Access List

[LinkedIN]

Hi,

i have server ( 192.168.1.16) , am asking to how deny any traffic to ( 192.168.1.0/24 and 172.200.1.0/24), and permit others subnets .

 switch is WS-C3850-48T

thanks

[Deepak Kumar]

Hi, 

this is possible through VLAN ACL on the core switch.  as below 

ip access-list extended TestACL
deny ip 192.168.1.0 0.0.0.255 host 192.168.1.16
deny ip 172.200.1.0 0.0.0.255 host 192.168.1.16
permit ip any any
!
vlan access-map TestVACL
match ip address TestACL
action forward
!
vlan filter TestVACL vlan-list 10 <Server VALN ID 10>

more information: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/security/configuration_guide/b_sec_3se_3850_cg/b_sec_3se_3850_cg_chapter_01010.html

Regards,

Deepak Kumar

[LinkedIN]

"vlan filter TestVACL vlan-list 10 <Server VALN ID 10>"

what does this mean ?

[Deepak Kumar]

Menas -  Applies the VLAN access map to the specified VLANs. In your case, it is server VLAN.

Regards,

Deepak Kumar