." -> That means my switch don't support runn...
Thank @Naresh Murali so much for your advice!Sorry for my missing expectation:regarding vlan 1,2: they can access each other and access all the rest vlans.So i have to add 1 more line as below, right? permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0...